TrueHold

Bitcoin watch-only: track a wallet without giving up the keys

A watch-only Bitcoin wallet reads balances from public data alone. Address or xpub, what the gap limit breaks, and the privacy you trade away.

Published
Azat TulegenovAzat Tulegenov4 min read

Bitcoin makes watching easy and people make it hard. Every balance and every transaction is already public; nothing about reading a wallet requires a key that can spend from it. The only real decisions are what you hand over, an address or an xpub, and what you give away by doing it.

Address or xpub

A single address shows the coins at that address and nothing else. That is fine for a cold-storage stack that never moves, and wrong for a wallet you actually use, because modern Bitcoin wallets generate a fresh address for every receive and put change at addresses you have never seen. Watch one address and your balance will look wrong the first time you spend.

An xpub is the extended public key for a whole account. From it, software can derive every receiving and change address the wallet will ever use, and add them up. It cannot sign anything: the private half stays in your wallet. The full mechanics are in what is an xpub.

One address

What gets read

Coins at that address only

Right for

A single cold-storage deposit that never moves

An xpub (or zpub, ypub)

What gets read

The whole account, past and future addresses

Right for

Any wallet in ordinary use

A seed phrase

What gets read

Everything, including the ability to spend

Right for

Nothing. No tracker needs this.

The gap limit, and why a balance goes missing

Software walking an xpub does not check addresses forever. It stops after a run of empty ones, conventionally twenty, on the assumption that the wallet in normal use never skips that far ahead. That assumption breaks when you generate a pile of receiving addresses without using them, or restore a wallet that did. The coins are not lost; the watcher simply stopped looking before it reached them. Raising the gap limit in whatever software you are using finds them again.

What you give away

This is the part that gets skipped. An address reveals one address. **An xpub reveals the entire account, forever**, including every future receive and every change output. Anyone holding it can follow the wallet from that moment on and reconstruct what came before. It cannot spend, so it is not a theft risk, but it ends the wallet’s privacy for good, and unlike a password you cannot rotate it without moving the coins to a new account.

The practical rule that follows: give an xpub to software you would trust with a full statement of your holdings, and give a single address to everything else. If you want the balance visible to a tool but the history private, the answer is a separate account for the coins you are willing to expose, not a partial xpub, which does not exist.

Setting it up

  • Export the extended public key from your wallet. Hardware wallets show it under account details; Sparrow, Electrum and Ledger Live all export one without touching the seed.
  • Check the prefix matches your address type: bc1 addresses need the zpub your wallet gives for that account, not the legacy xpub.
  • Paste it into the watching software. Nothing you do here can move coins, so a mistake costs a wrong balance, not a loss.
  • If the total looks short, raise the gap limit before assuming anything is missing.

A wallet read this way sits beside everything else you hold rather than in its own app, which is the point: see tracking a Bitcoin wallet for what that looks like, and how to track any wallet address for the same idea on other chains.

Frequently asked questions

What is a watch-only Bitcoin wallet?

A wallet that holds public keys only. It can show balances and history and derive new addresses, and it cannot sign a transaction, because the private half of the key never leaves the wallet that made it.

Can someone steal my Bitcoin with my xpub?

No. An xpub derives public addresses; spending needs the private key, which it does not contain. What it costs you is privacy: the holder can see the whole account, past and future.

Why does my watch-only balance look too low?

Usually the gap limit. Software stops deriving addresses after a run of about twenty empty ones, so coins sitting beyond a long unused stretch are not found. Raise the limit and rescan.

Should I use an address or an xpub?

An address for a single cold deposit that never moves; an xpub for any wallet in ordinary use, because change addresses will otherwise make the balance wrong the first time you spend.

What is the difference between xpub, ypub and zpub?

The address format they describe: legacy, wrapped SegWit and native SegWit respectively. The key is the same idea in each case; paste whichever your wallet exports for the account you want watched.

See your whole portfolio in one view

TrueHold is an AI-native financial and DeFi platform for modern capital. Paste a wallet or link an exchange to see every chain in one view, free.

Open TrueHold →