# What Ring Signatures Actually Do in Monero, and Why the Ring Size Number Matters
META: A plain explanation of Monero ring signatures, why the network moved to ring size 16, how Bulletproofs+ and view tags fit in, and what this means for your real-world privacy.
>
Ask someone why Monero transactions are private and you will usually hear the word “ring signatures” followed by a shrug. The concept is simpler than it sounds, and understanding it explains a lot about why the network periodically changes a number called the ring size, and why that change matters to anyone holding XMR.
# The problem a ring signature solves
A normal blockchain transaction publicly references the exact coins it spends. Anyone can see which output is being spent and trace it back through history. Monero breaks that link by having the signer of a transaction reference a set of previous outputs on the chain, only one of which is actually being spent, and producing a signature that proves ownership of one of them without revealing which. It is like signing a cheque in a group of sixteen people where only one of you owns the account, and the signature mathematically cannot reveal which one. Those other outputs are called decoys, and the whole group is the ring.
Because every output looks equally likely to be the real spender, an outside observer cannot follow the money by reading the chain. This is the core of Monero’s untraceability, layered on top of stealth addresses (one-time destination addresses that hide the receiver) and confidential amounts.
# Why ring size 16
The ring size is how many outputs sit in each ring. Bigger ring, bigger haystack. For years the network used a ring size of 11, and in the August 2022 network upgrade, the v0.18 “Fluorine Fermi” release, consensus moved it to 16. That was described at the time as the largest absolute increase ever in the base anonymity set of every transaction on the network. The logic of that upgrade applies just as much today: your transaction’s privacy is only as good as the plausible deniability around its real spend, and a real spend mixed with 15 decoys is materially harder to statistically attack than one mixed with 10.
Importantly, the ring size is fixed by consensus, not a user setting. You cannot “turn up” your own privacy with a bigger ring in the standard wallet, because non-standard rings would themselves stand out. Everyone transacts with the same base protection, which is also why it is bad practice to spend old outputs created before privacy improvements landed: older rings from smaller-ring-size eras offer weaker cover.
# Bulletproofs+: hiding amounts without bloating the chain
The other headline of the Fluorine Fermi upgrade was Bulletproofs+, the range-proof system that lets Monero hide transaction amounts while proving no coins are created out of thin air. Range proofs are the largest data component of a Monero transaction, so making them smaller and faster matters at scale. Bulletproofs+ cut typical transaction size by roughly 5 to 7 percent and improved typical verification performance by a similar margin. That matters doubly for users running their own nodes: lighter transactions mean faster validation for everyone. If you run a node, our guide to [running your own Monero node in 2026](https://monerocryptonews.com/2026/08/18/running-your-own-monero-node-2026-costs-hardware-steps/) covers the practical hardware and bandwidth picture.
# View tags: the quiet upgrade that halved sync pain
The least glamorous but most felt change from that upgrade was view tags. Before them, a wallet scanning the chain had to attempt a costly cryptographic check on every output of every transaction to see if it was addressed to you. View tags add one byte that lets the wallet skip about 99 percent of that work for outputs that are not yours, cutting wallet sync times by an estimated 30 to 40 percent. If you have restored a wallet from seed recently and found it faster than horror stories from years past, view tags are a large part of why.
# What this does not protect you against
Honesty about limits is part of using privacy tech responsibly. Ring signatures obscure the on-chain link, but they do not make you invisible. Timing analysis, IP leakage (use Tor or i2p if that threat matters to you), amounts you reveal yourself, and reusing exchanges that chain-analyse their customers are all outside the ring signature’s job. Proving a payment happened without revealing anything else is a separate mechanism: see our explanation of [verifying a transaction with a view key](https://monerocryptonews.com/2026/07/30/how-to-verify-a-monero-transaction-using-a-view-key-and-why-it-matters/) and how transaction proofs work for exactly this case.
# Why the numbers keep moving
Monero’s development path is a steady replacement of every layer with stronger primitives: bigger rings, better proofs, and eventually full-chain membership proofs and the Seraphis wallet architecture, which researchers have discussed for years as the destination beyond the current ring model. Each step trades computation for a much larger anonymity set. The lesson for users is simple: keep your wallet software current, because network upgrades are consensus-wide, and spending patterns from old software eras carry old, weaker cover.
The ring signature is not magic. It is a carefully engineered plausible-deniability machine, and the ring size is its dial. Sixteen is the current setting, and every up-to-date transaction you make gets that protection automatically.