← Bitcoin Encyclopedia

BIP32 / HD Wallets

🌿 Intermediate

💡 The Plain-English Definition

BIP32 defines hierarchical deterministic wallets — HD wallets — the standard by which a single seed phrase can generate an unlimited number of Bitcoin addresses in a predictable, repeatable order. “Deterministic” just means the same seed always produces the same sequence. Every modern Bitcoin wallet uses this standard.

Every modern wallet is 'HD' (hierarchical deterministic): a single seed grows a predictable, endless tree of addresses. That means you only ever back up the seed — the wallet can always regrow every address from it. Older wallets made unrelated keys you had to back up one at a time, and a missed backup meant lost coins.Diagram by Bit By Bitcoin.

🤔 But Why Though?

Early Bitcoin wallets generated random private keys independently. Every time you needed a new address, the wallet made a brand-new, unrelated key. That meant backing up your wallet required keeping an up-to-date file of every key ever generated — and if you made new addresses but forgot to back them up, those addresses were lost for good. It also meant each address was cryptographically unrelated to the rest, so there was no way to rebuild lost keys from a single master secret.

BIP32, proposed by Pieter Wuille in 2012, replaced this with a tree structure. A single master seed — your 12- or 24-word seed phrase — is used to mathematically derive a practically unlimited number of child keys, grandchild keys, and so on down the tree. Key one, key two, key a thousand: they all flow, in order, from the same master. So if you have the seed phrase, you can regenerate every address the wallet ever used or ever will, in the right order. One backup covers everything, forever.

The same derivation also produces an extended public key, or xpub, which can generate all your receiving addresses without ever exposing the private keys. This is what watch-only wallets rely on — the xpub lets software show your balance and hand out receive addresses while the private keys stay safe in the hardware wallet. It has a real privacy implication, though: whoever holds your xpub can see your entire transaction history, past and future, which is why sharing it deserves careful thought.

🌍 The Real-World Analogy

Think of BIP32 like a master key that can generate every room key in a hotel — predictably and repeatably. Give that master key to anyone and they can reproduce any room key in the building. The master key is your seed phrase; each room key is a Bitcoin address. One master recovers everything, and no single room key can reveal the master.

⚡ So What?

BIP32 is why a seed-phrase backup is enough on its own — you don’t need to back up individual keys or addresses. It’s also why losing your seed phrase is so catastrophic: that master is the only thing the entire tree can be rebuilt from. And it’s why sharing your xpub is a real privacy decision — it exposes your whole address tree, not just a single address.

📩 The Daily Bit · free

Get one plain-English Bitcoin email each morning.

The Daily Bit — free, two minutes, unsubscribe anytime.

The Bitcoin Family GuidePrefer a book? The Bitcoin Family Guide