What is watch-only wallet?

A wallet loaded with an address or public key but no private key, so it can display balances and history and cannot sign anything.

It solves a specific annoyance of cold storage. Keys kept offline are safe and also invisible, so checking a balance means retrieving a hardware device, connecting it, and putting it away again. A watch-only wallet lets you look without touching, because the information needed to read the chain is public and the information needed to spend is not.

The thing to weigh is that this trades a security exposure for a privacy one.

How it works

You import public material rather than a key. For a single address, that is the address itself. For a whole wallet, it is an xpub or a descriptor, which lets the software derive every receiving and change address in the account and show a complete balance and history, using the derivation defined in BIP-32.

The software then queries a node or an explorer for transactions involving those addresses and renders them exactly as a normal wallet would. What it cannot do is construct a valid signature, because signing requires the private key that was never imported. That is a mathematical limit rather than a permission setting, so no compromise of the watching device changes it.

Common uses follow from that. Monitoring hardware wallet holdings from a phone. Letting an accountant or a business partner see an account without giving them spending power. Running a merchant system that generates fresh receiving addresses from an xpub while the keys stay elsewhere. Pairing with an air-gapped signer, where the watch-only wallet builds an unsigned transaction, the offline device signs it, and the signed version comes back for broadcast.

The privacy cost is the flip side. An xpub reveals every address in the branch and therefore the entire transaction history and balance of that account to whoever holds it.

Example

Illustrative. You hold Bitcoin on a hardware wallet in a safe and import its xpub into a phone app.

The app shows the full balance and every transaction, updated live, with the hardware device untouched. Lose the phone and a thief learns what you hold and where, and can spend nothing. Compare importing the seed phrase instead: the phone would show the same information and the thief would have your coins.

The residual risk is real. Someone who knows the balance knows you are worth coercing, which is the reason the practice of physical extortion targeting crypto holders exists.

Why it matters when you buy

This becomes relevant the moment you move a purchase into cold storage, because the natural instinct afterward is to check on it, and checking should not mean handling keys. The guide on moving crypto off an exchange covers the withdrawal, and the guide on hardware wallet setup covers pairing a watch-only view with an offline signer.

Related terms

• xpub: the key that derives a whole account
• cold wallet: what watch-only wallets usually monitor
• public key: the material being imported
• air gapped wallet: the offline signer this pairs with
• psbt: the format for passing unsigned transactions
• descriptor wallet: a fuller description of an account

Questions

Can a watch-only wallet be hacked into spending?

No. There is no private key present, so no attacker with access to the device can produce a valid signature. The exposure is to your balances and history being read.

Do I need the hardware device to receive payments?

No. Addresses derive from the public key material already imported, so a watch-only wallet can generate valid receiving addresses while the signing device stays offline.

Is a watch-only wallet the same as a view key?

They serve the same purpose on different chains. Watch-only wallets use public keys on transparent chains, while a view key provides comparable read access on a privacy chain where nothing is public by default.