Skip to main content

Questions tagged [deterministic-wallets]

Collects questions about deterministic wallets i.e. wallets that derive all private keys in a predictable way from a seed. Deterministic wallets have better backup properties than unrelated random private keys.

Filter by
Sorted by
Tagged with
1 vote
1 answer
195 views

How might you detect if two extended public keys have the same root private key?

Say I derive three extended public keys1 (normal mode): Parent: Pubkey: 035f743ee7d73d27e8c80f6b2458e6d4e2a45f3d7dd35c4e4d84ff3d939d09f40c Chaincode ...
Lee's user avatar
  • 877
2 votes
1 answer
56 views

How to save the derivation path with my paper wallet seed phrase?

If I only save the seed phrase and public key after generating them, my understanding is I need to know the derivation path used in order to find the correct private key from the seed, in the future? ...
gfries's user avatar
  • 21
1 vote
1 answer
318 views

Why do bip32 (HD Wallet) xprv key strings all start with

the prefix xprv9s21ZrQH143K...? no matter which seed phrase I start from. whereas normal private keys will vary totally. What does the "...9s21ZrQH143K..." mean? Further, this sequence will ...
bitguy54's user avatar
1 vote
2 answers
303 views

Can't get the bip32masterkey from mnemonic seed (Python)

I'm trying to understandand implement the functioning of Hierarchical deterministic wallets. But I can't get the bip32masterkey based on this tutorial : https://medium.com/mycrypto/the-journey-from-...
leslie's user avatar
  • 52
3 votes
2 answers
213 views

What are the best practices for managing empty, unwanted wallets?

If I have a deterministic wallet which previously held bitcoin but is now empty and is no longer needed, what information should I keep? I think there are three options: keep nothing keep the master ...
Steve's user avatar
  • 171
0 votes
1 answer
129 views

Reusing same address potential security vunerability?

I was watching Andreas Antonopoulos talk about security on youtube. I heard him say something about using the same public address multiple times could increase risk of your private key being cracked ...
Trevor's user avatar
  • 181
0 votes
1 answer
88 views

hierarchical deterministic wallets - creation of public keys

From Mastering Bitcoin: "The second advantage of HD wallets is that users can create a sequence of public keys without having access to the corresponding private keys. This allows HD wallets to ...
Rony Tesler's user avatar
1 vote
1 answer
319 views

Is there an easy way to tell if a public address was derived from an hd key?

Assuming you know the hd key's private & public info, and you have a given address is there an easy way to know whether or not that address is derived from said hdkey?
Trevor's user avatar
  • 181
0 votes
1 answer
44 views

Are hierarchical deterministic Keys secure even against their children?

Say for example, you have 1 HD Key and are generating multiple children keys. Say a max of 2147483647 child keys. Would it be possible to figure out the parent HD pub/priv keys if somebody were to get ...
Trevor's user avatar
  • 181
1 vote
1 answer
191 views

Recovering an Hierarchical Deterministic wallet

Does the use of an HD wallet (with BIP 32 and BIP 39) guarantee the possibility of its recovery in an HD wallet of any manufacturer, whether it's software or hardware? Or sometimes there are cases of ...
user avatar
0 votes
2 answers
195 views

Is brute forcing a private key with unspent coins getting easier?

Is the likelihood of correctly guessing a private key with unspent coins increasing due to: More addresses being used resulting in more private keys with unspent coins (i.e. higher chance that a ...
Paulo's user avatar
  • 1
1 vote
1 answer
642 views

HD Wallet with BIP44 - workaround of deriving public keys knowing only a xpub

My goal: I don't want to require a private key to hierarchically derive new addresses. Sure, I can create a batch of addresses, given a private key, at first. But once I have surpassed that batch I'll ...
Luka's user avatar
  • 117
0 votes
0 answers
140 views

When a BIP44 XPUB and one of its descendant keys get leaked, what's the worst that can happen?

I understand that BIP44 has one edge case vulnerability where if a hacker gets his hands on an Xpub and a private key from its descendants, he can compute the Xprv pair of the original Xpub and ...
Vlad's user avatar
  • 277
1 vote
2 answers
237 views

Correct Approach for Payments on Multiple Addresses

I have clients that would like to pay for services in BTC. TL;DR To generate a new payment address must I generate a new private key (essentially a new wallet)? Is it better to generate independent ...
Martin's user avatar
  • 329
1 vote
1 answer
133 views

What does "deal with collisions" mean in the context of BIP32 fingerprints?

As I could read on BIP 32, we can generate HD Wallets using all the rules defined by Pieter Wuille, but I came across a sentence that was written in the document and I could not fully understand. ...
Allan Romanato's user avatar
1 vote
0 answers
32 views

Tool to generate graphical DAG from a seed

I'd like to have a tool that generates a graphical DAG display from addresses generated from a seed. In particular to distinguish which transactions are for "receive" addresses, and which are for "...
lash's user avatar
  • 111
1 vote
1 answer
204 views

Consequences of sibling keys when xpub and xprv are leaked

Let's say the following keys are leaked: 44'/60'/4'/0 extended private key 44'/60'/4'/0 extended public key (you can just derive this from the above private key) Now using the above information can ...
Sibi's user avatar
  • 135
2 votes
1 answer
772 views

What are the consequences from the leak of xpub and child private key?

Let's say the following keys are leaked: Extended public key derived from path 44'/60'/4' Leaked child private key from path 44'/60'/4'/0 Does that imply all the child private keys of the root 44'/...
Sibi's user avatar
  • 135
0 votes
1 answer
404 views

Deterministic - BIP32 Derivation Gap Limit

I'm creating many derived addresses from a xprv (HD private key). I've been reading about the gap limit problem. The gap limit is 20 addresses ahead. How do I get my wallet to detect funds, in ...
Luka's user avatar
  • 117
0 votes
1 answer
63 views

Hierarchical Deterministic (HD) Importing Funds

I'm creating derived addresses from a HD private key. I have all data saved, such as the; seed, HD private key and derived addresses with their private keys, plus wif formats. I'm receiving funds in ...
Luka's user avatar
  • 117
0 votes
1 answer
271 views

funds in hd wallet

I have a doubt on HD wallets, I have generated a sequence of address. how to check the balance of each address or how we can look for balance. Did the amount move to the base address as like monero ...
Sarath Kumar's user avatar
1 vote
1 answer
40 views

wallet that does not abstract change addresses?

I wanted a hands on approach to see change adresses myself instead of hiding away all the details. I also want to see non-deterministic wallets just for education so that I can understand. When we ...
Mini kute's user avatar
2 votes
1 answer
172 views

How do non-deterministic wallets violate the principle of address reuse?

In chapter 5 of Mastering Bitcoin, Andreas writes: "The disadvantage of random keys is that if you generate many of them you must keep copies of all of them, meaning that the wallet must be backed up ...
timothyylim's user avatar
1 vote
1 answer
100 views

Is auditing a BIP32 tree only possible if it is non-hardened?

BIP 32 allows you to to implement the auditor use case: Audits: N(m/*) In case an auditor needs full access to the list of incoming and outgoing payments, one can share all account public ...
David says Reinstate Monica's user avatar
0 votes
1 answer
801 views

Bitcoinjs-lib help with deterministc wallet

i'm learning about bitcoin, and bitcoinjs-lib (https://github.com/bitcoinjs/bitcoinjs-lib) I created a dummy wallet on coinomi using this mnemonic ('eight better wealth display father cave suffer ...
Caio Souza Andrade's user avatar
1 vote
3 answers
1k views

Trying to understand parent fingerprint in HD wallets

I'm trying to implement a barebones HD wallet generator in C#. I'm starting with a mnemonic and derivation path m/0' and want to generate BIP141 p2wpkh-in-p2sh addresses. Obviously for the Master ...
MrPuzzler's user avatar
  • 233
3 votes
1 answer
3k views

How do HD wallets use mnemonic to recover all private keys?

As I understand, a wallet like BRD wallet can have many private keys and receiving addresses. When I give them the mnemonic, how do they re-generate all of the relevant private keys from that ...
Kyle Graham's user avatar
9 votes
2 answers
3k views

BIP32 recommends a 256 bit seed. Why do most Bitcoin wallets only use a 128 bit seed?

According to BIP32's "Master key generation" section, "256 bits is advised". See https://github.com/bitcoin/bips/blob/master/bip-0032.mediawiki#Master_key_generation Why did BIP32 consider 256 bits ...
knaccc's user avatar
  • 143
1 vote
1 answer
433 views

What is the meaning and application of the apostrophes in derivation paths of BIP32 / BIP44?

Can we please clarify if there is any difference (because apparently some technical documentation explicitly requests to include apostrophes) between a derivation from extended private key (xprv) or ...
skydanc3r's user avatar
  • 179
0 votes
1 answer
160 views

Bitcoin Address Workflow on Spend Leftovers

I need to understand the correct Bitcoin address workflow for transactions. I created an address a while back with a common wallet and sent some coin there. The address is at segwit m/49'/0'/0'/0/0. I ...
Christian Findlay's user avatar
2 votes
1 answer
535 views

Understanding a Wallet Restore

This is my first post on block chain related programming so please excuse my ignorance. I find the terminology in the BIP32 and BIP39 specs hard to understand so I'm trying to confirm my understanding ...
Christian Findlay's user avatar
2 votes
2 answers
1k views

How to list all addresses in a deterministic wallet?

Deterministic wallets generate a key space following established standards, using a random passphrase as seed. I have a couple of questions: How many keys can be generated by a deterministic wallet? ...
blueFast's user avatar
  • 297
7 votes
1 answer
2k views

Determining xprv from xpub and child private key

I'm confused by the wording in BIP0032: One weakness that may not be immediately obvious, is that knowledge of a parent extended public key plus any non-hardened private key descending from it ...
maletor's user avatar
  • 173
1 vote
1 answer
1k views

NBitcoin and Mnemonic Standards

I am very new to Bitcoin development so forgive me... I'm using NBitcoin in a .Net console app to generate a master key using a mnemonic and then derive hierarchical keys. Here is the code I am using: ...
INNVTV's user avatar
  • 133
24 votes
1 answer
5k views

Derivation of parent private key from non-hardened child

Quote from BIP 32: One weakness that may not be immediately obvious, is that knowledge of a parent extended public key plus any non-hardened private key descending from it is equivalent to knowing ...
meshcollider's user avatar
  • 11.9k
5 votes
1 answer
1k views

How do hierarchical deterministic wallets work transaction-wise?

As far as I know (and as explained here) hierarchical deterministic wallets keep a master key pair (private and public). When using them the public key is newly generated in every transaction. I ...
Pisuke Soramame's user avatar
11 votes
1 answer
7k views

Is the Electrum seed compatible with other wallets?

Apologies if this is a simple question - a newbie here! I'm trying to understand backups. If I use Electrum to make a back up (including the 12 word seed password), will I then need to use Electrum to ...
Nag's user avatar
  • 113
0 votes
1 answer
62 views

Deterministic wallet audit ability

Deterministic wallet described in BIP 32 has an auditing functionality by sharing the public parent key. https://bitcoin.org/en/developer-guide#hierarchical-deterministic-key-creation But if I use ...
Bartok's user avatar
  • 35
1 vote
1 answer
68 views

For deterministic wallets, which key is better to give out?

I am just finding out about deterministic wallets. I have read here that it is possible to derive the private key if one happens to have given out both master public key AND a child private key. So ...
LIQwer's user avatar
  • 11
2 votes
1 answer
2k views

Do I need to secure my Master Public Key generated from an Electrum wallet?

I have an electrum wallet and have exported the Master Public Key. What level of security should I use for the MPK? Should I keep it offline? Can I keep it in plaintext in an online computer? Back ...
browep's user avatar
  • 654
7 votes
1 answer
964 views

How does the client know the number of keys and coins when recovering from a seed?

When I have a seed and use it to recover my keys, how does a client find out which keys I had and their respective amounts? To clarify, I understand how a deterministic key works and that we can ...
Daniel's user avatar
  • 267
1 vote
1 answer
250 views

If an offline, never connected, Electrum wallet is lost, it can still be recovered?

I'm just making sure I understand this correctly, since I'm new to Bitcoin. Lets say there is an Electrum wallet created, but on a machine which was never connected to the internet. This machine is ...
DarnTheLocal's user avatar
1 vote
1 answer
583 views

What is the "hierarchical" about in Hierarchical Deterministic Wallets?

So, the advantage of deterministic wallets is that you can recreate all private keys from the initial backup you created. What's the advantage of having a hierarchy branching out from the master seed,...
Murch's user avatar
  • 76k
2 votes
2 answers
912 views

Deterministic wallet and address generation

I have a ledger nano hd wallet and I actively used the Google Chrome plugin to receive some transactions. After that I linked the HD wallet to my mycelium tablet app. If I receive more transactions ...
Gianluca Ghettini's user avatar
1 vote
0 answers
159 views

BitcoinJ - Master Key from 12 word

Is there any posibilities to: 1. Create deterministic seed from 12 or 24 word 2. Create Private Master key from this deterministic seed 3. Create deterministic wallet using private master key in ...
Dragomirus's user avatar
5 votes
1 answer
611 views

Derive new public keys from a public key?

This article says you can generate new public keys from an already generated public key. How is this possible? https://bitcoinmagazine.com/articles/deterministic-wallets-advantages-flaw-1385450276 ...
Magritte's user avatar
2 votes
1 answer
868 views

Problems generating addresses using bip32

I'm trying to generate bip32 addresses using the following (the PHP version). https://github.com/prusnak/addrgen The author provides a test MPK which I can get working that looks like this: ...
Akhil F's user avatar
  • 315
4 votes
1 answer
80 views

Is mainline Bitcoin planning on switching to deterministic wallets?

Deterministic wallets enable reliable backups but the mainline client doesn't use them. I was told that bitcoind and Bitcoin-QT are planning on switching to deterministic wallets by default, is this ...
Indolering's user avatar
5 votes
2 answers
1k views

How to recover a deterministic wallet offline?

I know that in the case of electrum there is a gap limit and it will keep generating addresses until it finds a number of consecutive empty addresses equal to the gap limit. What about if I want to ...
ka lin's user avatar
  • 123
10 votes
1 answer
1k views

How do deterministic wallets know how many keys to generate?

Say I backup the "seed/key" for a deterministic wallet. I then create 10,000 transactions, resulting in 10,000 new addresses being generated. Say I then lose the wallet file and I restore from the "...
bitboy99921232323's user avatar