Monzero Web Wallet
Open the wallet

Verify this release

The web wallet is a fixed set of files. Before you trust it with real XMZ, you can check that the files this site serves are exactly the ones the Monzero project released and signed.

This release

Release 55f65df · mainnet · built 2026-11-01

Source: web-wallet/ at commit 55f65df in github.com/Nightglass-Protocol1/Monzero-source

a9255c2940e61c4fd56e73abbd4edb9f8a75bc3cc73158a77fe233e874fafa5e  index.html
c7071e4c57a0026e4ce055961309b9ffefd60b333e93031f42247c525bbb2258  style.css
6b03dc2f3091405f29750f90d254d95d5ed21173db2aa7a4c2181c18a8162485  app.js
7c8222da119c62d1b00d30098ebea033ba93a450997669c4185f403509ed1629  app.js.LICENSE.txt
1ec45305417183b2a1d4a7962bdb9b09bfb55329dc56bf493212aa9b179a07d3  monero.worker.js

SHA256SUMS · SHA256SUMS.asc (signature)

1. Check the signature

The hash list is signed with the Monzero release key. Its fingerprint, also published at monzero.org/download:

4C37 C618 789F 86D8 1FEF  28DF 390A EFB7 35F2 70D6
gpg --verify SHA256SUMS.asc SHA256SUMS

First import the public key once: curl -s https://monzero.org/releases/monzero-release-public.asc | gpg --import

You should see Good signature from "Monzero Release <security@monzero.org>" and Primary key fingerprint: 4C37 C618 789F 86D8 1FEF 28DF 390A EFB7 35F2 70D6. gpg also names the key that made the signature, 562B A9C3 A713 E4E0 5A1B 24F2 5794 0142 228A 8336: that is the signing subkey of the same release key. The warning "This key is not certified with a trusted signature" is normal for a key you have not personally certified; what matters is the primary fingerprint above.

2. Check the files

Download the files this site serves and compare them with the signed list:

for f in index.html style.css app.js app.js.LICENSE.txt monero.worker.js; do curl -sO https://wallet.monzero.org/$f; done
sha256sum -c SHA256SUMS

Every line must say OK. Anything else means the files differ from the release: do not enter your recovery words, and tell the Monzero team.

3. Build it yourself (optional)

The wallet can be rebuilt from the source with web-wallet/build.sh and web-wallet/app/build.sh; compare the result with the signed list above. (Byte-for-byte reproducible builds are being checked; until that is confirmed, rely on the signature.)

Staying safe