1
I have been reading about Account Extended Private Key and Account Extended Public Key that derives from the Master Private Key and Master Public Key, but I still have some question about their security.
I read that Account Extended Private Key should be kept private because if others got hold of it, they could sign the transaction with the key, effectively stealing your cryptocurrency. How does this work exactly? Is there an application that I can import other's Account Extended Private Key and send certain amount to my other wallet's address?
Also, I read that Account Extended Public Key should be kept private as well because exposing it to others allow them to go through the transactions. How does this work? Is there an application that I can import to view the transaction history?
You said Account Extended Private/Public Key is used to derive the private/public key for my addresses used to receive/send cryptocurrency. I was wondering if it's Account Extended Keys -> Address Keys or Account Extended Keys -> BIP32 Extended Keys -> Address Keys? – Carol Ward – 2019-04-16T19:10:31.430
Account extended key is not really a thing. It just means it's a BIP 32 extended key derived from a master extended private key at the account level in accordance to BIP 44. Usually it's the key derived from the master key at m/44'/0'/0'. So it's really BIP 32 extended key (which you call account extended key) -> BIP 32 extended key (the key for whether the child keys are change or not) -> child keys (address keys).
– Andrew Chow – 2019-04-16T19:25:00.947ohhh, I got it! If you don't mind, I have 1 more question. Then in order to see the transaction of the account, I just need to import the BIP 32 extended key (the account extended key), not extended key for the change, right? I just imported the BIP 32 extended key (account extended key), and I don't see any transaction history. Does it not show a previous transaction? only future ones? – Carol Ward – 2019-04-16T19:39:32.130
Electrum derives both normal receiving addresses and change addresses, so just importing your account extended key is fine. As for why your transactions don't appear, I don't know. Electrum will rescan and pull transactions from the blockchain, so they should appear. It may be that your addresses are not derived at the derivation paths that Electrum is using. – Andrew Chow – 2019-04-17T01:26:20.380