← Bitcoin Encyclopedia

BIP32 / HD Wallets

🌿 Intermediate

💡 The Plain-English Definition

BIP32 defines hierarchical deterministic wallets — HD wallets — the standard by which a single seed phrase generates an unlimited number of Bitcoin addresses in a predictable, recoverable sequence. Every modern Bitcoin wallet uses this standard.

🤔 But Why Though?

Early Bitcoin wallets generated random private keys independently. Every time you needed a new address, the wallet created a new, unrelated key. This meant that backing up your wallet required keeping an up-to-date file containing every key ever generated — miss a backup after generating new addresses, and those addresses are lost forever. It also meant that each address was cryptographically unrelated to the others, so there was no way to reconstruct lost keys from any master secret.

BIP32, proposed by Pieter Wuille in 2012, replaced this with a tree structure. A single master seed — the 12 or 24 word seed phrase — is used to mathematically derive a practically unlimited number of child keys, grandchild keys, and so on down the hierarchy. Derive key one, two, three, a thousand — they all flow deterministically from the same master. If you have the seed phrase, you can regenerate every address the wallet ever used or will ever use, in the correct order. One backup covers everything, forever.

The derivation also produces an extended public key — the xpub — which can generate all the receiving addresses without ever exposing the private keys. This is what watch-only wallets use: the xpub lets software show you your balance and generate receive addresses, while the private keys stay safely in the hardware wallet. The privacy implication is significant: whoever has your xpub can see your entire transaction history — past and future — which is why sharing it deserves careful thought.

🌍 The Real-World Analogy

Think of BIP32 like a master key that can generate every room key in a hotel — predictably and repeatably. Give the master key to anyone and they can reconstruct any room key in the building. The master key is your seed phrase; each room key is a Bitcoin address. One master recovers everything. No individual room key can reveal the master.

⚡ So What?

BIP32 is why your seed phrase backup is sufficient — you don’t need to back up individual keys or addresses. It’s also why losing your seed phrase is so catastrophic: that master is the only thing from which the entire hierarchy can be reconstructed. And it’s why xpub sharing is a significant privacy decision: it exposes your entire address tree, not just one address.

Part of The Bitcoin Encyclopedia 167 terms, plain English, no jargon.