A watch-only Bitcoin wallet lets you monitor your BTC balance from any device without exposing your private keys. How xpubs work, Sparrow and BlueWallet setup, privacy considerations, and use cases for HODLers.
One of the most useful — and least discussed — Bitcoin wallet features is watch-only mode. A watch-only wallet lets you monitor your Bitcoin balance and transaction history in real time, from any device, without ever putting your private keys at risk.
This guide explains how watch-only wallets work, how to set one up, and why serious HODLers use them.
A watch-only wallet contains only your public keys (or extended public keys, called xpubs) — not your private keys. It can:
A watch-only wallet cannot:
The security principle: Your private keys remain on your hardware wallet (offline). Your watch-only wallet is just a "view" into your public blockchain activity. Even if an attacker fully compromises your phone or computer, they cannot access your Bitcoin — they can only see your balance.
For hardware wallet users:
For multi-sig users:
For families sharing Bitcoin:
Your Bitcoin hardware wallet generates an extended public key (xpub) — a master public key that can derive all your receiving addresses mathematically. This is NOT your private key — it cannot be used to sign transactions.
When you import the xpub into a watch-only wallet:
What the xpub reveals: Your full transaction history and all future receive addresses. Someone who has your xpub knows exactly how much Bitcoin you hold and every transaction you've made. This is a privacy consideration — guard your xpub carefully. It's not a spending risk, but it is a privacy risk.
Sparrow Wallet is the best Bitcoin watch-only wallet for serious HODLers. It connects to your own node or a public Electrum server.
Setup:
Key Sparrow features in watch-only mode:
BlueWallet is a popular mobile Bitcoin wallet that supports watch-only mode.
Setup:
BlueWallet watch-only pros: Simple setup, clean interface, mobile-friendly balance check Cons: Less control than Sparrow, connects to public Electrum servers by default (less private)
Nunchuk is a mobile and desktop wallet optimized for multi-signature setups. Its watch-only mode is particularly good for monitoring collaborative multi-sig wallets across multiple participants.
Use case: You and a business partner each hold one key in a 2-of-3 multi-sig. Nunchuk lets both of you monitor the shared wallet on your phones without any single person controlling all the keys.
Caravan is an open-source multi-sig wallet coordinator from Unchained Capital. It can create watch-only multi-sig wallets by combining multiple xpubs without storing them on a server.
Use case: Verify your multi-sig setup and watch balances without installing software — runs entirely in your browser locally.
One of the most important uses of a watch-only wallet: verifying receive addresses.
The attack: A "clipboard hijacking" malware replaces copied Bitcoin addresses with an attacker's address. If you copy an address from your hardware wallet, open your exchange, and paste — the exchange sends Bitcoin to the attacker's address.
The defense: Your watch-only wallet can generate a receive address from your xpub independently. Cross-reference this with the address your hardware wallet displays when you verify on-device. If they match, the address is authentic.
Always verify receive addresses by:
Never trust an address shown only on a computer screen — always verify on the hardware wallet.
xpub privacy: Sharing your xpub with a watch-only wallet reveals your entire transaction history and all future addresses. Consider these implications:
Best practice: Use a watch-only wallet that connects to your own node (Sparrow + your Umbrel or Bitcoin Core node) for maximum financial privacy.
For serious Bitcoin holders with multi-sig setups, a watch-only wallet becomes even more valuable.
Scenario: 2-of-3 multi-sig with keys on:
You can use Sparrow or Nunchuk in watch-only mode to:
This is the ultimate separation of concerns: observation and spending are completely decoupled.
| Wallet | Watch-Only | Multi-Sig | Node Connection |
|---|---|---|---|
| Sparrow Wallet | Yes | Yes | Your node or public |
| BlueWallet | Yes | Yes | Your node or public |
| Nunchuk | Yes | Excellent | Your node or public |
| Electrum | Yes | Yes | Your node or public |
| Caravan | Yes (browser) | Excellent | Public |
| Specter Desktop | Yes | Excellent | Your node required |
Is a watch-only wallet safe? Yes. A watch-only wallet contains only your xpub (public key), which cannot be used to spend Bitcoin. Even if your watch-only wallet device is fully compromised, your Bitcoin is safe — it can only be spent with the private keys on your hardware wallet.
Can someone steal my Bitcoin if they have my xpub? No. An xpub cannot be used to spend Bitcoin. However, someone with your xpub can see your entire transaction history and all future receive addresses. This is a privacy risk (financial surveillance) but not a security risk (theft).
Do I need to connect my hardware wallet to use a watch-only wallet? No. After the initial xpub import, your watch-only wallet works independently. Your hardware wallet only needs to be connected when you want to sign a transaction to send Bitcoin.
What is the difference between a watch-only wallet and a full Bitcoin wallet? A full Bitcoin wallet contains private keys and can both receive and send Bitcoin. A watch-only wallet contains only public keys, can receive Bitcoin (generate addresses), but cannot send Bitcoin (no signing capability). The private keys stay on your hardware wallet.
Can I have a watch-only wallet for a multi-sig setup? Yes. By combining multiple xpubs (one from each signer's hardware wallet), Sparrow, Nunchuk, or Specter can create a watch-only multi-sig wallet that shows the shared balance without any participant holding all the keys.
How do I export my xpub from a Coldcard? On your Coldcard, go to Advanced/Tools > Export Wallet > Generic JSON. This exports the xpub as a file you can import into Sparrow or other compatible software. You can also export via the Coldcard's NFC or MicroSD depending on your model and firmware version.
Get our free Beginners Guide to Buying Bitcoin plus weekly insights for long-term holders.
Breez is a non-custodial Lightning wallet that runs LND on your device with automated channel management. This review covers its security model, fees, podcast streaming payments, and how it compares to Phoenix and Zeus.
Blockstream Green Wallet supports singlesig, 2-of-2 multisig with 2FA, hardware wallet integration, and Lightning Network in one app. This review covers the security model, Lightning experience, and who should use it.
Zeus Lightning wallet review 2026 — the power user mobile wallet for connecting to your own Lightning node, with embedded node mode, Tor privacy, and NWC support.