Taproot is Bitcoin's November 2021 upgrade. It adds Schnorr signatures, MAST script hiding, and makes multisig look like single-sig on-chain. Here's what it means for you.
Taproot is the most significant Bitcoin protocol upgrade since SegWit. It activated on November 14, 2021, at block 709,632 — and it quietly changed how Bitcoin transactions work at a fundamental level.
The short version: Taproot makes Bitcoin smarter, cheaper for complex transactions, and more private. It does this through three interconnected improvements packaged together in a single soft fork.
Before Taproot, complex Bitcoin operations — like opening a Lightning channel, executing a multisig transaction, or using a time-locked payment — left distinctive fingerprints on the blockchain. Anyone watching could identify these transaction types.
With Taproot, a 3-of-5 multisig transaction looks exactly like a simple one-person payment. A Lightning channel close looks like an ordinary transfer. The blockchain records less about how a transaction was authorized, only that it was authorized.
This has real implications for privacy, fees, and Bitcoin's ability to support more sophisticated applications.
Taproot consists of three Bitcoin Improvement Proposals that were activated together:
Bitcoin originally used ECDSA (Elliptic Curve Digital Signature Algorithm) for transaction signatures. Taproot replaces this with Schnorr signatures.
Schnorr signatures have two major advantages over ECDSA:
1. Key aggregation (MuSig) With ECDSA, a 3-of-5 multisig transaction requires all 5 public keys to be visible on-chain, plus the 3 signatures. With Schnorr, the 3 signers can combine their signatures into a single signature. On the blockchain, it looks like one person signed — not five.
This is called MuSig (multi-signature aggregation). A 2-of-3 multisig using Taproot is indistinguishable from a single-sig transaction in the most common case.
2. Smaller and faster Schnorr signatures are 64 bytes vs. ECDSA's 71-72 bytes. They're also mathematically simpler to verify. In practice, this means slightly smaller transactions and faster validation.
BIP 341 introduces the actual Taproot address type — the P2TR (Pay-to-Taproot) output — and the concept of MAST (Merkelized Alternative Script Trees).
Here's how MAST works:
Imagine you want to send Bitcoin that can be spent in multiple ways:
Previously, all of these conditions would need to be published on-chain when the transaction was created. With MAST, only the executed spending path is revealed. The other conditions are hidden behind a Merkle tree — only the hash of the tree is committed to.
The "taproot" trick: BIP 341 goes further with a clever construction: the cooperative spending path (where all parties agree) is embedded directly in the public key itself. If everyone agrees (the happy path), the transaction looks like a simple one-key payment — the script conditions are never revealed at all. Only if parties disagree does the script need to be published.
This means:
BIP 342 introduces Tapscript, the updated scripting language used inside Taproot transactions.
Tapscript's main purpose is forward compatibility. It includes an OP_SUCCESS opcode that allows future soft forks to add new functionality without breaking existing scripts. This makes Taproot a foundation for future upgrades rather than a one-time improvement.
Tapscript also replaces OP_CHECKMULTISIG with OP_CHECKSIGADD, which enables Schnorr-native multisig without the ECDSA workarounds that preceded it.
| Feature | SegWit (2017) | Taproot (2021) |
|---|---|---|
| Main benefit | Transaction malleability fix, fee reduction | Privacy, complex script efficiency |
| Signature algorithm | ECDSA | Schnorr (BIP 340) |
| Script hiding | No — scripts visible on-chain | Yes — MAST hides unused paths |
| Multisig appearance | Looks like multisig | Looks like single-sig (MuSig path) |
| Address prefix | bc1q... | bc1p... |
| Fee savings vs. Legacy | ~40% | ~45% (more for complex scripts) |
| Activation | August 2017 | November 2021 |
SegWit fixed transaction malleability (enabling Lightning) and reduced fees. Taproot built on top of SegWit to add privacy and smart contract capabilities.
For a full breakdown of all address formats including Taproot, see our Bitcoin address types guide.
Lightning Network channels are Bitcoin's second-layer payment solution. Opening and closing a Lightning channel involves on-chain Bitcoin transactions.
Before Taproot, Lightning channel opens and closes were identifiable — they had a specific transaction structure that blockchain analysts could flag. This undermined the privacy of Lightning users.
With Taproot:
Major Lightning implementations (LND, Core Lightning, Eclair) have all added Taproot support. The full privacy benefits of PTLCs are still being implemented as of 2026, but the foundation is in place.
For hardware wallet users, Taproot means:
Better multisig privacy If you use a multisig setup with devices like the Coldcard Mk4, Foundation Passport, or BitBox02, Taproot's MuSig path hides the multisig structure entirely when all signers cooperate. On-chain, it looks like a normal payment.
Future inheritance and timelocked payments Taproot's MAST enables more sophisticated inheritance schemes — for example, a wallet that can be spent normally by you, but falls back to a beneficiary key after two years of inactivity, without publishing the inheritance condition upfront. See our Bitcoin inheritance planning guide.
Adoption status by hardware wallet:
| Hardware Wallet | Taproot Support |
|---|---|
| Coldcard Mk4 / Q | Yes |
| Foundation Passport | Yes |
| BitBox02 Bitcoin-Only | Yes |
| Ledger Nano X / Flex | Yes |
| Keystone 3 Pro | Yes |
| Blockstream Jade Plus | Yes |
| Trezor Model T | Yes |
Despite activating in 2021, Taproot adoption reached roughly 60% of transactions by late 2025. Why hasn't adoption been faster?
Services move slowly — Exchanges, custodians, and payment processors must upgrade their systems to generate and accept bc1p addresses. This requires code changes, testing, and deployment cycles.
No immediate user pressure — Unlike SegWit, which had a direct and obvious fee incentive for all transactions, Taproot's privacy benefits are most pronounced for complex transactions. Simple single-sig users don't notice much difference.
MuSig2 complexity — The full privacy benefits of Schnorr multisig require MuSig2 protocol implementation, which is more complex than simply generating a Taproot address.
That said, adoption is accelerating. Most new wallets default to Taproot. The Sparrow Wallet, for example, offers Taproot as a wallet type alongside Native SegWit.
Taproot improves Bitcoin privacy in two specific ways:
1. Script hiding The spending conditions for your Bitcoin are hidden until you spend. A blockchain analyst can't see that you have a multisig wallet, a timelock, or a recovery path — only the final executed spending is revealed.
2. Transaction uniformity Complex operations (Lightning, multisig, DLC contracts) become indistinguishable from simple payments on the cooperative path. This enlarges the "anonymity set" — the pool of transactions that look similar, making individual transactions harder to analyze.
For users who want even stronger privacy, our Bitcoin privacy guide covers CoinJoin, Lightning, and no-KYC strategies that complement Taproot's protocol-level improvements.
Taproot was designed as a foundation. Several proposed upgrades depend on it:
SIGHASH_ANYPREVOUT (APO) — Enables "eltoo" Lightning channels, which are simpler and don't require storing old channel states. Reduces the risk of accidentally broadcasting old states.
OP_VAULT — A proposed opcode for creating Bitcoin vaults with covenants — restricting where coins can be sent, enabling withdrawal delays, and adding recovery mechanisms. Critical for institutional custody and inheritance.
Cross-Input Signature Aggregation (CISA) — Would allow all inputs in a transaction to share a single Schnorr signature, dramatically reducing fee costs for transactions with multiple inputs (like CoinJoin).
None of these are active yet. They require additional soft forks. But Taproot's Tapscript upgrade pathway makes implementing them much more straightforward than pre-Taproot Bitcoin.
What does Taproot do for ordinary Bitcoin users? For simple send/receive, Taproot gives you slightly smaller transactions and better privacy. The biggest benefits come if you use multisig, Lightning, or complex spending conditions — those become cheaper and leave fewer fingerprints on-chain.
Do I need to do anything to use Taproot? If your wallet has updated to support Taproot, you can create a new Taproot wallet (bc1p address) and use it immediately. You don't need to do anything to receive Taproot transactions — they're just regular Bitcoin.
Is Taproot a change to Bitcoin's supply or rules? No. Taproot is a soft fork — it adds new capabilities without changing Bitcoin's fundamental rules. The 21 million supply cap is unchanged. See our why 21 million Bitcoin guide for how the supply limit works.
What's the difference between bc1q and bc1p addresses?
bc1q is Native SegWit (P2WPKH, from 2017). bc1p is Taproot (P2TR, from 2021). Both are cheaper than Legacy (1...) addresses. Taproot offers additional privacy benefits, especially for complex scripts.
When was Taproot activated? Taproot activated on November 14, 2021, at Bitcoin block height 709,632. It was a soft fork that required 90% miner signaling within a 2016-block window (Speedy Trial activation).
Get our free Beginners Guide to Buying Bitcoin plus weekly insights for long-term holders.
Buy your first Bitcoin in 2026: step-by-step guide from choosing an exchange (Coinbase, Strike, River) to setting up a wallet, securing your seed phrase, and avoiding the biggest beginner mistakes.
How Bitcoin ATMs work in 2026: fees (7-12%), ID requirements, how to find machines, and the scam warning that could save you thousands. Step-by-step buying guide.
Bitcoin has four main address types: Legacy (1...), P2SH (3...), Native SegWit (bc1q...), and Taproot (bc1p...). Here's what each means, the fee differences, and which to use.