xPub Keys

An xPub key, short for extended public key, is a master public key used in HD (Hierarchical Deterministic) wallets. It lets you generate an unlimited sequence of child public keys and wallet addresses from a single root key, without ever exposing or requiring access to your private key.

How xPub Keys Work

HD wallets, standardized under Bitcoin Improvement Proposals BIP-32 and BIP-44, work like a key tree. Your seed phrase generates a master private key at the root. From that root, the wallet derives child keys, grandchild keys, and so on, each with its own address. Your xPub key is the public counterpart to the master private key at that tree's root.

Because of how elliptic curve cryptography works, anyone with your xPub key can derive every public address your wallet has ever generated or will generate. They cannot spend from those addresses. But they can watch every transaction across all of them.

This is both a feature and a privacy risk. Think of the xPub key as a glass view into your wallet: read-only, but completely transparent.

Practical Uses of the xPub Key

The xPub key enables several useful workflows that would otherwise require exposing private keys.

• Watch-only wallets. You can monitor your portfolio and generate fresh receiving addresses on a hot device without your private keys ever touching an internet-connected machine. Your hardware wallet stays offline; the xPub does the address generation.
• Payment processors. Merchants who accept Bitcoin can give their payment processor only the xPub key. The processor generates a new receiving address for each customer checkout without being able to spend the received funds.
• Accounting and auditing. Businesses can share an xPub key with auditors so they can verify on-chain balances and transaction history without gaining the ability to move funds.
• Multi-signature setups. In a multisig wallet, each signer contributes their xPub key. The combined public keys generate shared addresses that require multiple signatures to spend from.

Privacy Risk: Handle xPub Keys Carefully

Sharing your xPub key is essentially sharing your complete financial history across every address in that wallet. Anyone who has it can see every deposit, withdrawal, and current balance tied to those addresses.

This is a significant risk if your xPub leaks. An attacker who obtains it cannot steal your funds, but they gain a full picture of your wealth and transaction patterns. That information has real value in targeted social engineering, blackmail, and wrench attacks.

Best practice is to treat your xPub key with nearly the same care as your seed phrase. Do not paste it into web services, share it in chat messages, or store it in plain text files on internet-connected devices.

xPub vs. ypub and zpub

The xPub key format uses a specific derivation path and address type. As Bitcoin address formats evolved, so did the key prefix conventions. A ypub key generates P2SH-wrapped SegWit addresses (starting with 3). A zpub key generates native SegWit addresses (starting with bc1). The underlying cryptographic mechanism is identical. The prefix simply tells compatible wallets which address format to derive.

Most modern wallets handle these distinctions automatically. You typically only need to know the difference when manually importing a key from one wallet application into another.

Sources

https://github.com/bitcoin/bips/blob/master/bip-0032.mediawiki
https://github.com/bitcoin/bips/blob/master/bip-0044.mediawiki
https://learnmeabitcoin.com/technical/extended-keys