Taproot

Overview

What it means and why it exists

Taproot is a Bitcoin protocol upgrade that introduced a new output type with Schnorr signatures and improved ways to spend coins under flexible conditions. It is not a separate cryptocurrency or blockchain.

How it works

A Taproot output commits to an output key. It can be spent through a key path using a Schnorr signature or through a script path revealing only the selected script and a proof connecting it to the commitment. This makes some complex spending policies less conspicuous and can reduce the data revealed during certain spends.

Technical details worth understanding

Taproot builds on BIP 340 Schnorr signatures, BIP 341 transaction rules and BIP 342 Tapscript. A common Taproot address uses the `bc1p` format on Bitcoin mainnet. Key-path spending does not prove that no alternative script path exists, and Taproot addresses do not automatically provide anonymity.

What can go wrong

Wallet support, signing policy and address validation must be correct. A merchant using an outdated payment system could reject a valid Taproot address or misinterpret outputs. Privacy benefits vary with how coins are acquired, spent and linked to other addresses.

Practical checks

A merchant address validator should recognize the correct `bc1p` witness-version-1 format and verify its checksum rather than imposing legacy address assumptions. Operational wallets should confirm their signing and descriptor backup support Taproot before accepting funds. Privacy claims must be restrained: a valid Taproot transaction is still publicly visible.

Related concepts

Blockchain, Bitcoin (BTC), Transaction Hash.

Further reading

Bitcoin BIP-341 — Taproot.