I don’t know for sure. Perhaps use this setup for your cold storage.
For your ultra-cold storage, use tools (cold card address explorer, seed tools offline, etc) to derive address and only check those on self-hosted block explorer. That way xpub never touches internet.
Breezy
npub127…v0qjk
2023-07-09 13:16:11
in reply to nevent1q…jdyr
Author Public Key
npub127lt6vm3tmx86hnrpc9gnwhalg9qln48hd85p4m226cfx5u20tfsjv0qjkPublished at
2023-07-09 13:16:11Event JSON
{
"id": "3731f9d4e5f95f7d6b92e0edde7ae04cadb155a1020147be83d39c14132edbec",
"pubkey": "57bebd33715ecc7d5e630e0a89bafdfa0a0fcea7bb4f40d76a56b093538a7ad3",
"created_at": 1688908571,
"kind": 1,
"tags": [
[
"e",
"b539ce75230b1724dd8f9f8b5ac8f55629b4913a07593211c5529ff17e500345"
],
[
"e",
"7e0f8f771178e6e4a1095484ea750b2b39126c5f8f82a200c9171069e41bddb0"
],
[
"p",
"a6a6dc4d4607fac3b86b22916398a05ef33f38cae5feabec66832ce029bc1755"
]
],
"content": "I don’t know for sure. Perhaps use this setup for your cold storage. \n\nFor your ultra-cold storage, use tools (cold card address explorer, seed tools offline, etc) to derive address and only check those on self-hosted block explorer. That way xpub never touches internet.",
"sig": "e2f191aec0f442a20a3b04ffef9db3ecbf87b66d73b9db527108871e4d45fb416aaee2bca11fa4f2f448c2a4996b4cc0cacb398e42305148eb0aac759a72a5ac"
}