Privacy & keys
The short version: your money in Murk lives as private notes, and a set of keys — derived from your wallet, never shared — decides who can see and spend them.
How privacy works
When you veil, your token becomes a note: an encrypted record only you can open. When you send, swap, or reveal, your device proves — in zero knowledge — that you own enough to cover it, without revealing which notes, how much, or to whom. The Solana program checks that proof and updates the pool. To anyone watching the chain, one indistinguishable private action happened; the amounts and parties stay sealed.
Deposits and reveals touch the public world (that's the point of them), so those endpoints are visible. Everything in between is not.
Your keys
- Spend key — derived from a one‑time wallet signature when you unlock. It decrypts your notes and authorizes spends. It lives only in memory on your device and never reaches any server.
- Viewing key — a one‑way key derived from your spend key. It can see your notes and amounts but cannot spend them, and it can't be reversed back into your spend key. You share it only if you want someone (like an auditor) to verify your activity — see Compliant privacy.
Because everything derives from your wallet, you can walk up to a fresh device, connect the same wallet, and rebuild your full balance and history from the chain alone.
What others can see
| Who | Can see |
|---|---|
| The public / chain explorers | that you veiled or revealed (amount + your public address on those two steps only) — never your private balance, transfers, or swaps |
| Murk's servers | nothing that identifies you — they help your wallet sync and submit, but can't read your notes, link your activity, or move funds |
| Someone you give a viewing key | your notes and amounts, read‑only |
| An auditor, on request | that your funds come from an approved source — provable without revealing your balance or history (Compliant privacy) |