Cold storage is the gold standard for cryptocurrency security. By keeping your private keys offline—typically on a hardware wallet like a Ledger, Trezor, or BitBox—you protect your assets from online hacks and malware. However, because these devices are offline, checking your balance often requires physically retrieving the device, connecting it to a computer, and entering a PIN.
Monitoring cold storage refers to the practice of tracking your wallet balances and transaction history in real-time without ever needing to touch your physical hardware device or expose your private keys. This is achieved through "watch-only" functionality, leveraging the transparency of the blockchain.
You might wonder why you would need to look at your cold storage balances if you aren't planning to trade. There are several critical reasons for active monitoring:
The secret to safe monitoring lies in the difference between your Private Key and your Public Key (or Public Address). Think of your public address like your email address—anyone can know it, and people can send you things using it. Your private key is like your email password—anyone who has it has full control over your account.
For Bitcoin and other hierarchical deterministic (HD) wallets, there is also something called an Extended Public Key (xPub). An xPub allows a tracking tool to see all current and future addresses generated by your wallet. By importing only your public address or xPub into a monitoring tool, you can see your balance, but the tool has zero ability to move your funds.
There are three primary ways to monitor your hardware wallet safely:
To start monitoring, you need to export the correct data from your hardware wallet software:
For Ethereum/ERC-20: You only need your single public Ethereum address (starts with 0x). Since Ethereum uses a single account model, one address shows all your tokens.
For Bitcoin: Because Bitcoin uses a new address for every transaction to improve privacy, you should look for the "Extended Public Key" or "Account Details" in your wallet software. It usually starts with "xpub", "ypub", or "zpub".
Warning: Never type your 12 or 24-word recovery phrase into any app or website to "monitor" your funds. A legitimate monitoring tool will ONLY ask for a public address or xPub.
While monitoring is generally safe, there are two main risks to keep in mind: privacy and phishing.
Privacy: When you use a third-party tracker or a block explorer, you are essentially telling that service (and potentially their data providers) that a specific set of addresses belongs to one person. If you are highly privacy-conscious, you may prefer to run your own node, though this is much more technically demanding.
Phishing: Scammers often create fake "portfolio tracking" apps that ask for your private key or seed phrase. Always ensure you are using a reputable tool and never, under any circumstances, provide your seed phrase to anyone online.
Can someone steal my crypto if they have my xPub?
No. An xPub allows someone to see your transactions and balances, but it does not grant the power to spend or move your funds. However, they can see your entire financial history for that wallet.
Do I need to plug in my Ledger/Trezor to update the balance?
No. Once you have linked your public address to a monitoring tool, the tool watches the blockchain. When the blockchain updates, your balance updates automatically in the app.
What is the difference between a "watch-only" wallet and a "hot" wallet?
A watch-only wallet contains no private keys; it is purely a viewer. A hot wallet (like MetaMax or Coinbase Wallet) contains private keys on the device and can send transactions.
Hardware Wallet
View on AmazonCrypto Steel Seed Storage
View on AmazonShare this guide: