Network: the VPN is inside the walletBoard: Infrastructure
Network
Sr. Member
★★★★
NET
Activity: live
Merit: measured
Online
Network: the VPN is inside the wallet« on: today »

Your computer has an internet address, and every server you talk to sees it, like a return address on an envelope. This screen replaces it. A VPN is built into the app, so there is nothing to install and nothing to forget to switch on. If the VPN drops, the app stops talking instead of leaking.

How to use it

  1. Get a VPN subscription that offers WireGuard files. Mullvad, Proton, IVPN and AirVPN all do, for a few euros a month. Download one file from their site.
  2. In the Network screen, paste the contents of that file and click connect.
  3. Click check exit IP. The address shown is what every server now sees instead of yours.
  4. Prefer Tor? Run Tor Browser, flip the switch to Tor, and the same traffic goes through Tor instead.

What it covers: everything this app sends, including the Monero wallet's connection to its node, the price data, the swap services and the trading data. What it cannot cover: other programs, and the Phantom browser extension, which has its own connection. The screen says which is which.

Run the browser checksWhat this site sees about you

Built-in WireGuard, technically

WireGuard is implemented in userspace inside Moneyero: the protocol via boringtun, a TCP/IP stack via smoltcp, and a local connector that only Moneyero's own HTTP client can reach. Paste a standard WireGuard configuration from any provider and connect.

  • Covers everything the app sends. Solana RPC, Jupiter, GeckoTerminal, CoinGecko, all four swap providers, the Claude API, and the Monero daemon link. DNS is resolved inside the tunnel.
  • Fails closed. No handshake, no requests. There is no fallback to the clear network for application traffic.
  • Proof on demand. One button fetches your exit IP through the tunnel itself and shows it next to the handshake age and byte counters.
  • Works with any provider that exports WireGuard. Mullvad, Proton, IVPN, AirVPN, Obscura's Mullvad exits, your own server.
  • Tested against a real peer. The test suite brings up a WireGuard peer in-process and pushes a hostname lookup and 100 KB of TCP through the whole path before a build is considered good.

Or Tor

The same single switch can point at a Tor SOCKS port (daemon on 9050, Tor Browser on 9150). The identical set of requests then goes through Tor, with the same fail-closed behaviour. check.torproject.org confirms the exit is a relay.

Network
Sr. Member
★★★★
NET
Online
Re: Network — technical details: scope, system tunnel, checks« Reply #1 »
Scope, stated plainly
The built-in VPN protects traffic that Moneyero itself generates. It cannot capture other programs, and it cannot capture a browser extension such as Phantom, which uses the browser's own network path. For whole-machine coverage Moneyero also controls the system tunnel below, and the interface shows which layer is protecting which traffic.

System WireGuard

  • Import configs, bring tunnels up and down through the official binaries (needs Administrator on Windows), read live handshake and transfer counters.
  • Kill-switch state is inferred from the config and labelled as inferred. Moneyero writes no firewall rules.

Checks

Exit IP via tunnelFetched through the built-in tunnel's own connector, independent of any other setting.
Exit IP via app pathWhatever the app would use right now: VPN, Tor, or clear. Reports Tor-exit status.
Exit IP directDeliberately bypasses everything for comparison. Reveals your underlying address to the check service; the button says so.
DNS leakTen unique hostnames resolved through the operating-system resolver, then bash.ws reports which resolvers reached it.
WebRTCIn browser mode, a STUN candidate that differs from your HTTP address means WebRTC bypasses your proxy.