Episode #125 of the Stack Overflow podcast is here. We talk Tilde Club and mechanical keyboards. Listen now

Questions tagged [bip-32-hd-wallets]

BIP32, or Hierarchical Deterministic Wallets. HD wallets are wallets that can be shared amongst different wallet implementation with or without the ability to spend coins. https://github.com/bitcoin/bips/blob/master/bip-0032.mediawiki

Filter by
Sorted by
Tagged with
33
votes
1answer
4k views

ELI5: What's the difference between a child-key and a hardened child-key in BIP32

I've read BIP32, and I do understand it more or less. Could someone please explain to me like I'm 5 years old what the difference between a child-key and a hardened child-key is? I'm trying to add ...
22
votes
2answers
34k views

What is the wallet “word seed” that is commonly used in popular wallets clients and what does it do?

I've been using a pretty old version of Multibit classic and recently decided to upgrade. I tried out Multibit HD and Electrum and noticed that both have me set up a wallet with a "word seed". It's ...
18
votes
2answers
2k views

What is the status of hierarchical deterministic wallets (BIP32)

BIP32 specifies hierarchical deterministic wallets, where a master seed fully determines a whole tree of keypairs that can be arbitrarily branched. It also introduces the notions of internal and ...
14
votes
4answers
10k views

How are different Addresses generated from the same Private key?

I was reading in the "Technical background of version 1 Bitcoin addresses" that addresses are a function of the private key. More or less: Private Key -> Public Key -> Address If the Public ...
11
votes
3answers
5k views

Key derivation in HD wallets using the extended private key vs hardened derivation

I am reading the book Mastering Bitcoin and confused about wallet key derivations in Chapter 4. Keys, Addresses, Wallets. The book first mentions a private child key derivation where the child ...
10
votes
2answers
3k views

Best Practices for hardened keys in HD wallets?

Essentially, I am seeking to know where in an HD wallet tree structure should hardened keys be used. For example: Shouldn't all child keys of the master extended key be hardened? Should all extended ...
9
votes
3answers
6k views

What BIP32 derivation path does Electrum use?

Electrum 2.0 and up uses BIP0032 internally. I want to write code that generates the same addresses. I can't find any information about this online. What BIP32 paths does it use to generate addresses?...
9
votes
1answer
4k views

Is the Electrum seed compatible with other wallets?

Apologies if this is a simple question - a newbie here! I'm trying to understand backups. If I use Electrum to make a back up (including the 12 word seed password), will I then need to use Electrum to ...
9
votes
1answer
4k views

How to restore Bitcoin Core HD wallet private keys by master key?

Since version 0.13.0 Bitcoin Core supports HD wallets. In a .txt dump of the wallet (created by JSON-RPC dumpwallet command), one can find an "extended private masterkey" which is intended to be used ...
8
votes
2answers
5k views

Pros/Cons/Limitations of Mnemonic Phrases - BIP39

BIP39 mnemonic phrases replace considerations about how to store one private key, with considerations about how to store the seed to a series of private keys. The idea is that the private keys are ...
8
votes
2answers
1k views

Retrieving all the funds from BIP32 derived wallets

An ecommerce site is using BIP32 wallets for receiving order payments from a tree of child keys where each leaf node is unique to one purchase transaction. Is it common for the site to immediately ...
7
votes
3answers
1k views

What wallets currently support RBF?

What wallets currently support RBF? Is there some workaround if they don't?
7
votes
1answer
749 views

How does the client know the number of keys and coins when recovering from a seed?

When I have a seed and use it to recover my keys, how does a client find out which keys I had and their respective amounts? To clarify, I understand how a deterministic key works and that we can ...
6
votes
3answers
1k views

What BIP32 derivation path does Electrum use for Multisig?

Same question as What BIP32 derivation path does Electrum use? but for multisig. thanks.
6
votes
1answer
2k views

Derivation of parent private key from non-hardened child

Quote from BIP 32: One weakness that may not be immediately obvious, is that knowledge of a parent extended public key plus any non-hardened private key descending from it is equivalent to knowing ...
6
votes
2answers
255 views

Multi-sig N of M where 1 of the keys can see the balance but not spend (read-only key)?

If I had a non-HD multi-sig wallet, checking the balance of it would be trivial (I would just look at the blockchain to see the address' balance, without the need to hold a key). However, with HD ...
6
votes
1answer
3k views

Recovering a HD wallet from a partial seed phrase

I am attempting to help recover a wallet where the owner only wrote down 11 of the 12 words in the seed phrase. Initially, I thought the task would be a quick and well-defined, but it appears to be a ...
6
votes
1answer
584 views

If a single private key of the HD bitcoin account is compromised, is the whole HD account compromised?

The subject pretty much asks it all. I asked the same question on the Mycelium web site but did not get an answer. An HD account can have multiple private keys. Suppose one of the previous private ...
6
votes
1answer
2k views

How does Electrum make a keypair out of a seed?

Electrum uses a seed of 12 words to generate a keypair and then hierarchically generates addresses out of that keypair. I know how to generate hierarchic addresses from a keypair, but what I don't ...
6
votes
1answer
1k views

Why does BIP44 use non-hardened paths at all?

BIP44 uses hardening/private derivation on most levels: m / purpose' / coin_type' / account' / change / address_index but not on the change and address_index level. First of all, what does hardening ...
6
votes
4answers
3k views

HD wallets and address reuse

HD wallets create a series of addresses, and then when one address has received an input it will give you a new address that hasn't received inputs yet So in the idea of you sending yourself bitcoin ...
6
votes
1answer
6k views

How to get public master key of a Ledger wallet?

I have a ledger Nano S and would like to know how to extract the public master key of its wallet, in order to do HD key derivation in an external process. Is there a way or is this info never exposed ...
6
votes
1answer
376 views

Tainting with HD wallets

I'm having trouble understanding HD wallet privacy... for one thing, what if I want to send more money than I have in any of my individual derived addresses? Then I would have to use more than one, ...
5
votes
3answers
5k views

How do I view the extended public key in Electrum?

Someone's asking for my extended public key. How do I view this? What are the consequences of giving this to someone? Can they steal my Bitcoins if I give this to someone?
5
votes
1answer
3k views

difference between Master Public/private Key and Public/private Key?

what is difference between Master Public Key (MPK) and Public Key? what is difference between Master Private Key and Private Key? should I use master public key (MPK) when generating address or public ...
5
votes
2answers
612 views

BIP32 recommends a 256 bit seed. Why do most Bitcoin wallets only use a 128 bit seed?

According to BIP32's "Master key generation" section, "256 bits is advised". See https://github.com/bitcoin/bips/blob/master/bip-0032.mediawiki#Master_key_generation Why did BIP32 consider 256 bits ...
5
votes
3answers
1k views

Does Bitcoin Core support HD wallet?

Does Bitcoin Core (bitcoind or bitcoin-cli) support HD wallet? Can Bitcoin Core ... Q1. create HD wallets? Q2. import HD wallets from other wallet software? Q3. watch HD wallet? (watch transaction ...
5
votes
1answer
1k views

Determining xprv from xpub and child private key

I'm confused by the wording in BIP0032: One weakness that may not be immediately obvious, is that knowledge of a parent extended public key plus any non-hardened private key descending from it ...
5
votes
1answer
322 views

Why is a chain code needed for entropy in HD wallets?

In the documents and articles I have read, it is stated that the "chain code" in HD wallets exists to provide entropy to the derivation of child public/private keys. If I understand the process ...
5
votes
1answer
635 views

BIP32 wallet sync with Bloom filters

I'm working on my SPV library and I still have a hard time figuring how to approach the BIP32 + Bloom filters combination. Here's how I currently sync an existing HD wallet (after fast catch-up): ...
5
votes
3answers
721 views

Is it possible to check if a bitcoin address “belongs to” a master public key from a deterministic wallet?

Let's say I have a Master Public Key (MPK) and have a derived some addresses from it. How can I check later if a given address was derived from my MPK?
5
votes
1answer
392 views

Sharing BIP32 extended master public key

I have User A who generates BIP32 Master Public and Private Keys. They share the Master Public Key with User B. Using the Master Public Key User B generates Address of A and sends bitcoins from ...
5
votes
1answer
1k views

How do I remove Wallet from Bcoin?

I'm playing with bcoin cli and created lots of wallets. Is there any way to remove wallet via WalletDB Api?
4
votes
2answers
3k views

How to use NBitcoin for BIP32 wallets

I'm using c# NBitcoin to generate master key at an offline server ExtKey privateKey = new ExtKey("[My seed]"); ExtPubKey pubKey = privateKey.Neuter(); I will need to give the online server the ...
4
votes
3answers
2k views

How can I watch all addresses under HD wallet?

Is there any way to watch all addresses under HD wallet? I'd like to notify users when any of addresses in a HD wallet receive BTC. It looks like bitcoind (walletnotify) doesn't support HD wallet. ...
4
votes
3answers
6k views

How to import a HD wallet from an extended private key

I'd like to export a derived private key from my Electrum HD wallet, and use it as a HD wallet master key in a Mycelium wallet. I used bx to get the key like this (m/2'/0) (where m is the unencrypted ...
4
votes
1answer
781 views

How Do HD Wallets Keep Track of all accounts?

If a HD Wallet generates 1,000 accounts for example. How would they keep track of all of the account's balances, if someone for example, paid into the 455th account, they would want to update the ...
4
votes
3answers
2k views

is there a tool to produce addresses given a master public key?

I have master public key of my wallet and I want to generate addresses but without using my current wallet. Is there a tool that does that?
4
votes
1answer
688 views

a few questions about how HD wallet works

I've read through HD wallet from various resources and have got the basic understanding about it, but am still confused by a few details 1) Each non-hardened public keys (thus addresses) can receive ...
4
votes
6answers
4k views

Is there any service/api for deriving HD wallet addresses from a master public key?

I need this for a tool i'm writing that generates a transaction history report. think: accounting, auditing, etc. The tool does not and should not have access to the private keys. Ideally, the ...
4
votes
2answers
2k views

I want to generate a BIP32 version number for Namecoin and other altcoins

I want to make a BIP32 wallet for Namecoin and other alt coins. I just need to figure out how to generate a a public and private version number so that the BIP32 extended key prefix is something that ...
4
votes
1answer
2k views

Default derivation paths

I'd like to know all of the default derivation paths used by both software and hardware wallets for bitcoin. According to https://iancoleman.io/bip39/?#english, the following are defaults: m/0'/0' (...
4
votes
1answer
581 views

In HD Wallet recovery how does the wallets know which addresses to recover

I have been reading the BIP32 proposal explaining how HD works but it didn't mention on any point how one wallet in one phone can recover from a simple mnemonic seed. Does it just try all possible ...
4
votes
1answer
104 views

Hardened Keys vs Normal Keys - A Simpler Explanation

I'm trying to better understand hardened keys and normal keys and how the former protects the rest of and HD wallet. Following on from the answer provided here: ELI5: What's the difference ...
4
votes
3answers
962 views

How can I recover bitcoins sent to derived addresses in Electrum?

I am using the Electrum wallet. Recently, I used my Public master key on the Mycelium Gear site to create a widget. This widget generates Bitcoin addresses, which I want to manage with my Electrum ...
4
votes
1answer
2k views

Generate addresses without private key: Stealth addresses vs Master Public Key

In my case a store owner has different POS terminals. On none of the terminals should be a private key stored! The owner has one wallet, where he wants to get all transactions aggregated, done on the ...
4
votes
1answer
556 views

HD wallets with an exposed child private key

HD wallets as described here are built based on a master seed and a master public key as follows: PK.b = PK.a + sG SK.b = SK.a + s I just got a little confused about this. Is s the mnemonic seed ...
4
votes
3answers
688 views

What current wallets support deterministic public addresses (BIP32)?

Just curious how many complete implementations of the bip32 standard exist.
4
votes
1answer
2k views

How to recover coins from a wallet that uses BIP32 Deterministic Keys?

Say I am using an online wallet that uses BIP32 deterministic keys and the site goes down. I have a backup of my seed (passphrase). Is there a github repo that I can download, run on an offline ...
4
votes
1answer
154 views

How can I prove control of HD wallet through message signing?

If I sign a message with one of the address from an HD wallet, does that prove control over the rest of the addresses created and will be created inside that HD wallet?