Address Generation

Overview

Address generation begins with the destination type the system needs to represent. For an ordinary wallet account, software commonly creates a private key, derives a public key, and then applies network-specific hashing and encoding rules to obtain an address. Hierarchical deterministic wallets derive many addresses from one seed according to a structured path.

Not every address comes directly from one public key. Multisignature and script addresses represent spending conditions. Smart-contract addresses may be calculated from deployment inputs. Some networks support program-derived, resource, object, or module addresses created under special protocol rules.

Secure generation requires high-quality randomness, protected key material, correct derivation paths, and network-aware encoding. A valid-looking address generated from weak randomness or exposed keys is not secure. Systems should also avoid accidental reuse when a new address is intended for reconciliation or privacy.

Payment providers may generate temporary invoice addresses, reusable static addresses, or customer-specific deposit addresses. Each design has different operational requirements for monitoring, expiration, attribution, and recovery.

Hierarchical deterministic wallets commonly derive many addresses from one seed. This supports backups and one-address-per-payment workflows, but it also requires careful derivation-path management. Using the wrong path can make funds appear missing even though the seed is correct.

Services that generate addresses at scale must separate public derivation from private signing where possible. An extended public key can derive receiving addresses without exposing spending keys, although it can create privacy risks if leaked. Contract and program-derived addresses follow different rules and may not have a conventional private key at all. Production systems should test address generation against official vectors and verify that each generated destination can actually receive and later spend the intended asset.