This guide explains BIP 382 SegWit descriptors in plain English. It covers the problem behind the BIP, why it matters and whether the proposal is part of Bitcoin today.
TL;DR
- What it is: BIP 382 specifies the deployed wpkh() and wsh() output descriptor expressions for native and nested SegWit scripts. Wpkh() commits to the HASH160 of one compressed public key, while wsh() commits to the SHA256 of a nested witness script. Both use BIP 380’s common grammar.
- Why it matters: BIP 382 standardises how wallets describe P2WPKH and P2WSH policy. Its safety comes from strict compressed-key and nesting rules plus complete descriptor recovery, not merely recognising a version-zero witness program.
- Current position: BIP 382 is Deployed and Informational and requires BIP 380.
BIP 382 SegWit descriptors in simple English
BIP 382 SegWit descriptors: BIP 382 is Deployed and Informational and requires BIP 380. Its expressions describe SegWit version-zero script forms, not Taproot version one.
Simple example
A node operator is checking BIP 382 SegWit descriptors. It produces witness version zero plus a 20-byte key hash and accepts only key expressions that produce compressed public keys.
Key terms in plain English
- BIP:
- Bitcoin Improvement Proposal: a document describing a proposed rule, standard or process. Its status must be checked separately.
- Taproot:
- A Bitcoin upgrade that added new signature and script options for spending outputs.
- Node:
- A computer running Bitcoin software that checks data and communicates with other peers.
Status and scope
BIP 382 is Deployed and Informational and requires BIP 380. Its expressions describe SegWit version-zero script forms, not Taproot version one.
wpkh expression
wpkh(KEY) can be top level or inside sh(). It produces witness version zero plus a 20-byte key hash and accepts only key expressions that produce compressed public keys.
wsh expression
wsh(SCRIPT) can be top level or inside sh(). It produces witness version zero plus the SHA256 of the nested script and also generates the witnessScript required to spend.
Compressed keys
Every key anywhere beneath wsh() must produce compressed public keys. Reject uncompressed WIFs or points even when a general key parser accepts them elsewhere.
Nesting
Reject wpkh inside wsh, wsh inside wsh, raw keys passed directly to wsh and script expressions passed to wpkh. Only the specified top-level and sh-wrapped forms are valid.
Recovery
Back up the complete checksummed descriptor, origins, wildcard branch, range and highest-used indexes. A witness program alone cannot reconstruct a complex witnessScript or identify keys.
Vectors
Run published valid and invalid cases, derive several child indexes, compare scriptPubKeys and redeem/witness scripts, and test watch-only import, signing and restoration independently. Build a revision-pinned evidence pack on an isolated node, wallet or protocol harness. Record source commit, binary hash, network, chain identity, configuration and dependencies.
Frequently asked questions
What is the main point of BIP 382 SegWit descriptors?
BIP 382 SegWit descriptors: BIP 382 is Deployed and Informational and requires BIP 380. Its expressions describe SegWit version-zero script forms, not Taproot version one.
For BIP 382 SegWit descriptors, what should a beginner know about status and scope?
BIP 382 is Deployed and Informational and requires BIP 380. Its expressions describe SegWit version-zero script forms, not Taproot version one.
For BIP 382 SegWit descriptors, what should a beginner know about wpkh expression?
wpkh(KEY) can be top level or inside sh(). It produces witness version zero plus a 20-byte key hash and accepts only key expressions that produce compressed public keys.
For BIP 382 SegWit descriptors, what should a beginner know about wsh expression?
wsh(SCRIPT) can be top level or inside sh(). It produces witness version zero plus the SHA256 of the nested script and also generates the witnessScript required to spend.
Conclusion
BIP 382 standardises how wallets describe P2WPKH and P2WSH policy. Its safety comes from strict compressed-key and nesting rules plus complete descriptor recovery, not merely recognising a version-zero witness program.
Primary sources
Check the current specification status and the documentation for the exact implementation you operate before moving production funds or changing a mining node.



Join the ASIC Mining Discussion
Members can read and join the discussion
Log in to read comments from other miners. Create a free account if you would like to ask a question or share your experience.
Membership helps us protect the discussion from spam and keep answers useful.