Account Derivation

Overview

What it means and why it matters

Account derivation is the deterministic creation of wallet accounts, addresses or keys from a root seed or extended key using an agreed derivation path. It allows structured backup and large address sets without manually storing every private key.

How it works in practice

An HD wallet uses a seed and chain-specific derivation scheme to calculate child keys. A derivation path identifies the account and address index. The wallet monitors derived public addresses and signs transfers with corresponding private keys when the user authorizes them.

Technical detail without the jargon

Standards such as BIP-32, BIP-44 and chain-specific conventions define different aspects of the process. Knowing the recovery phrase alone may not show the expected account in every wallet if derivation paths, passphrases or script types differ. Extended public keys enable watch-only derivation but carry privacy risks.

A deeper point to understand

Deriving new addresses from an extended public key can let a web server issue invoices without possessing spending keys. That separation reduces key exposure but creates privacy and discovery requirements: the same extended public key can reveal many related addresses if leaked to observers.

Common mistakes and limitations

Never paste a recovery phrase into a website that claims to discover missing accounts. Also avoid recording master extended private keys in application logs. A wrong derivation path can display an empty wallet without implying the original funds vanished.

What to check in a real payment system

Document the wallet’s seed standard, derivation path, account type and script format in a secure recovery plan without storing secrets in general documentation. Test restoration on an offline, trusted setup. Ensure monitoring can rediscover every address already assigned to invoices.

Related concepts

Crypto Wallet, Private Key, Seed Phrase.

Further reading

BIP-32 — Hierarchical Deterministic Wallets.