iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
To check whether a Bitcoin address has exposed a public key, first identify the output type, then inspect the exact transaction output that paid to it and the input that later spends it. P2PKH reveals its public key in the spending input’s scriptSig; native P2WPKH and nested P2SH-P2WPKH reveal a compressed public key in witness data. Taproot is different: its 32-byte output key is already visible in the output script, while a script-path spend can additionally reveal the internal key in its control block.
Seeing a public key on-chain does not mean the corresponding private key has been recovered or compromised. It means only that the public key material needed to validate a spend is present in public blockchain data.
What “exposed public key” means in Bitcoin
A Bitcoin address is usually an encoding of a spending condition, not a plain public key. In common hash-based formats, the output commits to a hash and withholds the underlying public key until the output is spent. The spending transaction then supplies the data needed for script validation.
There are two important exceptions to the overly broad rule that an address hides its public key until spending:
#1 Best Overall
- Powerful Turbo Fan:CAGIWIRU Electric Air Duster have reached speed up to 130000RPM,Can efficient remove dust and debris.With LED light and Three Adjustable Speed to meet with different cleaning tasks.
- With Attached USB C Fasting Charging cable.Charing 3 hours,Enjoy up to 240 minutes of use on the lowest setting, For third speed can use for 25mins.with four charging options to meet with your needs.
- Wide Application: attached 5 different nozzles,making it suitable for a variety of scenes, such as car,pet, pc, keyboards, and other electronic devices. It also serves for office and home clean duster.
- Handy Design & Portable:Cordless air duster electric nozzle is Light weight and small size, design and comfortable to hold and space saving, convenient to carry around. You can put it in your room or inside the car without taking up space.
- Economical &Reusable: Built durable materials with a long-lasting battery,our CAGIWIRU air duster it's a sustainable alternative to disposable air cans.
- A Taproot output contains a 32-byte x-only output key directly in its output script. That output key is public before the coin is spent.
- Some scripts commit to a script or another structure rather than directly to a public-key hash. The information disclosed later depends on the script and the spending path.
“Exposed” therefore has to be qualified. You may be asking whether the output key is visible, whether a spending transaction publishes a full or compressed public key, or whether a Taproot internal key has become visible. Those are different checks.
The quick decision table
| Output pattern | What the output commits to | Where to inspect | What becomes visible |
|---|---|---|---|
| P2PKH | A public-key hash | The spending input’s scriptSig |
The serialized public key and signature |
| P2WPKH | A public-key hash in a SegWit witness program | The spending input’s witness | The compressed public key and signature |
| P2SH-P2WPKH | A script hash that wraps a witness program | The spending input’s witness, with scriptSig identifying the wrapped program |
The compressed public key and signature |
| P2TR key path | A 32-byte x-only Taproot output key | The output script; then the key-path witness if spent | The output key is already visible; the witness normally contains a signature |
| P2TR script path | A 32-byte x-only output key plus a committed script tree | The output script and the spending control block | The output key is visible; the control block includes the internal key and branch data needed for validation |
The table is the core answer. Do not inspect only an address string, and do not inspect an arbitrary transaction input. Tie every observation to the particular output and its later spending input.
Step 1: Identify the output type
Use the decoded output script, not just the address appearance
An address is an address-encoding layer. The reliable question is what script the address generates. Bitcoin Core’s address-information RPC can return the generated scriptPubKey. Descriptor syntax provides common descriptions such as pkh for P2PKH, wpkh for native P2WPKH, sh for script-hash constructions, and tr for Taproot.
Recommended Free Tools
bitcoin-cli getaddressinfo ADDRESSIn the result, examine the scriptPubKey object and its assembly or hexadecimal representation. The RPC may also include a pubkey field when the active wallet knows one. That field is wallet information, not a complete historical answer: some fields are returned only for addresses in the active wallet. A missing RPC public key does not prove that no public key has ever appeared on-chain.
Recognize the main script families
- P2PKH: the output commits to a hash of a public key. The public key is supplied later by the spending input.
- P2WPKH: the output is a SegWit witness program committing to a public-key hash. Its public key is supplied in witness data when spent.
- P2SH-P2WPKH: the address commits to a script hash that wraps a witness program. The nested form uses both a small
scriptSigand witness data. - P2TR: the output contains a witness version 1 program whose 32-byte value is the x-only Taproot output key.
Generic P2SH is not itself a promise that a public key is hidden or exposed. It commits to a script hash, so the details depend on the redeem script and the way the output is spent. Do not label every P2SH output as P2SH-P2WPKH without decoding the actual script.
Step 2: Find the exact output and determine whether it was spent
Start with the funding transaction
Find the transaction that paid to the address or, more precisely, to the decoded output script. Record the transaction ID and output index, called vout. An address can be reused, and one address may have multiple outputs. Each output must be checked independently.
Then determine whether that output has a spending transaction. An unspent P2PKH or P2WPKH output has not yet published the public key needed by its spending script. An unspent Taproot output still exposes its output key because that key is part of the output program.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Follow the outpoint, not a nearby input
A transaction may contain several inputs and outputs. The relevant input is the one whose previous-output reference points to the specific transaction ID and vout you recorded. Inspecting another input can lead you to a completely unrelated public key.
The same caution applies to address reuse. A wallet may create outputs with different scripts or keys over time, and a visual address match is not a substitute for matching the previous output being spent.
Rank #2
- Screen Cleaner is Your Screen’s New Bestfriend! - EVEO is proud to present a screen cleaner that’s perfectly suited for your TV. Meet your new screen cleaner, computer screen cleaner, laptop cleaner, iPad cleaner, Macbook,tv cleaner or any other electronic device. Our screen cleaner spray and wipe along with the included plush microfiber cloth, easily removes dust, fingerprints & other smudges on the screen’s surface. Clean effectively for a streak-free screen
- Gentle on your Screens - Our screen cleaner spray and wipes is compatible to be used even for the most sensitive LCD, LED, CRT, and OLED screens in proper use. Be at ease knowing that this product is compatible with all the major brands: LG, SONY, Samsung, Sharp, iPad, iPhone, Android screens, Kindle, PC monitors - we’ve got you covered! Can be used as LCD screen cleaner, tv cleaner, smart tv screen cleaner, and more
- Premium Super Soft Plush Microfiber Cloth - Included in this efficient screen cleaning kit. This screen cleaner spray and wipe has our signature plush microfiber cloth specially designed to comply with screens and monitors and leave them streak-free. Has been shown to effectively absorbs stubborn stains, zero streaks, and no fiber shedding. Always use this together with our screen cleaner for the best results
- Easy-to-Use Screen Cleaner Kit + microfiber cleaning cloth - The EVEO Screen Cleaning Kit will easily be your new favorite tool when it comes to taking care of the things you love most, quick and easy solution for a streak-free screen. Simply screw on the sprayer gun on the screen cleaner bottle. Spray the cleaning liquid onto the microfiber cloth, then wipe the screen until desired cleanliness & shine is achieved.
- Quality Screen Care Kit Worth Purchasing - Enjoy a convenient Screen Cleaner anytime, anywhere you need it. Your satisfaction is our top priority. We stand behind the quality of our products and that’s why, you shouldn’t be worrying at all. We manufacture the Best Screen Cleaner. and can be used for laptop cleaning kit, laptop screen cleaner, tv screen cleaner for smart tv. MacBook screen cleaner, monitor cleaner or screen cleaner spray for electronic devices with microfiber cleaning cloth
Step 3: Check a P2PKH spend
Where the key appears
For P2PKH, inspect the spending input’s scriptSig. It contains a signature followed by the public key supplied to unlock the previous output. The locking script hashes that supplied public key and compares the result with the public-key hash committed in the earlier output.
The key is therefore visible only after a spend supplies it. Before that spend, the P2PKH output contains the hash, not the full public key.
Free tools Windows power users keep installed
One-click scans. No signup required.
What to look for in raw transaction data
A verbose raw transaction view normally shows an input’s scriptSig as both assembly and hexadecimal data. In assembly form, you should see pushed data items corresponding to a signature and a serialized public key. The public key may be represented in a compressed or uncompressed serialization; the important point is that it is the full key material used by the script, rather than merely the hash committed in the output.
bitcoin-cli getrawtransaction TXID trueUse the transaction that spends the funding output, then select the matching input by its txid and vout fields. Do not treat a public key displayed elsewhere in the transaction as proof about the output under investigation.
How to record the result
- If the matching input’s
scriptSigcontains the signature and a public-key push, the P2PKH public key has been exposed in the blockchain. - If no spending transaction exists, the output has not yet published that public key through a P2PKH spend.
- If the output was spent but the script does not match the expected P2PKH pattern, re-check the decoded output type and outpoint.
Step 4: Check a native P2WPKH spend
Why checking only scriptSig fails
Native P2WPKH moves the unlocking data into the SegWit witness. Its spending input has an empty scriptSig, so a scriptSig-only inspection can incorrectly report that no public key was supplied.
Inspect the input’s witness stack instead. In the P2WPKH form described by the SegWit transaction rules, the last witness item is the compressed public key, and another item is the signature.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Clear out junk files and repair common Windows errors3Fix the driver behind crashes, sound loss and screen glitchesInspect the witness array
In verbose raw transaction output, look for the input’s txinwitness array. The key-related item is the serialized compressed public key. The witness also carries the signature used to authorize the spend.
bitcoin-cli getrawtransaction TXID trueFor a native P2WPKH input, an empty scriptSig alongside a witness containing a signature and compressed public key is expected. The empty scriptSig is not evidence that the key is absent.
Step 5: Check a nested P2SH-P2WPKH spend
Separate the wrapper from the key
Nested P2SH-P2WPKH has two layers. The script hash is committed in the earlier P2SH output. In the spending input, the scriptSig identifies the wrapped witness program, while the witness carries the actual signature and compressed public key.
Rank #3
- 【Large size】：Measuring 800 x 300 mm/ 31. 5×12 inches, which is wider and taller than others. Large mouse pad can perfectly fit your keyboard and mouse of any size, and there is also ample space for peripherals such as phones, tablets, etc.
- 【LED backlight mouse pad】：Blade Hawks RGB mouse pad provides 7 static modes and 7 dynamic modes will give you the options you are looking for. Power-off memory function remembers the last lighting mode you selected. The super glow fiber Chroma will give you a colorful gaming setup that you want.
- 【Anti-slip rubber base】：Made from Natural rubber, this gaming mousepad will firmly grip your desktop, allowing you to enjoy the ultimate precision in the games you are most passionate about. It also comes with a texture that enhances this ability even further.
- 【Smooth and waterproof surface】: Micro-textured cloth surface, for extremely precise mouse control and a smooth movement. When liquid splashes on the gaming mouse pad, it forms water droplets and slides down. Will not delay your work or gameplay.
- 【Plug and play】: This mouse and keyboard pad is powered by USB, plug and play, no driver required. One button control light modes. Press one time to change the lighting mode, press twice to change the brightness, press and hold about 3 seconds turn ON/OFF.
That means the public key is still in the witness, not in the small scriptSig wrapper. If you inspect only scriptSig, you may see the redeem-program data but miss the key itself.
Confirm the expected combination
- The previous output is a P2SH output whose redeem condition corresponds to a witness program.
- The spending input’s scriptSig identifies that nested program.
- The witness stack contains the signature and compressed public key.
When those three pieces line up for the same outpoint, the compressed public key has been exposed by the spend.
Step 6: Understand Taproot before deciding whether a key is exposed
The output key is already public
Taproot changes the usual address rule. A P2TR output script contains a 32-byte witness program. That value is the x-only Taproot output key, so the output key is visible even if the coin has never been spent.
This does not mean the internal key is the same value. Taproot’s output key commits to the spending construction, including any script tree. The internal key is a separate key used in forming that output key.
Key-path spend
A key-path spend uses the Taproot output key directly. Its witness is normally a one-element signature, apart from the possibility of an annex. The key-path witness does not publish the internal key. If your question is whether the output key is visible, the output script answers yes; if your question is whether the internal key has been revealed, a key-path witness alone does not establish that.
Script-path spend
A script-path spend publishes the tapscript being executed and a control block. The control block contains the internal key and the information needed to validate the committed script branch. Inspect the control block when you need to determine whether the internal key has become visible.
The script-path witness therefore exposes more structure than a key-path spend: the executed script, its stack data, and the control block. The output key remains the 32-byte program in the original output; the internal key is the separate value carried in the control block.
Do not call the Taproot output key the internal key
This is the most common Taproot terminology error. Report the two values separately:
- Output key: the 32-byte x-only key in the P2TR output program.
- Internal key: the key committed through the Taproot construction and revealed in a script-path control block.
A Taproot output can expose the first without exposing the second.
Rank #4
- 【Softer and More Comfortable】Vaydeer wrist rest has unique diamond pattern, which is the combination of softness and aesthetics. The materials of wrist rest are improved into higher quality memory foam and covered with silky smooth lycra. The computer wrist rest makes you as comfortable and cushiony as like rest your wrists on clouds.
- 【Ergonomic Wrist Saver】The wrist rests for keyboard and mouse comes with a 17.32×3.15×0.83 inch keyboard wrist pad and a 5.94×3.15×0.83 inch mouse wrist support. Based on ergonomic design, the unique concave shape is the perfect fit for your wrist joints. The wrist rest pad fits most computer keyboards and laptops, improve hand and wrist posture, release your wrist and arm stress.
- 【Non-Slip Rubber Bottom】Featuring an anti-skid silicone base on the bottom, this wrist keyboard support stays firmly in place on your desk, preventing the padding from sliding around, ensuring stable and consistent wrist support during extended computer sessions.
- 【Better Experience & Pain Relief】Our keyboard arm rest is beneficial to alleviate the soreness caused by direct contact and friction between your arm and a hard desk surface, reducing the risk of wrist fatigue or carpal tunnel. The soft texture of memory foam can evenly distribute the pressure around your wrists and provide good support with just enough give.
- 【Helpful in Multiple Scenarios】Whether you're working, studying, writing, typing, gaming, this keyboard and mouse rest combo is an essential accessory to add comfort and support to your hands and wrists. It’s also a great gift for men, women, family, friend, coworker, gamer, teacher, etc.
Using Bitcoin Core to inspect the data
Address and script inspection
- Run
getaddressinfofor the address in a wallet context where the command is available. - Save the returned
scriptPubKeyand identify whether it corresponds topkh,wpkh, a script-hash construction, ortr. - Do not treat an optional wallet-returned
pubkeyfield as a blockchain-history result. It may be unavailable for addresses outside the active wallet.
Raw transaction inspection
- Retrieve the funding transaction and note the output index that matches the script.
- Find the transaction spending that outpoint.
- Decode the spending transaction in verbose form so both
scriptSigand witness fields are visible. - For P2PKH, inspect the matching input’s
scriptSig. - For P2WPKH or nested P2SH-P2WPKH, inspect
txinwitness. - For P2TR, read the output program first, then classify the witness as key path or script path and inspect a control block when present.
The exact command availability depends on how the node is configured and whether the transaction is available to it. An explorer can present the same fields, but labels and layouts differ, so verify the raw input and output data rather than relying on a site’s simplified “public key” label.
Worked interpretation examples
Example: an unspent P2PKH output
The address decodes to a P2PKH script, and the funding transaction’s output remains unspent. The output commits to a public-key hash. Result: the full public key has not been published by a spending input for that output. This says nothing about other outputs created with a reused key or address.
Example: a spent P2PKH output
The matching outpoint is spent, and its spending input contains a signature push followed by a public-key push in scriptSig. Result: the public key used to satisfy the P2PKH hash commitment is exposed.
Example: a spent native P2WPKH output
The funding output is a witness-program form, the spending input has an empty scriptSig, and its witness array includes a signature and compressed public key. Result: the key is exposed in witness data. The empty scriptSig is expected.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Example: an unspent Taproot output
The output contains a 32-byte witness program. Result: the Taproot output key is already visible even without a spend. You cannot conclude that the internal key is visible from the output alone.
Example: a Taproot script-path spend
The spending witness includes a script and a control block. Result: the output key is visible in the original output, and the control block publishes the internal key along with branch information. This is different from a key-path spend, whose witness normally contains only a signature.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Common mistakes and how to correct them
Mistake: treating every address as a public key
Correction: decode the address into its output script. P2PKH and P2WPKH commit to public-key hashes; P2SH commits to a script hash; P2TR carries an output key.
Mistake: checking the address without checking a spend
Correction: for hash-based outputs, locate the exact spending input. An address string alone cannot tell you whether the committed public key has appeared in a transaction.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallOutdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchMistake: inspecting the wrong transaction input
Correction: match the spending input’s previous transaction ID and output index to the funding output. Multi-input transactions commonly contain unrelated keys.
Best Value
- 【No Drill Mounted】Cable management tray can be assembled in as little as 3 minutes or less-simply. Side clips easily clampe the edge of desk, pass through the holes on the sides, and secure excess cables with baskets. Desk cable management supports inward or outward installation to meet your needs in different scenarios, and provides you with great convenience when collecting and organizing wires.
- 【Rubber Pad Protects Desk】Wire organizer under desk built-in soft rubber pads on the clamp protect your desk from scratches, so you will not damage your furniture or office.
- 【Sturdy and Beautiful】Cord management under desk is made of high-quality carbon steel and holds about 15 lbs. The wire basket has 2 holes on each side of the tray to enable your cables to pass freely. Cable baskets are suitable for desk thickness use from 0.4" to 2.4".
- 【Space Saving & Keep Organized】Desk cable management tray holds all your power cords, outlet strips, USB hubs and computer transformers hidden from your feet, and the data cables will not enter the vacuum cleaner to keep your desk clean and tidy. Desk wire organizer is also suitable for use in the kitchen and outdoors.
- 【Reduce Safety Risks】Cable tray under desk keeps all plugs away from your kids, no more worry about tripping. Using 2 holes wire tray saves extra space, helps you easily cabling and wire protection. The mesh design is not easy to accumulate dust, but avoids safety accidents caused by messy wires.
Mistake: looking only at scriptSig
Correction: inspect witness data for native and nested SegWit forms. Native P2WPKH deliberately leaves scriptSig empty.
Mistake: calling the Taproot output key the internal key
Correction: read the output program as the output key, and inspect a script-path control block for the internal key. A key-path signature does not by itself reveal that internal key.
Mistake: treating a wallet RPC as a complete history search
Correction: use the RPC to identify the script and wallet-known fields, then inspect public transaction history. The address-information result is scoped partly to the active wallet.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
What public-key exposure does—and does not—prove
Once a public key is visible, anyone can use it as public validation data. That does not reveal the private key. Public-key exposure alone is not proof that a private key can be recovered, that a wallet has been hacked, or that funds are immediately spendable by someone else.
The practical privacy consequence is linkability. A visible key can help observers associate a spend with the key material used by that output, while a hash-only output concealed that key before spending. Taproot requires a more precise statement because the output key is public from creation, even when the internal key and script tree remain undisclosed.
If you are assessing risk, keep three questions separate:
- Is an output key visible in the output script?
- Has a spending transaction published a public key or script data?
- Has any private-key security failure been demonstrated?
The first two are blockchain-observation questions. The third requires evidence that is not supplied by a public key appearing on-chain.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Scan for outdated or missing drivers - takes under a minute3Repair Windows errors before they cause bigger problemsA repeatable checklist
- Decode the address to its output script.
- Classify the output as P2PKH, P2WPKH, nested P2SH-P2WPKH, P2TR, or another script type.
- Locate every funding output that matches the script, keeping each transaction ID and output index separate.
- For each output, determine whether it has been spent.
- For P2PKH, inspect the matching spending input’s
scriptSigfor the supplied public key. - For P2WPKH and P2SH-P2WPKH, inspect the matching input’s witness and identify the compressed public key.
- For P2TR, record the 32-byte output key from the output script.
- If a Taproot spend uses the script path, inspect its control block for the internal key; do not expect that key in a key-path witness.
- Record exactly what was observed and what was not established. A visible public key is not evidence that the private key is compromised.
Bottom line
The correct method is output-type specific. P2PKH reveals its public key in the spending input’s scriptSig; P2WPKH and nested P2SH-P2WPKH reveal a compressed public key in witness data; and Taproot exposes its output key in the output itself. For Taproot script-path spends, the control block also reveals the internal key. Match the transaction input to the exact output under review, and keep public-key visibility distinct from private-key compromise.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
