Bitcoin, from the beginning
An exciting idea becomes more useful when you understand it. Discover what Bitcoin makes possible, how it works and which questions still deserve honest answers. You do not need to own bitcoin, know programming or understand financial markets to begin.
About 20 minutes · Read at your own paceWe believe Bitcoin is an important innovation: open rules, personal ownership and a global network worth understanding. Our enthusiasm comes with evidence, and room for difficult questions.
Why did someone create Bitcoin?
Bitcoin began with a practical question: can people send digital money without a central company deciding which payments count?
A photo can be copied almost endlessly. Money needs a different rule: if you pay someone, you must not be able to spend the same money again. Before Bitcoin, online payments usually relied on a bank or payment company to maintain the authoritative record. Bitcoin proposed a way for a network of participants to check that record together.
In 2008, someone using the name Satoshi Nakamoto published the Bitcoin whitepaper, a short technical explanation of the idea. The network started in January 2009. Satoshi's identity remains unproven. Since then, developers, researchers, businesses and ordinary users around the world have helped build an ecosystem without a central Bitcoin headquarters or chief executive.
The innovation is the combination: public software, digital signatures, an open network and a costly process for adding blocks of transactions. Together they make digital scarcity possible without requiring one organisation to keep everyone's balance. Bitcoin does not remove every kind of trust from life; it gives people new choices about what they can verify and whom they must trust.
Bitcoin is both a payment network and its native monetary asset. No company owns the protocol.
↑ Your starting pointWhere are the bitcoins, and what does a wallet do?
The blockchain records transactions. A wallet manages the keys that let you authorise spending; it does not contain digital coins like files.
The blockchain is Bitcoin's shared transaction history, organised into linked groups called blocks. Your wallet uses this information to work out which amounts you can spend. A private key allows you to produce a digital signature: proof that the spending conditions have been met, without revealing the private key itself to the network.
An address is information you give someone who wants to pay you. A private key, or a wallet's recovery phrase, must remain secret. Most modern wallets use a recovery phrase to recreate their keys after a device is lost. That phrase is therefore much more important than an ordinary account password: someone who obtains it may be able to spend your funds.
You do not need a whole bitcoin. One bitcoin divides into 100 million satoshis, commonly called sats. The network records amounts, not your legal name, but it is not automatically anonymous: transactions are public, and addresses can be linked to identities through exchanges, reused addresses or other information. Privacy requires care rather than a promise from the technology.
Share a payment address when needed. Never share a recovery phrase or private key with a website, support agent or AI assistant.
↑ Your starting pointHow do miners and nodes keep the record honest?
Miners compete to propose blocks. Nodes independently check the rules. These are different jobs, and both matter.
A node is a computer running Bitcoin software. A fully validating node checks signatures, spending conditions and other rules, including whether a block creates too many new bitcoins. A miner collects transactions into a candidate block and competes to find a proof of work. A proposed block that breaks the rules is rejected by nodes that enforce those rules.
Mining repeatedly applies a cryptographic hash function to a block header. A hash is like a fixed-length digital fingerprint, although the actual mathematics is more precise. Bitcoin's proof of work uses SHA-256 twice and requires the resulting number to be at or below a target. There is no useful shortcut known for simply choosing a successful header; miners try enormous numbers of possibilities.
A hash is not encryption, and miners are not decoding everyone's payments. Their work makes rewriting accepted history expensive. Nodes compare valid chains by accumulated proof of work. The difficulty adjusts every 2,016 blocks on the main network to aim for an average of roughly ten minutes per block; individual blocks can arrive much sooner or later. Energy use and the concentration of mining remain important subjects of scrutiny.
Miners provide proof of work. Nodes verify validity. Computing power does not override the rules a node chooses to enforce.
↑ Your starting pointWhat exactly does the halving halve?
It reduces the new bitcoins a valid block may create. It does not divide your balance or automatically change the market price.
Bitcoin began with a maximum block subsidy of 50 BTC. The subsidy is the allowance of newly created bitcoin, distinct from transaction fees. Every 210,000 blocks this allowance is halved, using whole satoshis. That interval corresponds to about four years at the intended average block pace, but the rule follows block height rather than a date in a calendar.
The sequence started with 50, then 25, 12.5 and 6.25 BTC. The April 2024 halving reduced the subsidy to 3.125 BTC per block. This predictable decline is one reason supporters find Bitcoin's monetary design compelling: future issuance can be checked from the rules instead of being inferred from the decisions of an issuing committee.
A halving changes the flow of new supply. It does not reduce the number already held in wallets, eliminate transaction fees or force buyers to pay more. Demand, liquidity, economic conditions and expectations still influence price. Our estimated next-halving date changes with observed block production, while the target block height follows the protocol's schedule.
The halving makes issuance more scarce and predictable. It is a protocol event, not a guaranteed investment outcome.
↑ Your starting pointWill Bitcoin stop when the last new bitcoin is issued?
No shutdown is built into the issuance schedule. Transaction fees remain when the block subsidy eventually reaches zero.
A miner's permitted block reward has two parts: newly issued bitcoin, called the subsidy, and the transaction fees included in that block. Fees transfer existing bitcoins from transaction senders to miners; they do not create new money. Saying that miners receive no reward after issuance ends confuses the subsidy with the whole reward.
Under the current rules, repeated halvings eventually reduce the subsidy below one satoshi and then to zero. This is expected around 2140, not on an exact prearranged day. The maximum scheduled issuance is just under 21 million BTC. That is different from spendable or circulating supply, because some subsidies were not claimed and some keys may have been lost.
The intended long-term incentive is transaction fees. People could still transact, miners could still propose blocks and nodes could still verify them. Whether future fee demand will support an adequate level of mining security is an open economic question. Difficulty adjustment helps the block-production pace adapt to changing hash power; it does not guarantee a particular security budget or make every potential attack harmless.
The end of new issuance is not the end of transactions. Long-term incentives deserve research, not either panic or certainty.
↑ Your starting pointWhat can people actually use Bitcoin for?
Payments, donations and transfers are existing uses. Their value depends on the situation, the tools and the people involved.
Bitcoin can move value between people who do not use the same bank or payment provider. The base network operates continuously rather than following banking opening hours. For someone who needs to receive a payment across borders, that openness can be useful. Access to exchanges, internet connections, local rules and conversion costs still affect the practical experience.
Merchants and creators can accept bitcoin for products, services or donations. Open-source tools such as BTCPay Server provide payment infrastructure that an operator can control. The software does not charge a payment-processing percentage of its own, but running it, using the network or connecting third-party services can involve costs. Bitcoin does not automatically make every purchase cheaper.
Other people value the ability to hold the asset directly instead of maintaining a claim against a financial company. Others explore tiny online payments, international collaboration or software services paid on demand. These uses share a theme: more choice in how value is held and transferred. They also require useful products, willing counterparties and a realistic understanding of fees, volatility and custody.
Bitcoin is useful when its specific properties solve a real problem. It does not need to replace every existing payment method to matter.
↑ Your starting pointWhy do supporters call it digital scarcity?
Bitcoin's issuance is constrained by public rules. Scarcity is an important property, but it does not determine a guaranteed price.
Ordinary digital files are easy to copy. Bitcoin lets the network reject an attempt to spend the same funds twice and reject issuance beyond its rules. Anyone can copy the software, but copying it does not copy the ownership, acceptance or accumulated security of the existing network. This is the foundation of the phrase digital scarcity.
Supporters see an opportunity for a form of money whose supply policy does not depend on a central issuer's discretion. Some use the comparison with gold to explain scarcity and long-term saving. The comparison is helpful only up to a point: Bitcoin is digital, has different risks and uses, and has a much shorter history than gold.
A scarce object can still fall sharply in price if demand weakens. Bitcoin's purchasing power depends on what other people are willing to exchange for it, not merely on the supply limit. It can experience long declines, and the amount someone needs for near-term expenses may fluctuate substantially in local currency. Enthusiasm about monetary independence can coexist with honesty about those risks.
Predictable supply is a distinctive strength. A rising price, preserved purchasing power and future adoption are not protocol guarantees.
↑ Your starting pointHow can Bitcoin support everyday payments?
Lightning adds payment channels on top of Bitcoin. Other scaling approaches make different compromises and should not be treated as identical.
Putting every small purchase directly into the base blockchain would require everyone validating it to process that data. Bitcoin deliberately limits block capacity. Lightning offers another approach: participants lock bitcoin into payment channels, then update who can claim which amounts without recording every payment on the blockchain. Bitcoin transactions provide a way to open channels and settle or enforce their outcomes.
Connected channels can route a payment to someone with whom you have no direct channel. Payments can be fast and inexpensive, which is attractive for small purchases and online services. They still need a usable route and enough liquidity in the right direction. Opening, managing or closing channels can involve fees; some payments fail and need another attempt or another method.
A custodial Lightning app may feel simpler because a provider manages the funds and infrastructure. A self-custodial setup gives the user more control but introduces operational responsibilities, including monitoring and backups. Sidechains, federations and newer proposals have other trade-offs. More transactions should not be described as free capacity with no changes in trust, privacy, availability or cost.
Scaling expands Bitcoin's possibilities. Compare the custody, liquidity and security assumptions of the particular tool, not just its speed.
↑ Your starting pointWhat could Bitcoin have to do with AI?
Software can already pay for access to services through Lightning. Wider adoption is an opportunity, not an accomplished future.
An AI agent is software that can carry out tasks using connected tools. It might need to buy a small amount of data or request a paid service. Bitcoin and Lightning offer payment methods that software can use, including amounts too small to fit comfortably into some conventional billing arrangements. The appeal is payment on demand rather than a separate subscription for every service.
One implemented example is L402, a protocol documented by Lightning Labs. A service requests payment through a Lightning invoice; after paying, the client presents proof and an access token. Lightning Labs released agent tools in February 2026 that help software interact with this payment flow. An access token can be reused while it remains valid; a new payment is not necessarily needed for every web request.
This does not put AI in charge of Bitcoin's rules or guarantee a machine economy built on it. An agent can make mistakes, follow malicious instructions or spend an allowance unwisely. Spending limits, restricted permissions and keeping signing keys separate from the agent are important safeguards. Today there are working tools; the size, business models and social value of future adoption remain uncertain.
Bitcoin can be a payment rail for software. Treat AI payments as controlled spending, not automatic intelligence, safety or profit.
↑ Your starting pointCould quantum computers threaten Bitcoin?
A sufficiently powerful future machine could threaten today's signatures. Research is active, but proposed protection is not an activated guarantee.
Bitcoin uses digital signatures to authorise spending. A sufficiently capable quantum computer could, in principle, recover a private key from an exposed public key and threaten the affected funds. This is different from saying someone has already broken Bitcoin. NIST's current explanation says present quantum computers are too small and unstable for that kind of cryptographic threat; when a capable machine might appear remains uncertain.
Post-quantum cryptography studies methods intended to resist such attacks. NIST has standardised signature schemes, but that does not install them in Bitcoin. A migration would require careful research, changes accepted by the network, updated wallets and infrastructure, and users moving funds when appropriate. Developers cannot simply press an update button for every holder, including those who have lost their keys.
At this guide's review, BIP 360, Pay-to-Merkle-Root, and BIP 361, a migration proposal, are drafts. BIP 360 addresses long exposure of public keys; it is not a complete answer to every quantum attack. Neither draft establishes an activated migration deadline. Bitcoin's ability to be improved is encouraging, but successful preparation requires time, testing and broad agreement, not a claim that the risk has already been solved.
Take quantum research seriously without treating a future attack as a present compromise or a draft as a deployed defence.
↑ Your starting pointWhat should a newcomer understand first?
Learning does not require a purchase. Before using money, understand the difference between an address, a wallet, a backup and a custodian.
Start with the concepts, not an urgent promise to buy. You can inspect public blocks, follow this site's examples and use its educational calculations without sending bitcoin. Knowing how a transaction works makes later decisions easier to evaluate. A price chart explains past trades; it cannot tell you which future price will occur or make a risky choice safe.
If someone uses self-custody, protecting the recovery information is essential. A secure device alone is not enough if the backup is exposed or lost. A hardware wallet can help keep keys away from an internet-connected computer, but it does not protect against every deceptive transaction, careless backup or fraudulent instruction. Verify what is being authorised and avoid treating a familiar logo as proof of trustworthiness.
With a custodian, the practical questions change: who controls the keys, what withdrawal restrictions apply and what happens if the provider fails? In either model, beware of impersonators, guaranteed-return offers and demands to pay a fee to unlock a supposed fortune. Genuine support should never need your recovery phrase. The freedom Bitcoin offers is best supported by patient understanding rather than urgency.
Understanding custody and recognising scams are part of learning Bitcoin, not optional technical details reserved for experts.
↑ Your starting pointWhat happens next, and who decides?
Bitcoin is an ongoing collaboration. Its future depends on useful tools, adoption and careful engineering rather than a central roadmap.
People contribute in many ways: reviewing code, running nodes, teaching, translating, building wallets, researching security or accepting payments. A Bitcoin Improvement Proposal, or BIP, is a public proposal, not a decree. Publication creates something people can evaluate; it does not make a rule active. Broad adoption is harder than announcing an idea, which can slow change but also encourages scrutiny.
There is plenty to find fascinating. You can receive a payment without your own device being online at that moment because the network records it. A node can verify the rules without knowing Satoshi's identity. Bitcoin has no central opening hours, yet confirmations have variable timing. These features show both the unusual possibilities of the design and why familiar banking assumptions do not always apply.
Better wallets, more usable self-custody, stronger privacy, payment channels and software payments are worthwhile directions to watch. So are the difficult questions about security, mining incentives and quantum migration. An optimistic outlook does not require a price target or a claim that every experiment will succeed. The most valuable next step is to understand enough to ask better questions and recognise useful progress.
Bitcoin's strongest story is not a promise of easy wealth. It is an invitation to explore money that people can inspect, hold and build on.
↑ Your starting pointChoose your next step
Understand the technology ↗
Explore signatures, proof of work and block validation in more detail.
Follow Bitcoin's history ↗
Read selected milestones with original sources and historical context.
Compare scaling approaches ↗
Learn what Lightning and other designs offer, and what they require.
Try the Bitcoin laboratory ↗
Explore issuance, satoshis and transaction fees with local calculations.
Examine quantum exposure ↗
Read the available measurements, methodology and limits.
Meet people and ideas ↗
Discover researchers, educators and entrepreneurs from the ecosystem.