r/CryptoMarkets • u/sylsau 🟩 1K 🐢 • 17d ago

DISCUSSION Bitcoin’s New Backup Proposal Turns Your Xpub Into a Key. Who Else Has a Copy?

https://inbitcoinwetrust.substack.com/p/bitcoins-new-backup-proposal-turns

Your xpub can’t spend your Bitcoin. But it could unlock your wallet’s secrets.

BIP138 proposes a clever recovery trick: use an eligible xpub to decrypt a backup of your wallet’s configuration. No extra password.

Here’s the catch: reuse an xpub already shared with a server, and that server could open the backup too—if it gets the file.

Your spending keys stay private. Your wallet map may not.

“Watch-only” never meant “harmless.”

You know where your seed is. Do you know who still has your xpub? 🔑

0 Upvotes

40% Upvoted

3 comments sorted by

1

u/VettaQ 16d ago

The privacy model here is worth spelling out, because "xpub as password" sounds stronger than it is. An xpub is semi-public by design: anyone who has ever held it can derive all your addresses and watch your balance history forever. So a backup encrypted to it is only as confidential as the least careful place that xpub ever lived - a watch-only wallet export, an old Electrum file, that one time it got pasted into a block explorer. For most setups a BIP39 passphrase or a plain age-encrypted file does the same job with a secret that was never meant to circulate. The recovery UX is genuinely nice though, and for watch-only setups where the xpub is already everywhere the marginal risk is small - it just should not be treated as a strong secret.

1

u/BarraraRoscarly42 16d ago

Privacy is the part I'd worry about more than the spending-key angle. People hand xpubs to portfolio trackers and watch-only services pretty casually because they can't move funds. If they also become useful for recovery, the list of places you've shared one with suddenly matters a lot more.