What is a Bitcoin public key? How it derives from private keys, powers addresses and signatures, enables watch-only wallets and proof of reserves.
A public key is the shareable half of Bitcoin's cryptographic key pair — derived mathematically from a private key, used to generate receiving addresses and to verify signatures. It can be shown to anyone without risk: the math that produces a public key from a private key cannot be run backward, which is the asymmetry Bitcoin's entire ownership model rests on.
Your wallet derives a public key from each private key on the secp256k1 elliptic curve, then hashes and encodes it into the addresses you share. When you spend, the wallet signs the transaction with the private key and reveals the public key; every node on the network checks that the signature matches — proving you control the coins without ever seeing the secret. This verify-without-revealing property is asymmetric cryptography's core trick, and Bitcoin applies it billions of times a day. Since the Taproot upgrade, keys can even be aggregated so complex multi-party arrangements look like a single ordinary key on-chain.
Hierarchical deterministic wallets bundle the concept upward: an extended public key (xpub) can derive all of a wallet's future public keys and addresses — but no private keys. Hand an xpub to an accountant, an auditor, or your own phone, and they can watch every balance and generate fresh receiving addresses with zero ability to spend. This is the machinery behind watch-only wallets and much of institutional treasury monitoring. The caveat: an xpub reveals your entire address history to whoever holds it, so it's a privacy secret even though it's not a spending secret.
Public-key cryptography is why bitcoin reserves can be proven rather than merely claimed. Proof-of-reserves schemes — like the on-chain attestations published by Twenty One Capital — amount to demonstrating signature control over disclosed addresses. Analysts attributing the US government's or Bhutan's holdings are working entirely in public-key space: clustering addresses, following flows, never needing (or having) any private material. Everything visible on our global tracker exists because verification requires only the public half.
The public key is Bitcoin's handshake: proof of ownership offered to the world while the secret stays home. Share it freely, guard its private twin absolutely, and you've understood the division of labor that makes a trustless money possible.
The derivation chain in one view: entropy → seed phrase → master private key → child private keys → public keys → addresses. Information flows strictly rightward — each step derives the next, none reverses. Sharing rules follow the chain: seed and private keys are never shared with anyone, ever; the xpub is shared selectively (it reveals history, not control); individual public keys and addresses are shared freely. Institutional treasuries run entire monitoring stacks on the public side — auditors, dashboards, proof-of-reserves — while signing authority stays air-gapped. Understanding which side of the line an artifact sits on resolves ninety percent of practical custody questions before they're asked.
Read Private Key for the secret half of the pair and Address for the encoding you actually share. Wallet ties the machinery together, and Blockchain is where the verification happens in public.
BitcoinReserveTracker Team has verified the information and data provided on this page. Our research team is dedicated to tracking Bitcoin reserves, cryptocurrency regulation, and mining policy across the globe. We verify information using government records, official announcements, and other primary sources to ensure the data remains accurate and regularly updated. Learn how we verify data →