Bitcoin’s New Backup Proposal Turns Your Xpub Into a Key. Who Else Has a Copy?

**Your xpub can’t spend your Bitcoin. But it could unlock your wallet’s secrets.**

BIP138 proposes a clever recovery trick: use an eligible xpub to decrypt a backup of your wallet’s configuration. No extra password.

**Here’s the catch: reuse an xpub already shared with a server, and that server could open the backup too—if it gets the file.**

Your spending keys stay private. Your wallet map may not.

“Watch-only” never meant “harmless.”

**You know where your seed is. Do you know who still has your xpub? 🔑**