BIP 380 output descriptors explained: document Bitcoin scripts, keys, ranges and checksums so wallet recovery is precise and testable.
BIP 380 output descriptors explained: document Bitcoin scripts, keys, ranges and checksums so wallet recovery is precise and testable.
An output descriptor is a compact expression that tells wallet software exactly how to derive scriptPubKeys and addresses from keys and script templates. Expressions wrap keys in functions such as pk, pkh, wpkh, sh, wsh and later descriptor families. A public descriptor can be watch-only yet reveal every derived address and complete wallet balance.
Descriptors improve recovery precision and let separate watch-only systems monitor a wallet. But sharing them destroys address-level privacy.
BIP 380 output descriptors: An output descriptor is a compact expression that tells wallet software exactly how to derive scriptPubKeys and addresses from keys and script templates.
A node operator is checking BIP 380 output descriptors. If those facts are unknown, the operator cannot show which rules were actually applied before electricity was committed to the work.
An output descriptor is a compact expression that tells wallet software exactly how to derive scriptPubKeys and addresses from keys and script templates. A seed phrase alone may not identify multisignature order, script type, derivation branch or Taproot construction. Descriptors make that missing wallet policy explicit.
Start from the primary BIP because a product label does not prove that every required field or rule is implemented.
Start with the validating node, because the ASIC only hashes the candidate header it receives. Record the node release and the pool component that assembled the block. If those facts are unknown, the operator cannot show which rules were actually applied before electricity was committed to the work.
Expressions wrap keys in functions such as pk, pkh, wpkh, sh, wsh and later descriptor families. Keys may include origins, derivation paths, wildcards and extended public or private material. Ranged descriptors generate many receive or change scripts. At the same time, a checksum detects common transcription errors.
Preserve the exact serialised data for audit. A friendly wallet summary can omit the field that explains why a signer accepted or rejected the operation.
Treat status dashboards as observations, not as the source of truth. Compare them with an independently operated node and retain the raw deployment or template response. Period boundaries, chain reorganisations and cached pool pages can otherwise make a correct-looking percentage describe the wrong state.
A public descriptor can be watch-only yet reveal every derived address and complete wallet balance. A descriptor containing private keys can spend funds and must be protected like the keys themselves. Fingerprints and paths help signers locate keys but do not authenticate the backup owner or prove a device is uncompromised.
Separate watching, policy, key custody and final signing so no single convenience interface silently expands authority.
Build the failure response before the boundary arrives. Define which rejection messages trigger an alert, who can pause a template source and how failover is prevented from returning miners to the same faulty validation stack. A second hostname is not independent when both endpoints share one node.
Descriptors improve recovery precision and let separate watch-only systems monitor a wallet. But sharing them destroys address-level privacy. Multisignature participants may expose cosigner xpubs and policy. Store recovery copies encrypted, geographically separated and paired with human instructions that identify network, range and intended signer quorum.
The improvement is conditional, not magic: network observers, counterparties and compromised endpoints may still infer information outside the mechanism.
Separate readiness, signalling and enforcement in the operating log. Readiness is a claim about software and process, signalling is data carried by blocks, and enforcement is a validation result. Combining them into a single supported or unsupported label hides the point at which revenue is actually at risk.
Common failures are backing up only one branch, omitting the range, reversing sorted and unsorted multisig, confusing hardened paths, losing the checksum or importing to the wrong network. A successful import with zero balance can reflect an inadequate scan range rather than an empty wallet. Test negative cases and cancellation paths before moving value, and never treat successful parsing as proof of safe intent.
Map responsibility across the full path: validating node, template server, pool protocol, proxy, firmware and ASIC. For each layer, state what it can alter and what it merely relays. This prevents a version-bit setting in firmware from being mistaken for complete consensus-rule support. Relate that responsibility map to the pool and job-control boundary in our Stratum V2 guide.
BIP 380 defines general descriptor operation while companion BIPs specify script expressions. Bitcoin Core descriptor wallets and hardware vendors vary in supported functions. Taproot trees and Miniscript policies require richer support than a simple single-key descriptor. So recovery software must be chosen before an emergency. Record software and hardware versions because optional fields, draft changes and vendor support differ across otherwise compatible-looking tools.
Test the primary and failover paths with the same checks. Compare chain tip, chainwork, deployment state, required rules and template age, then save the result with a timestamp. The process should be repeatable by another operator without relying on an undocumented pool conversation.
Export receive and change descriptors, verify their checksums and derive selected addresses on an independent offline tool. Restore watch-only on a clean test wallet, scan beyond the current gap and match known transactions. For multisig, confirm every key origin and quorum before accepting a test signature.
Rehearse the complete workflow with test funds, preserve checksums and raw artefacts, then confirm the final transaction independently on a validating node.
Turn the conclusion into a business decision. State which chain and settlement venues the operation intends to serve, the maximum acceptable stale-block exposure and the point at which mining pauses. This connects protocol evidence to electricity cost, pool revenue and payout finality.
A concise decision record for BIP 380 output descriptors should name the source documents, their dates, the node release tested, the responsible pool or template provider and the exact trigger for action. Include screenshots or machine-readable output for the deployment state. But keep the raw node response as the stronger evidence.
State whether a change affects policy, block construction or consensus validity, because those layers have different failure costs.
Run the check on every production and failover path. Confirm that monitoring alerts on stale templates, unexpected chain tips, rejected proposals and a rise in stale shares. Keep rollback instructions for node and pool configuration. But do not roll back across an active consensus boundary without understanding the rules the older release enforces.
If the evidence conflicts, pause the affected path and investigate before committing more electricity to uncertain work.
For related background, read our plain-English BIP-110 guide and technical BIP-110 review. Those articles use a modern proposal to show why signalling, activation, template construction and accepted chain history must be examined separately.
Bip 380 output descriptors is best understood as a defined interaction between validating software, mining infrastructure and economic acceptance. The safest operator does not infer consensus from a dashboard percentage or a pool slogan. They verify the rule source, the activation boundary, the template fields and the chain their payouts ultimately settle on.
That discipline reduces the chance of hashing an invalid or commercially unwanted block.
BIP 380 output descriptors: An output descriptor is a compact expression that tells wallet software exactly how to derive scriptPubKeys and addresses from keys and script templates.
An output descriptor is a compact expression that tells wallet software exactly how to derive scriptPubKeys and addresses from keys and script templates.
Expressions wrap keys in functions such as pk, pkh, wpkh, sh, wsh and later descriptor families.
A public descriptor can be watch-only yet reveal every derived address and complete wallet balance.
Primary specifications are living technical records. Check their current status and changelog before using this article for a production activation decision.
BIP 450 guide to Draft Formosa themed mnemonic stories, entropy and checksum mapping, theme JSON, BIP39 conversion, passphrases and recovery safety.
BIP 393 guide to Draft descriptor annotations for birth height, gap limit and Silent Payment max label, checksum rules, parsing and recovery safety.
BIP 392 guide to Draft sp() descriptors, spscan and spspend encodings, watch-only and full-wallet forms, key origins, recovery and validation.
Join the ASIC Mining Discussion
Members can read and join the discussion
Log in to read comments from other miners. Create a free account if you would like to ask a question or share your experience.
Membership helps us protect the discussion from spam and keep answers useful.