Insights on Crypto Payments, Infrastructure, and Operations

Extended Private Key (xprv)

Wallets, Custody & Treasury

Abbreviation: xprv

Pronunciation: ik-STEN-did PRY-vit KEE (EKS-PRY-VEE)

Also known as: BIP32 Extended Private Key, xprv

Definition

Extended Private Key (xprv) is a BIP32 hierarchical deterministic wallet key that combines a private key with chain code and derivation metadata, enabling generation of descendant private and public keys.

Overview

Contents Hide
  1. How it works and why it matters
  2. Technical context
  3. Practical checks
  4. Related concepts

How it works and why it matters

An extended private key, often written xprv in certain hierarchical deterministic wallet formats, combines private key material with chain-code information that enables deriving a family of child keys. It is far more sensitive than an extended public key. Exposure can compromise multiple derived addresses rather than a single account. The exact prefix and encoding vary with network and wallet convention; xprv is not an address or a transaction key intended for routine sharing.

Technical context

An xprv is more powerful than a single private key because compromise can expose an entire derivation branch.

It should be distinguished from Extended Public Key (xpub) , Master Seed , and Account Derivation .

The principal risk is that leaking an xprv can compromise many current and future addresses, and combining it with related public derivation data can expand the damage.

Practical checks

Record the derivation standard and path when backing up a hierarchical wallet, but keep the actual extended secret in a protected offline environment. In common non-hardened derivation schemes, revealing an extended public key together with one corresponding child private key can endanger a parent private key; avoid exposing either unnecessarily.

Extended Public Key (xpub); Master Seed; Account Derivation

Example

A developer exports an xprv to debug automated invoice-address generation and accidentally stores it in a public repository. An attacker may derive many related private keys and control funds received across the wallet's derivation paths. Rotating only one payment address will not fix the root compromise.

Comparison

An xpub can support address derivation and observation without ordinary spending authority, but privacy and certain non-hardened derivation risks still matter. An xprv carries private derivation capability and must never be used as a public identifier.

Key Takeaway

Treat extended private keys as high-impact secrets requiring protected backup and restricted access.

Sources

  1. Recommendation for Key Management: Part 1 – General — NIST (2026-08-02)
  2. Recommendation for Key Management: Part 2 – Best Practices for Key Management Organizations — NIST (2026-08-02)
  3. BIP 32: Hierarchical Deterministic Wallets — Bitcoin Improvement Proposals (2026-08-02)