Descriptor Wallet

Overview

An output descriptor expresses how locking scripts and addresses are constructed, including script type, public keys, multisignature rules, and derivation ranges. The wallet can use this structured definition for spendable or watch-only activity instead of treating imported keys and scripts as unrelated items.

Descriptors improve clarity and backup of wallet policy, but a descriptor’s sensitivity depends on its contents. One containing private extended keys can authorize spending, while a public descriptor can expose address history and future receiving addresses. Checksums help detect transcription errors but do not provide secrecy.

Recovery requires the correct descriptors, ranges, birth time or scan point, and any external signer. A seed alone may not recreate a custom multisignature or imported script policy. Operators should back up descriptors securely, label their authority, and verify that restored wallets derive the expected addresses before receiving funds.

Descriptor Wallet should be distinguished from the asset balance and from the application that displays it. For example, a customer-facing success message does not prove that the intended transaction executed on the correct network; operations should verify execution and reconcile the result before irreversible fulfillment.

Material risks for Descriptor Wallet include credential compromise, malicious destinations, unsupported assets, wrong-network transfers, stale balances, compromised software, provider outage, privacy leakage, and inaccessible recovery material. For Descriptor Wallet, controls should reflect value, automation, reversibility, and whether the organization or a third party controls signing.

Production ownership for Descriptor Wallet should identify the user or legal entity, supported assets and networks, address model, custody boundary, signing authority, recovery method, and systems permitted to request or observe transactions. For Descriptor Wallet, these fields determine who can act and which evidence is authoritative.