GlossaryWhat is Taproot?

What is Taproot?

Taproot is the Bitcoin upgrade that added Schnorr signatures, a new output type and new script rules, defined in BIP340, BIP341 and BIP342 and active since block 709,632. That block was mined on November 14, 2021, according to mempool.space, and Bitcoin has since grown to block 975,167.

By Onchain Wiki editors · checked November 9, 2026, 11:17 UTC

What Taproot Changed in Bitcoin

Taproot changed Bitcoin in three linked ways, one per spec, all on the bitcoin/bips repository:

BIP340 adds Schnorr signatures over secp256k1: fixed 64-byte signatures and 32-byte public keys.¹
BIP341 defines SegWit version 1 outputs, the Taproot output type, with key path and script path spending.²
BIP342 defines Tapscript, the updated script rules used inside Taproot script paths.³

BIP341 and BIP342 both list themselves as consensus soft forks, deployed together.

How Taproot Works: Key Path and Script Path

Taproot works by letting one output be spent two ways: the key path, with a single signature, or the script path, by revealing one of the scripts committed to in advance. BIP341 commits those scripts as leaves of a Merkle tree, so a script path spend reveals only the leaf that was used and its branch.

The key path is the quiet option. When the parties agree, they sign with one Schnorr signature, and the chain cannot tell whether other spending conditions ever existed. The Bitcoin Core 0.21.1 release notes put it as single-signature, multisig and complex contract scripts all using identical-appearing commitments, which improves privacy.

Schnorr Signatures in Taproot

Schnorr signatures in Taproot replace the older ECDSA signatures for Taproot spends with a fixed 64-byte format. BIP340 says they support batch verification, so a node can check many signatures faster than one at a time.

They are also linear: signatures from several cooperating signers can be combined into one that is valid for the sum of their public keys. That property is what lets a group sign as if it were one key, the MuSig approach BIP340 points to.

Taproot Addresses Start With bc1p

Taproot addresses start with bc1p on Bitcoin mainnet, because they encode SegWit version 1 outputs. BIP350 says version 1 and higher addresses use Bech32m, a variant of the earlier Bech32 encoding, while version 0 SegWit addresses that start with bc1q keep Bech32.⁴

BIP350 changed only the checksum constant, so software that knows Bech32 but not Bech32m cannot validate a bc1p address. The wallet address guide lists the other Bitcoin address formats and what each prefix means.

When Taproot Activated

Taproot activated at block 709,632, which was mined on November 14, 2021 at 05:15 UTC, according to mempool.space's record of that block.

The Bitcoin Core 0.21.1 release notes set the rules: miners signaled on bit 2 using Speedy Trial, a variant of BIP9 version bits, and if 90% of blocks in a 2,016-block period signaled in time, Taproot would lock in and switch on at block 709,632.⁶ It locked in, and Taproot rules apply to every block from that height on.

Questions People Ask About What is Taproot

These are the questions people ask next about what is taproot.

What is Bitcoin Taproot in simple terms?

Bitcoin Taproot, in simple terms, is a 2021 upgrade that lets coins be locked with a single key and a hidden set of backup scripts. If everyone agrees, one signature spends them and the backup scripts stay private.

When did Taproot activate?

Taproot did activate at Bitcoin block 709,632, mined on November 14, 2021 at 05:15 UTC per mempool.space. The Bitcoin Core 0.21.1 release notes had fixed that block height in advance as the activation point once miners locked it in.

What is a Taproot address?

A Taproot address is a Bitcoin address for a SegWit version 1 output, and on mainnet it starts with bc1p. BIP350 says these addresses use the Bech32m encoding instead of the Bech32 encoding used by bc1q addresses.

What BIPs make up Taproot?

Taproot is made up of three BIPs: BIP340 for Schnorr signatures, BIP341 for the Taproot output and its spending rules, and BIP342 for Tapscript. BIP350 adds the Bech32m address format used for bc1p addresses. The crypto glossary lists related Bitcoin terms.

Sources

Every number on this page comes from these sources, checked November 9, 2026.