A watch-only wallet lets you check your Bitcoin balance and create unsigned transactions on an internet-connected device without ever exposing your private keys. Here is how to set it up.
A watch-only wallet is one of the most underused Bitcoin security tools. It lets you monitor your holdings, generate receiving addresses, and prepare unsigned transactions — all without your private keys ever touching an internet-connected device.
A watch-only wallet contains only your extended public key (xpub, ypub, or zpub — depending on address format). The public key lets the software:
What it cannot do: spend Bitcoin. Without the private key, no signature is possible.
Security: Your hardware wallet (Coldcard, Trezor, Ledger) never connects to the internet during routine balance checking. You only connect it when actually signing a transaction.
Convenience: Check your balance on your laptop or phone without the physical hardware wallet present.
Air-gapped workflows: Prepare a transaction on an internet-connected device, sign it on an air-gapped hardware wallet, broadcast it back. Zero exposure of private keys to networked devices.
| App | Platform | Best For |
|---|---|---|
| Sparrow Wallet | Desktop (Mac/Win/Linux) | Advanced users, full node connection |
| Electrum | Desktop (Mac/Win/Linux) | Power users, Lightning support |
| Blue Wallet | Mobile (iOS/Android) | Mobile monitoring |
| Nunchuk | Mobile + Desktop | Multi-sig coordination |
| Specter Desktop | Desktop | Multi-sig, self-hosted node |
Sparrow is the recommended desktop wallet for most Bitcoin users in 2026.
Coldcard Mk4/Q:
Trezor:
Ledger:
Sparrow will scan the blockchain for all addresses derived from your xpub and show your full balance and transaction history.
For maximum privacy, connect Sparrow to your own Bitcoin node instead of public servers:
Without your own node, your balance queries go to Sparrow's servers. They cannot steal your Bitcoin (no private keys), but they can see which addresses you're watching.
For mobile monitoring:
Blue Wallet's watch-only wallet is read-only — you can monitor balances and receive addresses but cannot initiate transactions from the app.
The full air-gapped workflow:
Via microSD (Mk4):
Via QR (Coldcard Q):
The signed transaction is now submitted to the Bitcoin network. Your private keys never touched the internet.
For a 2-of-3 multi-sig watch-only wallet:
This is particularly powerful: you can monitor your multi-sig balance from any device without having any hardware wallet present.
Your xpub reveals all of your Bitcoin addresses — past, present, and future. Anyone with your xpub can see your complete Bitcoin history.
Protect your xpub:
Use your own node to prevent third-party services from associating your xpub with your IP address.
Can someone steal my Bitcoin with just my xpub? No. The xpub allows address derivation and balance monitoring but not signing. Spending requires the private key, which never leaves your hardware wallet.
What is the difference between xpub, ypub, and zpub? They encode the same extended public key but indicate different address formats:
Most wallets support importing any format and converting automatically.
Does a watch-only wallet work for Lightning? Lightning channels are not visible in a standard watch-only wallet. Lightning requires a hot node (LND, CLN) with active key management.
Can I use multiple hardware wallets with the same watch-only wallet? Only if they share the same seed (same xpub). Different seeds = different wallets. Multi-sig setups use multiple xpubs explicitly.
A watch-only wallet setup takes 10 minutes and permanently improves your Bitcoin security workflow. Your hardware wallet stays offline except when actually signing — which should be rare.
Set up Sparrow with your hardware wallet's xpub today. Connect it to your own node if you have one. Check your balance without ever plugging in your hardware wallet again.
Get our free Beginners Guide to Buying Bitcoin plus weekly insights for long-term holders.
Breez is a non-custodial Lightning wallet that runs LND on your device with automated channel management. This review covers its security model, fees, podcast streaming payments, and how it compares to Phoenix and Zeus.
Blockstream Green Wallet supports singlesig, 2-of-2 multisig with 2FA, hardware wallet integration, and Lightning Network in one app. This review covers the security model, Lightning experience, and who should use it.
Zeus Lightning wallet review 2026 — the power user mobile wallet for connecting to your own Lightning node, with embedded node mode, Tor privacy, and NWC support.