Monerujo review — the original Android Monero wallet
Who is this for? Readers following the Monero guide who want an Android wallet, and specifically want a Monero-only tool rather than Cake Wallet's multi-coin approach — with more advanced privacy features than either Cake Wallet or Feather Wallet offer.
Monerujo review
Who is this for? Readers following the Monero guide who want an Android wallet, and specifically want a Monero-only tool rather than Cake Wallet’s multi-coin approach — with more advanced privacy features than either Cake Wallet or Feather Wallet offer.
Monerujo (developer handle m2049r) was the first Android app built specifically for Monero, and has shipped continuously since 2017 — the 4.1.7 “Exolix” release came out in July 2026, ahead of Monerotopia. It’s open-source (Apache-2.0), Monero-only, and — despite the “minimal” framing it sometimes gets in comparison to multi-coin wallets — has one of the deepest feature sets of any wallet covered on this site: a Bluetooth-paired old-phone signer, duress-passphrase decoy wallets, Ledger support, and a purpose-built fix for one of Monero’s own real UX frictions.
Like Cake Wallet and Feather, Monerujo is a client — Monero’s own FCMP++ hard fork (9 August 2026) happens at the protocol level, so the sender-privacy upgrade from 16-member rings to a full-chain anonymity set applies to transactions you make from any up-to-date wallet without a change on your part. See the Monero guide for what FCMP++ changes.
Sidekick: a second phone as a Bluetooth-paired signer
Monerujo’s companion app Sidekick turns a spare Android phone into a dedicated signing device. Once paired, spending from the Sidekick-protected wallet requires approval on the second phone over Bluetooth — the main phone alone can’t authorize a transaction. The two devices communicate over encrypted Bluetooth, and the project’s own framing is deliberately about inconspicuousness: any old, cheap Android phone works, so having a Sidekick device doesn’t visibly mark you as owning a hardware wallet the way a dedicated hardware device would.
Compare this directly to Cake Wallet’s Cupcake, which solves the same underlying problem (an old phone as an air-gapped signer) but through QR codes instead of Bluetooth — Cake Wallet shows a transaction as a QR code, Cupcake scans and signs it offline, then shows the signed result back as a QR code to scan and broadcast. The practical difference: Cupcake’s signing device never has an active radio connection at any point, which removes Bluetooth itself as an attack surface; Sidekick’s live Bluetooth link is more convenient (no scanning back and forth) but means the signing device does have an active wireless connection during the approval step. Neither is “wrong” — it’s a real architectural tradeoff between convenience and a stricter air-gap, and which one matters depends on how seriously your threat model treats a paired Bluetooth connection as a risk.
Offset passphrases: decoy wallets for a coerced-disclosure scenario
Since version 2.3.1, Monerujo supports offset passphrases — an extra passphrase that mathematically shifts your normal seed into a different, but fully reproducible, second seed. Practically: you write down (or memorize) your real seed, and separately keep an offset passphrase. Entering the seed without the offset restores a different wallet than the one you actually use day to day.
The scenario this defends against is a coerced-disclosure situation — sometimes called an “evil maid” attack in security writing, or more broadly a duress scenario: someone forces you to hand over your seed phrase. If you give them the seed alone, they recover the decoy wallet, not your real funds. For the illusion to hold up under scrutiny, the decoy wallet needs to look genuinely used — occasionally sending it small amounts of real Monero is the recommended practice, not leaving it visibly empty.
Caveat, stated plainly: if you lose or forget the offset passphrase yourself, your seed alone is permanently insufficient to recover your real funds — there is no support path back from that. This is real, uncompromising security design, not a small inconvenience; it should only be used by readers who understand and accept that tradeoff, not adopted casually because it sounds clever.
PocketChange: solving Monero’s own “unlocked funds” friction
Monero has a real, structural UX friction that most reviews gloss over: when you spend a coin (UTXO) that doesn’t exactly match the amount you’re sending, your wallet generates change — and that change is locked for about 20 minutes before you can spend it again. If you want to make several purchases in quick succession, you can hit an unexpected wait.
Monerujo’s PocketChange feature solves this directly: when enabled, it proactively splits a larger coin into 10 smaller “pockets” (subaddresses) at a size you choose (the developer’s own suggested default is around 0.1 XMR), so you have multiple already-unlocked, ready-to-spend amounts on hand instead of one big coin that has to split and wait every time. It’s an optional, off-by-default feature aimed specifically at readers who spend Monero somewhat frequently, not a general recommendation for everyone.
Built-in swap, Ledger support, and view-only wallets
Contrary to the “Monero-only means minimal” assumption this comparison invites, Monerujo is not thin on features once you look past its single-coin scope:
- Built-in swap, via an official Exolix partnership — no account or KYC required for the swap itself, though (as with any swap integration covered on this site) the swap provider is still a real third party processing the exchange, not Monerujo itself.
- Ledger hardware wallet support — Monerujo can restore and use a wallet backed by a Ledger Nano S or later, keeping the private key on separate hardware.
- View-only wallets — load a wallet with only the view key to monitor balance and incoming transactions without spending capability, the same auditing use case described in the Feather Wallet review.
- OpenAlias support for human-readable payment addresses, custom or curated remote nodes, and Street Mode, which hides your balance from onlookers while using the app in public.
Comparison with Cake Wallet and Feather Wallet
| Monerujo | Cake Wallet | Feather Wallet | |
|---|---|---|---|
| Platform | Android only | Android, iOS, macOS, Linux | Linux, Tails, macOS, Windows |
| Coins | Monero only | Monero, Bitcoin, Litecoin, Ethereum etc. | Monero only |
| Built-in swap | Yes (via Exolix) | Yes | No |
| Old-phone signer companion | Sidekick (Bluetooth-paired) | Cupcake (QR-code, air-gapped) | No |
| Duress / decoy wallet support | Yes (offset passphrases) | Not a core feature | No |
| Ledger support | Yes | No | Yes (also Trezor) |
| View-only wallets | Yes | Not a core feature | Yes |
| Multisig | No | No | Yes |
| Local node support | Yes | Limited (per-coin custom node) | Yes |
| Open-source | Yes (Apache-2.0) | Yes (MIT) | Yes (BSD-3-Clause) |
| F-Droid | Yes, via its own repository | Yes, via its own repository | N/A (desktop) |
| Independent audit | Not known | One multisig review (2021) | Not known (bug bounty program instead) |
No single wallet in this trio wins outright. Monerujo is the deepest option for readers who want Monero-only and genuinely advanced privacy/security features (decoy wallets, a Bluetooth companion signer, Ledger support) without Cake Wallet’s multi-coin surface area. Cake Wallet is the practical pick for mobile readers who also want a built-in Bitcoin-to-Monero swap and prefer Cupcake’s QR-based air-gap over Sidekick’s Bluetooth link. Feather remains the desktop-first choice, and the only one of the three with multisig.
Getting started
Install: Google Play, or Monerujo’s own F-Droid repository (Monerujo is not in the default F-Droid index — add the project’s repository directly, the same situation as Cake Wallet). APK downloads are also available directly from the project.
Creating a wallet:
- Open Monerujo and choose “Generate Wallet” to create a new wallet, or restore an existing one from a seed
- Optionally set an offset passphrase during or after creation if you want decoy-wallet protection — understand the no-recovery tradeoff first
- Choose a remote node (curated list or your own), or point Monerujo at a local node you run yourself
- Write down your seed (and offset passphrase, if used) and store both separately from the phone
Setting up Sidekick (optional): install the separate Sidekick app on a spare Android phone, pair it with your main wallet over Bluetooth, and approve transactions from the second device going forward. Keep the Sidekick phone itself secured and, ideally, offline when not actively approving a transaction.
Minimum requirements: standard modern Android; exact minimum OS version depends on the current release — check the Play Store or F-Droid listing at install time.
Caveats
No independent third-party audit found. As with Feather Wallet, there’s no published formal security audit — this is a real gap for a wallet with genuine financial risk, even without any concrete indication of a problem.
Offset passphrases are unforgiving. Lose the passphrase, and your seed alone can never recover your real funds again. This is by design, not a bug, but it means the feature should only be used by readers who are confident they can reliably retain a second secret long-term.
Sidekick’s Bluetooth link is not a true air-gap. It’s more convenient than Cupcake’s QR-based flow, but a live Bluetooth connection during approval is a different, less strict isolation model than a device that never has any wireless connection at all.
Android only. No iOS version exists. Readers who want Monero on iOS should look at Cake Wallet instead.
Pros and cons
Pros
- Open-source (Apache-2.0), the original Android Monero wallet, shipping steadily since 2017 (4.1.7 in July 2026)
- Sidekick: Bluetooth-paired old-phone signer, an inconspicuous alternative to a dedicated hardware wallet
- Offset passphrases: genuine duress/decoy-wallet protection, not offered by Cake Wallet or Feather
- PocketChange directly solves Monero’s own unlocked-funds waiting problem
- Ledger support and view-only wallets
- Built-in swap (Exolix), no KYC required for the swap step itself
Cons
- No independent third-party security audit
- Android only — no iOS version
- Offset passphrases have zero recovery path if forgotten
- Sidekick relies on Bluetooth rather than a stricter air-gapped connection
Conclusion
Monerujo’s “Monero-only” scope disguises how deep it actually goes: Sidekick, offset passphrases, and PocketChange are three genuinely distinctive features, not just a stripped-down alternative to Cake Wallet. For readers who specifically want strong privacy/security depth in a single-coin Android wallet — and who are prepared to handle the real, unforgiving tradeoffs some of those features carry (especially offset passphrases) — Monerujo is a strong, mature choice.
Readers who want the same old-phone-signer idea with a stricter air-gap should compare Sidekick against Cake Wallet’s Cupcake directly. Readers on desktop, or who specifically need multisig, should look at Feather Wallet instead.
Next step
Coming from the Monero guide?
- Monero guide — how Monero works, how to buy it, and where an Android wallet fits in
Similar options
- Cake Wallet — mobile, multi-coin, built-in swap, Cupcake QR-based old-phone signer
- Feather Wallet — desktop-only, Monero-only, multisig and Trezor support
Want to go further?
- Choosing a password manager — store your seed and any offset passphrase here, not loose on your phone
- Privacy DNS guide — network privacy alongside financial privacy