Questions tagged [bip32-hd-wallets]

BIP32, or Hierarchical Deterministic Wallets. HD wallets are wallets that can be shared amongst different wallet implementation with or without the ability to spend coins. https://github.com/bitcoin/bips/blob/master/bip-0032.mediawiki

Filter by
Sorted by
Tagged with
27 votes
2 answers
37k views

What is the wallet "word seed" that is commonly used in popular wallets clients and what does it do?

I've been using a pretty old version of Multibit classic and recently decided to upgrade. I tried out Multibit HD and Electrum and noticed that both have me set up a wallet with a "word seed"...
user avatar
23 votes
1 answer
5k views

Derivation of parent private key from non-hardened child

Quote from BIP 32: One weakness that may not be immediately obvious, is that knowledge of a parent extended public key plus any non-hardened private key descending from it is equivalent to knowing ...
meshcollider's user avatar
  • 11.8k
4 votes
3 answers
6k views

Default derivation paths

I'd like to know all of the default derivation paths used by both software and hardware wallets for bitcoin. According to https://iancoleman.io/bip39/?#english, the following are defaults: m/0'/0' (...
MrPuzzler's user avatar
  • 233
5 votes
1 answer
1k views

a few questions about how HD wallet works

I've read through HD wallet from various resources and have got the basic understanding about it, but am still confused by a few details 1) Each non-hardened public keys (thus addresses) can receive ...
Will Gu's user avatar
  • 368
3 votes
1 answer
3k views

How to get xpub or mpk(bip32) for my bitcoin core wallet?

I m not getting any such option in bitcoin-core Ui and documentation http://bitcoindaily.org/bitcoin-guides/bitcoin-core-tutorial/
Priyanka Agrawal's user avatar
46 votes
1 answer
9k views

ELI5: What's the difference between a child-key and a hardened child-key in BIP32

I've read BIP32, and I do understand it more or less. Could someone please explain to me like I'm 5 years old what the difference between a child-key and a hardened child-key is? I'm trying to add ...
Amin Shah Gilani's user avatar
3 votes
4 answers
2k views

Electrum 2.0: non-BIP39/32 standardisation complicates matters immensely. Why?

Electrum 2.0 has been causing me some frustration, insofar as it seems to be a non-standard implementation of BIP32/BIP39 (HD wallets, mnemonic seed, respectively). The wallet in question is a 2of2 ...
Wizard Of Ozzie's user avatar
16 votes
3 answers
9k views

Key derivation in HD wallets using the extended private key vs hardened derivation

I am reading the book Mastering Bitcoin and confused about wallet key derivations in Chapter 4. Keys, Addresses, Wallets. The book first mentions a private child key derivation where the child ...
user1's user avatar
  • 161
7 votes
1 answer
958 views

How does the client know the number of keys and coins when recovering from a seed?

When I have a seed and use it to recover my keys, how does a client find out which keys I had and their respective amounts? To clarify, I understand how a deterministic key works and that we can ...
Daniel's user avatar
  • 267
5 votes
3 answers
16k views

How to generate public and private key pairs from the 12 seed words in python

I basically followed the instructions here How to generate mycelium addresses from the 12 words in python So my code is similar: from bip32utils import BIP32Key from bip32utils import BIP32_HARDEN ...
Stormy Dan's user avatar
4 votes
2 answers
2k views

How does BIP 39 mnemonic work?

As I already understood the mnemonics are the private key separated in 12 words which joined together in the very same order produces the private key. How are mnemonics generated? Why Ledger ...
Allan Romanato's user avatar
3 votes
2 answers
3k views

How do I migrate my Bitcoin Core wallet to an HD wallet?

I created a wallet before Bitcoin Core 0.13.0 was released so my wallet is not a HD wallet. How do I make my wallet a HD wallet?
Ava Chow's user avatar
  • 69.9k
2 votes
2 answers
1k views

Can a Trezor seed be used in any other HD wallet?

Trezor FAQ says If you do not use a passphrase, your recovery seed is all that is needed to access your bitcoins. If you do not use a passphrase, can the Trezor seed be used to recreate a ...
oks's user avatar
  • 257
21 votes
4 answers
21k views

How are different addresses generated from the same private key?

I was reading in the "Technical background of version 1 Bitcoin addresses" that addresses are a function of the private key. More or less: Private Key -> Public Key -> Address If the ...
ciczan's user avatar
  • 313
19 votes
1 answer
2k views

What is the status of hierarchical deterministic wallets (BIP32)

BIP32 specifies hierarchical deterministic wallets, where a master seed fully determines a whole tree of keypairs that can be arbitrarily branched. It also introduces the notions of internal and ...
Noah's user avatar
  • 1,479
11 votes
3 answers
11k views

What BIP32 derivation path does Electrum use?

Electrum 2.0 and up uses BIP0032 internally. I want to write code that generates the same addresses. I can't find any information about this online. What BIP32 paths does it use to generate addresses?...
Nick ODell's user avatar
  • 29.4k
9 votes
1 answer
5k views

How to restore Bitcoin Core HD wallet private keys by master key?

Since version 0.13.0 Bitcoin Core supports HD wallets. In a .txt dump of the wallet (created by JSON-RPC dumpwallet command), one can find an "extended private masterkey" which is intended to be used ...
talalai88's user avatar
  • 151
8 votes
4 answers
2k views

What BIP32 derivation path does Electrum use for Multisig?

Same question as What BIP32 derivation path does Electrum use? but for multisig. thanks.
joe.js's user avatar
  • 592
7 votes
4 answers
3k views

What wallets currently support RBF?

What wallets currently support RBF? Is there some workaround if they don't?
Comodore's user avatar
  • 568
6 votes
2 answers
761 views

XPRIV/XPUB type for P2TR

As far as I understand, there is a standard that describes what address types an extended private key or extended public key is intended to derive and it works as such: xpriv/xpub => Legacy ...
Dalit Sairio's user avatar
5 votes
1 answer
565 views

Can you detect that the addresses generated by an HD wallet came from a single wallet?

Can someone who is looking at the blockchain detect that 2 or more addresses generated by a single HD wallet are actually generated by that single seed/HD wallet ? Can someone who does know that 2 or ...
user avatar
5 votes
1 answer
306 views

Elliptic Curve Point at Infinity

Let's take into account the Bitcoin curve. My questions are: What exactly is the "point at infinity"? Is there more than one "point at infinity" How can I identify if my EC generated x and y are the "...
Allan Romanato's user avatar
5 votes
1 answer
1k views

Hardened Keys vs Normal Keys - A Simpler Explanation

I'm trying to better understand hardened keys and normal keys and how the former protects the rest of and HD wallet. Following on from the answer provided here: ELI5: What's the difference ...
Sach's user avatar
  • 53
2 votes
1 answer
378 views

Using more than a 12 word mnemonic phrase

From Mastering Bitcoin: "From a security perspective, the amount of entropy actually used for the production of HD wallets is roughly 128 bits, which equals 12 words. Providing more than 12 words ...
Rony Tesler's user avatar
2 votes
1 answer
4k views

How to convert a WIF private key to a BIP32 extended private key

I am trying to recover the extended BIP32 master private key from its extended BIP32 public key (which I already know) and a WIF private key (which I obtained by decrypting a BIP38 seed with a ...
Erwin Mayer's user avatar
2 votes
1 answer
153 views

What am I doing wrong in calculating child private key in HD wallets and reversing back parent private key?

I'm trying to understand the process of creating the children's private key and, in the case of knowing the children's private key and the left 256-bit hash result, the process of returning the parent'...
dassd's user avatar
  • 1,049
1 vote
1 answer
138 views

The left-half 256 bits of the hash are added to the parent key to produce the child private key

So in mastering bitcoin it mentioned that to generate child key,The left-half 256 bits of the hash are added to the parent key so if we add that it will be 512 bits.But we need 256 bit so do we hash ...
Athul A's user avatar
  • 69
1 vote
1 answer
2k views

Deriving hex private key from a HD wallet

I have the following test Mnemonic: stable primary already collect buffalo bike into robust fury cement proof agree neither blouse course From this I can generate a BIP39 Wallet: https://iancoleman....
timothyylim's user avatar
0 votes
1 answer
98 views

What type of Bitcoin wallet is more secure than others?

What type of Bitcoin wallet is more secure than others among Paper wallet, Physical bitcoin, Mobile wallet and Web wallet ?
Questioner's user avatar
  • 1,151
0 votes
1 answer
861 views

How can i switch from BIP32 to BIP44 using bitcoinj

i am working on a wallet that is using BIP32 for creating Accounts, addresses, xpub, public keys, transaction and etc. but now i want to switch from BIP32 to BIP 44. how can i do this using bitcoinj i ...
Zombie's user avatar
  • 548
-1 votes
1 answer
329 views

How genereate pub key from priv key ? algo

How to generate pub key from prive key ? All examples and explain skip this. but i dont need steps to address etc . i only need steps from priv to pub ( compressed or not ) what using at that. if ...
tseries's user avatar
  • 205
12 votes
2 answers
3k views

Best Practices for hardened keys in HD wallets?

Essentially, I am seeking to know where in an HD wallet tree structure should hardened keys be used. For example: Shouldn't all child keys of the master extended key be hardened? Should all extended ...
morsecoder's user avatar
  • 14.1k
7 votes
1 answer
2k views

Determining xprv from xpub and child private key

I'm confused by the wording in BIP0032: One weakness that may not be immediately obvious, is that knowledge of a parent extended public key plus any non-hardened private key descending from it ...
maletor's user avatar
  • 173
7 votes
3 answers
11k views

How do I view the extended public key in Electrum?

Someone's asking for my extended public key. How do I view this? What are the consequences of giving this to someone? Can they steal my Bitcoins if I give this to someone?
Nick ODell's user avatar
  • 29.4k
7 votes
1 answer
2k views

How does Electrum make a keypair out of a seed?

Electrum uses a seed of 12 words to generate a keypair and then hierarchically generates addresses out of that keypair. I know how to generate hierarchic addresses from a keypair, but what I don't ...
Mr Jones's user avatar
  • 548
7 votes
1 answer
878 views

Why is a chain code needed for entropy in HD wallets?

In the documents and articles I have read, it is stated that the "chain code" in HD wallets exists to provide entropy to the derivation of child public/private keys. If I understand the process ...
Stephen's user avatar
  • 173
6 votes
1 answer
4k views

Recovering a HD wallet from a partial seed phrase

I am attempting to help recover a wallet where the owner only wrote down 11 of the 12 words in the seed phrase. Initially, I thought the task would be a quick and well-defined, but it appears to be a ...
LivingInformation's user avatar
5 votes
3 answers
9k views

How to import a HD wallet from an extended private key

I'd like to export a derived private key from my Electrum HD wallet, and use it as a HD wallet master key in a Mycelium wallet. I used bx to get the key like this (m/2'/0) (where m is the unencrypted ...
sevcsik's user avatar
  • 183
4 votes
1 answer
4k views

How to generate mycelium addresses from the 12 words in python

I am trying to re-generate the receiving addresses (and change addresses, for that matter) my mycelium wallet has generated. So far I've used trezor's implementation of BIP39 to generate the entropy ...
Gabriel's user avatar
  • 115
4 votes
1 answer
2k views

Is the "recovery phrase" generated by a wallet app platform independent?

I recently started a wallet with Coinbase Wallet, and I was asked to backup a 12 word "recovery phrase" that is supposed to be able to recover my wallet in the event that I delete the app from my ...
jay w's user avatar
  • 43
4 votes
1 answer
599 views

Is BIP 32 Technology Cryptographic Curve Agnostic?

Does BIP 32 always implicitly assume secp256k1 elliptic curve cryptography (ECC) is to be applied, or can BIP 32 technology also be applied to create extended public or private keys that can readily ...
skaht's user avatar
  • 3,047
4 votes
3 answers
3k views

is there a tool to produce addresses given a master public key?

I have master public key of my wallet and I want to generate addresses but without using my current wallet. Is there a tool that does that?
pan's user avatar
  • 41
4 votes
2 answers
3k views

I want to generate a BIP32 version number for Namecoin and other altcoins

I want to make a BIP32 wallet for Namecoin and other alt coins. I just need to figure out how to generate a a public and private version number so that the BIP32 extended key prefix is something that ...
BigJayMan's user avatar
4 votes
1 answer
806 views

Clarification of BIP32 hierarchical deterministic multisig scripts

As everyone is aware, I'm a huge proponent of Vitalik Buterin's pybitcointools Python 2.7/3.x library. I am having a some trouble understanding the BIP32 concepts, which are coded in the deterministic/...
Wizard Of Ozzie's user avatar
3 votes
3 answers
3k views

How to link a bitcoin address to a wallet address?

BitGo has a feature where you can have multiple addresses under a wallet. The wallet also has its own address. Now suppose I have two addresses under my wallet. This means for any user to send me BTC, ...
Gagan's user avatar
  • 241
3 votes
1 answer
391 views

What software can I use to calculate my private key from a seed (e.g. Trezor or Ledger)?

I want to make sure I can use my seed from Trezor or Ledger (or others) in a backup process without using an actual Trezor or Ledger to do it. I have to find out my private key. I probably also need ...
bomben's user avatar
  • 518
3 votes
1 answer
667 views

What is the meaning of 'change' and 'reserve' in a Bitcoin Core wallet dump?

I'm using libwally to derive addresses from an extended private key. I shared the seed with Bitcoin Core (loaded it in a blank wallet with sethdseed), and noticed that there are 2 addresses in the ...
Sosthène's user avatar
  • 623
3 votes
1 answer
2k views

bip39 checksum python

Is there any Python package which will allow me to verify if the checksum of a bip39 mnemonic is valid? For instance, I have a 24-word bip39 mnemonic, and I might have made a mistake for one of the ...
Sameer Lal's user avatar
3 votes
2 answers
11k views

Get Master Private Key from BIP39 Seed

I have BIP39 Seed: 5b56c417303faa3fcba7e57400e120a0ca83ec5a4fc9ffba757fbe63fbd77a89a1a3be4c67196f57c39a88b76373733891bfaba16ed27a813ceed498804c0570 I want to get Master private Key Then I Have to ...
monkeyUser's user avatar
3 votes
2 answers
324 views

How are children's private keys in HD wallets obtained and how can knowing them reveal the parent's private key?

I'm reading master bitcoin book and I came to the part related to HD wallets and how to create a Child private key (link). It says the following: The parent public key, chain code, and the index ...
dassd's user avatar
  • 1,049