Free tools Windows power users keep installed
One-click scans. No signup required.
To check whether a Bitcoin address has exposed a public key, identify its output type and inspect every relevant spending transaction. A typical P2PKH or P2WPKH address encodes a hash of a public key, so the key usually appears only when an output paid to that address is spent. Taproot (P2TR) is different: its address encodes a witness program containing an x-only output key.
This check reveals only public information. A visible public key is not a private key and does not, by itself, show that a wallet has been compromised.
As an Amazon Associate I earn from qualifying purchases.
What “exposed public key” means
A Bitcoin address is an encoding associated with a payment script or witness program. It is not automatically the public key itself. For common single-key address types, the address represents a hash derived from the public key. The network can verify a spend when the key is later supplied in the spending data.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
The distinction matters because looking at an address string alone can produce the wrong answer. You must determine what script the address represents, then examine the outputs paid to it and the transactions that spend those outputs. Bitcoin’s developer documentation describes this hash-and-reveal model and also explains why address reuse increases the amount of information associated with an address: Bitcoin Developer Guide: Wallets.
#1 Best Overall
- [Ultra-Lightweight Ear Buds Designed for Small Ears] Each earbud weighs only 3.7g and features a compact, ergonomic in-ear design made especially for small ears. Secure, low-profile, and comfortable for workouts, all-day wear or overnight sleeping.The ultra-slim profile sits flush in your ear with no hard edges poking or rubbing, so you can even sleep on your side without discomfort.
- [Immersive Stereo Sound with TOZO OrigX Technology] TOZO OrigX tuning delivers clear vocals, balanced mids, and natural stereo sound for music, podcasts, and videos.
- [Long Battery Life for Daily Use] Get up to 7 hours of playtime on a single charge, with up to 32 hours total using the charging case—ideal for workdays, commuting, and extended listening sessions.
- [Bluetooth 5.3 & Stable Connection] Bluetooth 5.3 provides fast pairing, stable wireless performance, and reduced dropouts as you move around home or office.
- [Deep Bass with Clear Vocals] High-performance drivers produce punchy bass while keeping vocals clean and detailed for everyday listening.
Address types and where the key appears
Use the following table as a decision guide. Prefixes can provide an initial clue on mainnet, but they are not a complete type check; testnet, regtest and unusual scripts use different encodings. Confirm the actual script or descriptor whenever possible.
| Output family | What the address represents | Where to check for public-key visibility |
|---|---|---|
| P2PKH | A hash of a public key in the output script | Inspect the spending input. The public key is supplied in the input’s scriptSig. |
| P2WPKH | A SegWit witness program containing a public-key hash | Inspect the spending input’s witness. It includes the compressed public key when the output is spent. |
| P2TR (Taproot) | A version-1 witness program containing an x-only output key | The output key is represented by the address’s witness program, so do not apply the same “hidden until first spend” rule used for key-hash addresses. |
| P2SH or P2WSH | A hash of a redeem script or witness script | Inspect the redeem or witness script revealed by a spend. It may contain one key, several keys, or a more complex spending policy. |
| P2PK or other scripts | A script that may contain a public key directly | Read the output script and the spending data; do not assume it behaves like P2PKH. |
Bitcoin Core’s descriptor documentation lists the distinct forms, including pk, pkh, wpkh, P2SH, P2WSH and tr: Bitcoin Core output descriptors. The documentation’s master branch changes over time, so pin a Bitcoin Core release when you need version-specific behavior.
How to check an address step by step
1. Preserve the exact address and network
Copy the address exactly, without spaces or punctuation. Record whether it is a Bitcoin mainnet, testnet or another network address. A similar-looking string on a different network is not the same on-chain object, and an address can be represented by more than one user-interface format.
Do not paste a seed phrase, private key, wallet backup or signing secret into an explorer, command prompt or website. The address is safe to share for a public-data lookup; wallet secrets are not.
2. Identify the output type
Look for the script or witness program behind the address rather than relying only on its prefix. A mainnet address beginning with 1 is commonly P2PKH, one beginning with 3 is commonly P2SH, and a Bech32 address beginning with bc1q is commonly P2WPKH or P2WSH. A Bech32m address beginning with bc1p is commonly Taproot. These are orientation clues, not proof of the script type.
If the address belongs to your Bitcoin Core wallet, descriptors can identify the intended form precisely. For example, a wallet descriptor may use pkh(...) for P2PKH, wpkh(...) for P2WPKH, or tr(...) for Taproot. An arbitrary address that is not in your wallet cannot be classified by a wallet-local command alone.
Rank #2
- 【IP68 Waterproof Multifunctinal Smart Watch】Torjalph fitness activity tracker smart watch is IP68 waterproof technology ,you can wear it when swimming,handwashing,it's rain-proof which means that you perform multiple exercise modes outside without worrying about sweat or rain corroding your fitness smart watch,and this watch equipped with a 230 mAh large capacity battery magnetic charging ,and this sports activity tracker watch can be used 5-7 days If fully charged.
- 【Larger 1.83'' Full Screen Watch & Multi-dial Selection】1.83 inch full HD color touch screen smart watch for men / women provides excellent 240*284 resolution image quality ,This Bluetooth smart watch offers a better touch experience and remarkable immersion and ,more than 200 watch faces for you to choose from App"Da Fit ", you can change the dial style according to your mood to wear keeping the world on your wrist
- 【Accurate Activity Tracker Smart Watch 】sports watch activity tracker uses sweat and dust resistant breathable silicone strap, our Fitness Tracker Smart Watch for Android iOS Phones supports 12 sports modes,walking,running,bicycle,swimming,badminton,basketball,football,rope skipping. This bluetooth calls smart watch for men women is lightweight and stylish, bringing more convenient and relaxing sports experience while also providing more protection.
- 【Your 24 Hour Personal Daily Health Monitor】Fitness watch for women men full touch screen IP67 waterproof bluetooth smartwatch for Android iOS Phones with heart rate blood pressure monitor multifunction Andriod smart watch with steps counter sleep monitor sports fitness watch, monitoring blood oxygen saturation allows you to understand your physical condition in real time to track fitness progress ,to know your health status in time.
- 【More Functions Bluetooth Call Smart Watch】This fitness activity smart watch full screen for iPhone and Android phones includes a bunch of new features including:The bluetooth smart watch can hang up the phone, receive and display WhatsAPP /Text /Facebook /Twitter /Messenger reminder.Support sedentary reminder, alarm clock, stopwatch, timer,weather information,music control, remote camera control compatible with Android 5.0 and above or iOS 9.0 and above smartphones.
3. Find every output paid to the address
Use a blockchain data source that shows transaction outputs and inputs. Locate each transaction that created an unspent or spent output for the address, and note the transaction ID and output index. If the address was reused, there may be several separate outputs and several different spending transactions.
Explorer layouts differ. A balance page may show only a summary, while a raw-transaction view exposes the scriptPubKey, input scriptSig, witness stack and output index. Use the raw transaction representation when the user interface does not clearly show the spending data.
4. Follow each output into its spending transaction
An output is “spent” when a later transaction uses its transaction ID and output index as an input. Open that spending transaction and inspect the input that points to the address’s output.
- P2PKH: the input’s scriptSig contains a signature and the public key. The key supplied there is the material you are checking for.
- P2WPKH: the input’s witness stack contains the signature and compressed public key. The public key is therefore visible in witness data rather than in the legacy scriptSig.
- P2SH/P2WSH or multisig: inspect the revealed redeem script or witness script. Several public keys may appear, or the transaction may reveal only the branch of a larger policy that was used.
BIP 352 provides concrete transaction-input examples showing a P2PKH public key in scriptSig and a P2WPKH public key in witness data: BIP 352 transaction examples. The important practical point is to inspect the input that spends the specific output, not merely a transaction that happens to mention the address elsewhere.
5. Check the complete relevant history
Do not stop at the latest transaction. If an address received coins, was spent once, and then received coins again, the earlier spend may already have disclosed the key. Review every spent output controlled by the address, including old transactions that no longer affect the current balance.
If no spending transaction exists for a P2PKH or P2WPKH output, the public key generally has not been supplied in that output’s spend data. State the result narrowly: “No public key was found in the transactions examined.” That is not proof that the key has never appeared somewhere else, such as another reused address derived from the same key or a separate script.
Rank #3
- [Low Noise High Fidelity] New bee guitar cord with 22AWG oxygen-free-copper center conductors provides enhanced signal transfer, the PVC insulation material and the high-density stranded copper double shield provide noise rejection for quiet operation
- [Ideal for Choice] New bee 1/4 straight and right angle metal connectors, ensures a secure connection in any instrument, pedal, or amp jack. L shape great fro on stage guitar stands
- [Wide Compatible] Suitable for mixer, power amplifier, microphone, effector, decoder, equalizer, electoronic organ, electric guitar, electric bass and other electronic equipments. Widely used in the installation of smart home, karaoke speaker, professional stage audio, etc
- [Easy Disassemble] Making incidental repairs quick and easy! Very nice, flexible cable
- [Dont Hesite to Order] 24 hours customer services and professional technology team are standing by
6. Interpret Taproot separately
A P2TR address encodes a witness version 1 program with an x-only output key. The key value is therefore represented in the address’s witness program before a spend occurs. A Taproot address should not be described as a hashed public key that remains entirely hidden until the first spend.
Taproot spending data can reveal additional information about the path used, but that is a different question from whether the output key is represented by the address. When documenting a result, say that the address contains or commits to an output key, and separately note whether a key-path or script-path spend has exposed further script details.
Checking with Bitcoin Core
The wallet-local getaddressinfo command
If you operate a Bitcoin Core wallet, run:
bitcoin-cli getaddressinfo "ADDRESS"Replace ADDRESS with the address and keep the quotation marks if your shell requires them. When the wallet has the relevant key information, the JSON response can include a pubkey field. The same response can also identify whether the address is used by the active wallet and provide script-related metadata.
This command is not a universal blockchain lookup. Bitcoin Core’s reference documentation warns that some fields are returned only when the address is in the active wallet; an arbitrary address imported nowhere may not produce a pubkey value even if the key is publicly visible on-chain. Read the limitations in the version you run: Bitcoin Core getaddressinfo reference.
A missing pubkey field therefore has two possible explanations: the wallet does not know the key, or the address’s key information is not available through that wallet RPC response. It is not a definitive statement about the public blockchain.
Inspecting raw transactions in Core
For transactions your node can access, Bitcoin Core can decode a transaction into JSON. A typical command is:
Rank #4
- Digital Family Calendar: BSIMB digital calendar wall touch screen puts an end to your chaotic life. Designed for busy families, the digital calendar keeps you organised and in step with your family. Assign different colours and tasks to each family member to make family scheduling easier and more intuitive.
- Easy Setup and Auto-Sync: Plug in, connect to WLAN and auto-syn your electric calendar in minutes. Digital wall calendar compatible with Google calendar, iCloud calendar, Outlook calendar, Cozi calendar and Yahoo calendar. Add events directly on the device or through the ecalendar app. Electronic calendar stays current whether you're at work or traveling—no manual updates needed.
- All-In-One Home Assistant: Smart calendar builds habits and encourage independence with personalised chores. Display daily meal plan to reduce the daily ‘What's for dinner?’ stress. To-do lists keep track of everything you want. Turning chores into valuable achievements with stars and rewards, making life easier and more enjoyable.
- Manage Anytime Anywhere: BSIMB electronic calendar for family stay connected with the powerful ecalendar app. Access and manage your digital wall calendar anytime, anywhere with free features like stars & rewards, photo screensaver, chore charts, meals plans, to-do lists etc. Electronic planner paid features like Magic Import tailor advanced tools for users with special needs.
- Stay in Touch with Loved Ones: Share photos or videos from your phone to electronic wall calendar with app, instantly update your life moment, and keep in touch with your family, especially those who are far away; you can also surprise your smart calendar digital wall by sending him a wish card; it's also great for keeping tech-illiterate elders in touch with the youngsters.
bitcoin-cli getrawtransaction "TXID" trueThe decoded result lets you compare the address’s output with the later input that spends it. Availability depends on your node’s indexing, pruning mode, wallet history and Bitcoin Core version. If the node cannot retrieve an old transaction, use another public data source for that transaction and verify that the transaction ID and output index match.
Recommended Free Tools
When reading the JSON, locate:
- The original output’s
scriptPubKey, which identifies the locking script or witness program. - The spending input’s
scriptSigfor legacy P2PKH-style spends. - The spending input’s
txinwitnessarray for SegWit spends such as P2WPKH. - The redeem or witness script for script-hash and multisignature outputs.
Do not infer exposure from a transaction’s signature alone. A signature proves authorization under the relevant script; the public-key field or witness element is what answers the visibility question.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Why address reuse changes the answer
Using the same address more than once makes old disclosure relevant to later payments. Once one output for a P2PKH or P2WPKH address has been spent, an observer can associate that revealed key with the reused address and its transaction history. Reuse also makes it easier to link payments that might otherwise have appeared unrelated.
Bitcoin’s developer guidance recommends avoiding address reuse and generating a new receiving address when appropriate: Wallet guidance on public-key distribution and reuse. The transaction guide also recommends using new addresses for change rather than sending change back to a previously used address: Bitcoin Developer Guide: Transactions.
Generating a new address prevents future payments from automatically sharing the old address’s history, but it cannot erase an already published transaction or hide a public key that was previously revealed. Treat “new address” as a forward-looking privacy practice, not a way to retract on-chain data.
How to report a result accurately
A useful result identifies the address, network, output type, transactions checked and the exact scope of the conclusion. Use wording that distinguishes a confirmed observation from an absence of evidence.
When a key is visible
For a spent P2PKH output, write that the spending input contains the public key in its scriptSig and include the transaction ID and output index if you are documenting the finding. For a spent P2WPKH output, state that the compressed public key appears in the input witness. For Taproot, state that the address’s witness program represents an x-only output key, then describe any additional information revealed by the spend separately.
When no key was found
Say: “No public key was found in the spending history examined for this address.” Add the network, data source and date of the check. Avoid saying “the key has never been exposed,” because another address, an earlier record not included in the search, or a different script could have revealed related key material.
When the script is ambiguous
Report the output as P2SH, P2WSH, multisignature or another script family and explain that visibility depends on the redeem or witness script and the path actually spent. Do not force a single-key P2PKH interpretation onto a script-hash address.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Common mistakes and how to avoid them
- Checking only the address text: P2PKH and P2WPKH addresses encode key hashes, so inspect spending data.
- Treating every Bech32 address as the same: P2WPKH, P2WSH and Taproot have different witness versions and disclosure behavior.
- Looking only at the current balance: a fully spent old output may contain the relevant public key.
- Confusing a wallet RPC with a chain-wide lookup:
getaddressinfocan be wallet-specific. - Assuming a visible key is a private key: public-key exposure does not disclose the signing secret.
- Assuming exposure proves compromise: observing a public key alone does not let someone spend the coins.
- Entering secrets into a checker: only the address and public transaction identifiers are needed for this check.
- Overstating a negative result: absence in the transactions reviewed is not proof of absence everywhere.
Public-key visibility is not private-key exposure
Public keys are designed to be shared with the network so signatures can be verified. The security-sensitive secret is the private key, seed phrase or signing backup. This article’s procedure determines whether public key material is visible on-chain; it does not test whether a private key was copied, guessed, exported or compromised.
If you suspect a private-key compromise, stop using the affected wallet and follow a separate incident-response process using trusted wallet documentation. Do not publish the suspected secret while asking for help. A public-key finding by itself is not evidence that funds can be spent by an observer.
A compact decision checklist
- Copy the exact address and identify its network.
- Determine the output family from the actual script or witness program, not just the prefix.
- List every transaction output paid to that address.
- For each spent output, open the input that references its transaction ID and output index.
- Read scriptSig, witness, redeem-script or witness-script data according to the output family.
- Treat Taproot’s encoded output key separately from key-hash address formats.
- Review older spends if the address was reused.
- Document the transactions and data source checked, and phrase a negative result within that scope.
- Keep all seed phrases, private keys and wallet backups out of the process.
The central rule is simple: for P2PKH and P2WPKH, public-key visibility is normally established by a spend; for P2TR, the address already represents an output key. A reliable answer comes from matching that rule to the actual script type and complete spending history.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Repair Windows errors before they cause bigger problems3Scan for outdated or missing drivers - takes under a minute
