A watch-only wallet lets you monitor an address's balance and transaction history without holding the private key needed to spend from it. You can see all incoming and outgoing activity, but you cannot sign or broadcast transactions. It is a read-only view of on-chain activity.
What Is a Watch-Only Wallet?
2 min read
The short version
A watch-only wallet is like having read access to a bank statement but no debit card. You can see every deposit and withdrawal, track the balance in real time, and get alerts, but you cannot move any money. It is useful for monitoring cold storage without exposing your keys to an online device.
How It Works
To create a watch-only wallet, you import only the extended public key (xpub/zpub) or a single address into wallet software. The software uses this to derive all associated addresses and query the blockchain for their balances and history. Since no private key is present, the wallet physically cannot construct valid signatures. Use cases: (1) Monitoring cold storage from your phone without connecting the hardware wallet. (2) Accountants tracking client portfolios. (3) Businesses monitoring incoming payments. (4) Verifying that your cold storage is intact after a market event without plugging in your hardware device.
Monitoring your Ledger from your phone
You have 2 BTC on a Ledger stored in your safe. You export the zpub (extended public key) from Ledger Live and import it into BlueWallet on your phone as "watch-only." BlueWallet now shows your 2 BTC balance and all transaction history. When someone sends you 0.1 BTC, your phone shows the incoming transaction immediately. If your phone is stolen, the thief sees your balance but cannot spend a single satoshi, there is no private key on the phone. To actually send Bitcoin, you still need the physical Ledger.
What People Get Wrong
Watch-only wallets can be hacked to steal funds
There is no private key stored in a watch-only wallet to steal. Even if someone gains full access to the watch-only app, they obtain nothing that enables spending. They learn your balance (a privacy concern) but cannot take funds.
Importing an xpub is dangerous
An xpub reveals all your addresses and balances (a privacy issue) but cannot derive private keys. Sharing it is not ideal for privacy, but it is not a security risk in terms of fund safety.
You need to keep the watch-only wallet synced for the cold wallet to receive
The watch-only wallet is purely informational. Whether it is open, closed, synced, or deleted, your cold storage receives transactions regardless. The blockchain does not know or care about your monitoring setup.
Keep Reading
Sources & Further Reading
- BlueWallet Docs
Guide on setting up watch-only wallets for Bitcoin monitoring
Questions People Also Ask
- Which apps support watch-only wallets?
- BlueWallet (Bitcoin), Sentinel (Bitcoin), MetaMask (Ethereum, import any address as watch-only via Activity view), and most portfolio trackers like Zerion or DeBank support viewing any address without private keys.
- Can I use watch-only with a multisig?
- Yes. You can monitor a multisig address in watch-only mode. Spending still requires the threshold number of co-signers to sign with their respective keys.
- Does a watch-only wallet reveal my identity?
- It reveals your addresses and balances to whatever service runs the wallet (if it uses a central server). For maximum privacy, use a wallet that connects to your own full node rather than a third-party server.