My Bitcoin Core descriptor has an xprv: did I set up my wallet wrong?
If Bitcoin Core accepted a descriptor with an xprv or a WIF, you're likely worried that your backup is contaminated and the wallet is no longer safe.
**Bitcoin Core accepts private material in a descriptor: where it takes a public key or an xpub, it also takes an xprv or a WIF.**
What you're seeing: the descriptor carries private material
A Bitcoin Core descriptor is an expression that describes how to derive addresses. Normally you expect it to contain an extended public key (xpub) or a simple public key.
But the same slot accepts an extended private key (xprv) or a WIF. That means the descriptor itself can hold what's needed to sign.
The Bitcoin Core documentation (Bitcoin Core · doc/descriptors.md) says it directly: a descriptor can bring private material; where it accepts a public key or an xpub, Bitcoin Core also accepts an xprv or a WIF.
Why that's scary
When you see an xprv instead of an xpub, your first thought is that you set up the wallet wrong or that your backup got exposed. Seeing public addresses is not the same as seeing signing material.
That fear is not irrational: a descriptor with an xprv should not be copied into a chat or emailed like a deposit address. It is private material, not a neutral description.
What to do if your descriptor has an xprv or a WIF
Treat that descriptor like a private key: keep it encrypted or on paper, away from screenshots, shared notes, or unprotected cloud backups.
If you think someone else may have seen it, move the funds to a new wallet. Do not wait to confirm whether they really saw it; assume they did.
To recover the wallet, do not rely only on the descriptor. Make sure you have the backup your wallet asked you to write down, and store the descriptor separately.
Accepting it does not mean the descriptor is your complete backup
Bitcoin Core accepting an xprv or a WIF in a descriptor does not prove that this descriptor alone is enough to recover all your funds. You can have private material in the descriptor and still need your seed or other data to rebuild the whole wallet. And having private material does not make the descriptor safe to share: anyone who sees it can sign transactions.
Source: Bitcoin Core · doc/descriptors.md