← Bitcoin Encyclopedia

Schnorr Signatures & Taproot

🌿 Intermediate

💡 The Plain-English Definition

Taproot was Bitcoin’s most significant upgrade since SegWit, activated in November 2021. It brought Schnorr signatures (a more efficient, more private signature scheme), MAST (a way to hide complex spending conditions until they’re actually used), and Tapscript (an upgraded scripting language) — all working together to make Bitcoin transactions cheaper, more private, and more flexible.

🤔 But Why Though?

Bitcoin used ECDSA signatures — the Elliptic Curve Digital Signature Algorithm — from the start. ECDSA works well, but it has a specific limitation: each key produces its own signature, so a multisig transaction (one needing several keys to sign) shows all those signatures separately on-chain, making it visibly larger and recognisable as multisig. Schnorr signatures, named after the mathematician Claus P. Schnorr who invented them in 1989, add one crucial property: they can be added together. Several Schnorr signatures can be combined — “aggregated” — into a single signature that’s indistinguishable from an ordinary single-key one. So a 3-of-5 multisig (needing 3 of 5 keyholders to sign) can produce one signature that looks on-chain exactly like a simple payment from one person. Privacy and efficiency improve together, and multisig transactions are no longer visibly flagged as likely holding larger amounts.

MAST complements this. Short for Merkelized Abstract Syntax Trees, it organises complex spending conditions into a tree where only the branch you actually use has to be revealed. If some bitcoin is locked with five possible spending conditions — a time delay, a multisig, and several others — MAST reveals only the one condition you actually use when you spend, and the rest stay permanently private.

Tapscript is the upgraded scripting language that runs all of this. It’s designed to be extensible, meaning future upgrades can add new scripting abilities without another full protocol change. Taproot itself activated as a soft fork — a backward-compatible upgrade, where old nodes still accept the new blocks — in November 2021, after years of development and with overwhelming miner support, in the smoothest activation in Bitcoin’s history.

🌍 The Real-World Analogy

Think of Taproot like upgrading from a house with a single front door — one key, one lock, one signature visible to any visitor — to a house where every entry point (front door, back gate, side entrance, emergency exit) looks identical from the outside. A visitor can’t tell whether you came in alone, with a partner, or through a complex arrangement needing three keyholders. All that flexibility is hidden behind a uniform facade.

⚡ So What?

Taproot matters practically in two ways. First, it makes multisig transactions private — they look identical to single-key ones on-chain, removing the “large wallet” signal. Second, it created bc1p addresses (the new Taproot format, recognisable by the bc1p prefix), which should be the default for anyone who wants the best available efficiency and privacy. If your wallet supports bc1p addresses, use them.

📩 The Daily Bit · free

Get one plain-English Bitcoin email each morning.

The Daily Bit — free, two minutes, unsubscribe anytime.

The Bitcoin EncyclopediaPrefer a book? The Bitcoin Encyclopedia