Hierarchical Deterministic Wallet (HD Wallet)

Instead of generating and backing up a separate random key for every address, an HD wallet derives a whole tree of key pairs mathematically from one root. Each parent key combines with an index number through a one-way hashing function to produce a child key, and that child can produce its own children, branching indefinitely. Because the process is deterministic, restoring the original seed phrase on any compatible wallet regenerates the exact same tree and recovers every address ever used.

The standard, BIP 32, is usually paired with two companion proposals: BIP 39, which turns the seed into a human-readable list of words, and BIP 44, which defines a common path format (purpose/coin type/account/change/address index) so different wallets and blockchains derive keys the same way from one phrase. This is why a single 12 or 24 word backup can hold Bitcoin, Ethereum, and dozens of other assets in separate branches, each with its own account structure.

The design also enables "watch only" setups: a wallet can share an extended public key, letting a service generate and monitor new receiving addresses without ever holding the private keys needed to spend funds, a pattern common in hardware wallets and business accounting tools.

Practically, HD wallets improve privacy by giving every transaction a fresh address while still needing only one backup, which is why almost all modern non-custodial wallets, since Bitcoin's early implementations, follow this structure by default.