Leaking your XPUB is a privacy risk. Whoever gets that knows every address that belongs to your wallet: past, present and future. They don’t necessarily know those addresses belong to *you* personally, but they know the addresses go together.
The most likely way you’ll leak your XPUBs is by connecting to an Electrum server, or a vendor’s wallet that collects this data.
When you start up Sparrow, it’ll ask how you want to connect to your node. Options include Bitcoin Core, private Electrum server, and public Electrum server. For maximum privacy and speed, it’s best to run your own Electrum server. I’ve used ElectrumX and Fulcrum. I’ve heard good things about electrs but I haven’t tried it.
If your wallet has previously been connected to some other service, like, say, your hardware vendor’s app, then your XPUB has in all likelihood already been leaked. The only way to keep this private is to set up your own wallet from scratch and ensure that your wallet software (Sparrow) only connects to a private Electrum server (preferred self-hosted).
jimbocoin / jimbocoin 🃏
npub1v9…x9q3h
2024-09-17 17:54:38
in reply to nevent1q…laek
Author Public Key
npub1v9qy0ry6uyh36z65pe790qrxfye84ydsgzc877armmwr2l9tpkjsdx9q3hPublished at
2024-09-17 17:54:38Event JSON
{
"id": "fed2760958029cd016bf0d668c80d22b5abbe400fd3942174b6f2691296499c8",
"pubkey": "6140478c9ae12f1d0b540e7c57806649327a91b040b07f7ba3dedc357cab0da5",
"created_at": 1726595678,
"kind": 1,
"tags": [
[
"e",
"3bf10178c24d0a9aed9bff41b94c8aa123867be238da5a34b72f7128a376d34a",
"",
"root"
],
[
"e",
"a01d187fba21b1760870546091bbe62a5c874a513d58aa65500cd425eb58e292",
"",
"reply"
],
[
"p",
"be7a5291b532e8b918f2dc98148948a33d3e0da07788d7416f73b4c7514f08e6"
],
[
"p",
"c3f614600162522abb6d7e3663b4465eca9e5882a138833e7e8a4420affc84d2"
],
[
"p",
"746a245ad214e69529e544ef8a42766c55fb60b79cf00ad0640905037a8d8b34"
]
],
"content": "Leaking your XPUB is a privacy risk. Whoever gets that knows every address that belongs to your wallet: past, present and future. They don’t necessarily know those addresses belong to *you* personally, but they know the addresses go together.\n\nThe most likely way you’ll leak your XPUBs is by connecting to an Electrum server, or a vendor’s wallet that collects this data.\n\nWhen you start up Sparrow, it’ll ask how you want to connect to your node. Options include Bitcoin Core, private Electrum server, and public Electrum server. For maximum privacy and speed, it’s best to run your own Electrum server. I’ve used ElectrumX and Fulcrum. I’ve heard good things about electrs but I haven’t tried it.\n\nIf your wallet has previously been connected to some other service, like, say, your hardware vendor’s app, then your XPUB has in all likelihood already been leaked. The only way to keep this private is to set up your own wallet from scratch and ensure that your wallet software (Sparrow) only connects to a private Electrum server (preferred self-hosted).",
"sig": "3b10a7daca0f24804038d6c76f6ec54169312f4f4b3042cb46ba60be626c46e8cf2ee45cffe7609bf30c3c8ce5d21d43788c2df63e56ac5fb8ad205ac08905a1"
}