xprv (Extended Private Key)
An xprv is an extended private key: one string from which a wallet derives all private keys of an account, so whoever holds it can spend every coin under it.
What Is xprv (Extended Private Key)?
An xprv is an extended private key: a private key combined with a chain code, encoded as one long string that begins with xprv. Defined in BIP32, it is the point from which a hierarchical deterministic wallet derives all the private keys, and therefore all the addresses, of an account or of the whole wallet.
Whoever holds an xprv can spend every coin under it, now and in the future. That is the difference from its public counterpart, the xpub, which only lets someone watch balances and generate receiving addresses. Variants such as yprv and zprv carry the same kind of key with a prefix that signals the address type.
A hardware wallet computes its master xprv from the recovery phrase and keeps it inside the device. In normal use the owner never sees an xprv; only xpubs are exported to companion apps.
Two cautions follow. No legitimate website, support agent or app needs an xprv, and a request for one is a theft attempt. And an xpub is not harmless in every combination: with an xpub and a single non-hardened child private key from the same account, the parent private key can be calculated. This is why wallets use hardened derivation at the account level.
A private key is the secret number that proves ownership of a crypto address and signs its transactions. Whoever has it controls the funds.
BIP32 is the Bitcoin Improvement Proposal that defines hierarchical deterministic (HD) wallets: a whole tree of keys and addresses is derived from a single seed.
Read full definition: BIP32XPUB is an extended public key (xpub) in hierarchical deterministic (HD) wallets. It derives child public keys and addresses from a master public key without exposing private keys.
Read full definition: XPUBA wallet address is the public identifier others use to send you crypto. It is derived from a public key and is safe to share.
Read full definition: Wallet AddressA hardware wallet is a dedicated device that keeps private keys offline and signs transactions internally, so the keys never reach an internet-connected computer or phone.
A mnemonic phrase is a set of words that stores a cryptocurrency wallet's private keys, allowing users to recover access if lost.
Read full definition: Mnemonic PhraseA companion app is the phone or desktop software paired with a hardware wallet: it shows balances, prepares transactions for the device to sign and installs updates.
Read full definition: Companion AppReal-World Examples
Example 1: A “wallet recovery” website asks a visitor to paste the xprv exported from an old software wallet in order to “synchronise” it. Whoever runs the site can then spend all funds derived from that key.
Example 2: To set up a watch-only wallet, a user exports the xpub from a Keystone 3 Pro as a QR code. The xprv stays on the device, so the phone app can show balances but cannot sign.
Recovery is the process of restoring access to a cryptocurrency wallet using its seed phrase or mnemonic backup if the original wallet is lost or inaccessible.
Read full definition: RecoveryA software wallet is a digital application that stores cryptocurrency private keys and enables transactions, typically on mobile or desktop devices.
Read full definition: Software WalletA watch-only wallet displays cryptocurrency balances and transactions without private keys, allowing secure monitoring without spending capability.
Read full definition: Watch-Only WalletXPUB is an extended public key (xpub) in hierarchical deterministic (HD) wallets. It derives child public keys and addresses from a master public key without exposing private keys.
Read full definition: XPUBQR Code Signing is a method used in cryptocurrency transactions where a QR code is generated to confirm and sign a transaction, enhancing security and user convenience.
Read full definition: QR Code SigningFrequently Asked Questions
Is it safe to paste my xprv into a website or app?
No. Whoever holds an xprv can spend every coin under it, now and in the future. No legitimate website, support agent or app needs it, and a request for one is a theft attempt, such as a so-called wallet recovery site that asks for the key to synchronise an old wallet.
What is the practical difference between an xprv and an xpub?
An xprv lets its holder derive all private keys of an account and therefore spend. An xpub only lets someone watch balances and generate receiving addresses. A hardware wallet keeps its xprv inside the device and exports only xpubs to companion apps, so in normal use you never see an xprv.
Why do wallets use hardened derivation at the account level?
Because an xpub combined with a single non-hardened child private key from the same account allows the parent private key to be calculated. An xpub is therefore not harmless in every combination, and hardened derivation at the account level is the protection wallets use against this.
Ready to Choose a Secure Wallet?
Use our tools to find the right hardware wallet for your needs.