The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Bitcoin address types reveal different information: some expose a public key as soon as coins are received, while others reveal a key or script only when those coins are spent. P2PK and P2TR outputs contain a public key (Taproot uses a tweaked x-only output key); P2PKH and P2WPKH outputs contain a hash of a key; and P2SH and P2WSH outputs commit to a script. The script and spending path determine what becomes visible later.
The key distinction is between the address string, the output created when someone pays it, and the input or witness data that later satisfies that output. An address is an encoded payment destination, not a universal promise about what transaction data will disclose. The comparison below explains what each common type commits to and what a spend reveals.
At a glance
| Type | Mainnet clue | Visible in the output | What spending reveals |
|---|---|---|---|
| P2PK | No standard address form is required | Public key | Signature |
| P2PKH | 1… |
Hash of a public key | Signature and full public key |
| P2SH | 3… |
Hash of a redeem script | Redeem script; key disclosure depends on its contents |
| P2WPKH | bc1q… |
Witness v0 public-key hash | Signature and full public key in witness data |
| P2WSH | bc1q… |
Witness v0 script hash | Witness script and witness stack; keys in the script become visible |
| P2TR | bc1p… |
32-byte tweaked x-only output key | Key path: signature. Script path: executed script and control block, too |
These are recognition clues for common mainnet forms, not a complete analysis of a particular output. In particular, bc1q can identify either P2WPKH or P2WSH; distinguish them by the witness program and output details. Other networks use different address prefixes. Bitcoin Core’s descriptor reference lists these output types and common encodings.
Does a Bitcoin address expose the public key before it is spent?
Usually not for hash-based P2PKH and P2WPKH outputs: before spending, the output contains a hash of the public key rather than the full key. P2PK exposes its public key directly, and P2TR exposes its tweaked x-only output key from the moment the output is created.
Popular on Amazon
- 【90 Degree Full Function USB C Adapter】Supports the latest USB4 standard for up to 40Gbps of bandwidth, 8K video support, and up to 240W Fast charging; Support USB PD 3.1 Extended Power Range (EPR) including 140W, 180W and 240W. Your productivity is easily doubled. *Warm Tip: For the best fit, please make sure the USB-C port is fully exposed; thick or bulky cases may affect compatibility.
- 【Reliable Quality】Made from high-quality, scratch-resistant aluminum alloy, delicate metal frame. get excellent wear resistance and heat dissipation. Non-Slip Design for easier insertion and removal.
- 【Small and portable】Ultra thin size, ultra compact design, a petite physique that matches the minimalist design of your modern laptops. Coming with a slim figure that won't block the port next to the one it's plugged into.
- 【Compatibility】Widely work with most usb c, thunderbolt 4/3 devices. Compatibilit for ROG Ally, Steam Deck, Switch, MacBook Pro, Quest 3 VR headset, Surface Book 2, iPhone 18/17/16/15, Samsung Galaxy S23/S22/S21, Note 20/10, Google Pixel, ChromeBook, etc.
- 【Excellence Customer Support】If you experience any issues or cable failure, simply reach out to our dedicated customer service team. We provide a prompt response within 18 hours, providing you with the necessary technical support to resolve any concerns.
That distinction is about the public key, not the private key. A public key is intended to be public data; revealing it does not reveal the private key or give someone authority to spend the coins. A hash-based output delays publication of the full key until spending, but it does not make the public key permanently secret if the output is spent.
The address itself is not necessarily the object a blockchain viewer analyzes. Once a payment is made, the relevant data is in the transaction output script or witness program. When funds are spent, the transaction input and witness show the data used to satisfy the output’s conditions. For a reliable answer, inspect both the output and its eventual spending path.
What does each Bitcoin address type reveal?
P2PK: the public key is already in the output
Pay-to-public-key, or P2PK, places a public key directly in the output script. The spender later supplies a signature to satisfy that output. Because the key is already present, the spending transaction does not need to introduce it for the first time.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
P2PK is an output template, not one of the familiar standard address formats such as a mainnet address beginning with 1 or bc1. It is useful to include in a comparison of output types, but do not expect every P2PK output to have a conventional address string you can identify by prefix.
P2PKH: a key hash first, then the full key on spending
Pay-to-public-key-hash, or P2PKH, commits to a hash of a public key. Its common mainnet address begins with 1. The receiving output therefore does not publish the full public key; when the output is spent, the spending data provides both a signature and the public key needed to check that its hash matches the commitment.
Also popular on Amazon
- 5-in-1 Connectivity: Equipped with a 4K HDMI port, a 5 Gbps USB-C data port, two 5 Gbps USB-A ports, and a USB C 100W PD-IN port. Note: The USB C 100W PD-IN port supports only charging and does not support data transfer devices such as headphones or speakers.
- Powerful Pass-Through Charging: Supports up to 85W pass-through charging so you can power up your laptop while you use the hub. Note: Pass-through charging requires a charger (not included). Note: To achieve full power for iPad, we recommend using a 45W wall charger.
- Transfer Files in Seconds: Move files to and from your laptop at speeds of up to 5 Gbps via the USB-C and USB-A data ports. Note: The USB C 5Gbps Data port does not support video output.
- HD Display: Connect to the HDMI port to stream or mirror content to an external monitor in resolutions of up to 4K@30Hz. Note: The USB-C ports do not support video output.
- What You Get: Anker 332 USB-C Hub (5-in-1), welcome guide, our worry-free 18-month warranty, and friendly customer service.
This means a P2PKH output can keep the full public key out of that output until its first spend, but not after the key has been used to spend it. The format and its address encoding are described in BIP 13 for address formatting; the P2SH construction is distinct and covered below.
P2SH: the script is committed to, then disclosed
Pay-to-script-hash, or P2SH, commits to a hash of a redeem script rather than directly committing to a public key. Its common mainnet address begins with 3. When the output is spent, the spender supplies the redeem script along with whatever data that script requires.
Free tools Windows power users keep installed
One-click scans. No signup required.
Whether that spend reveals public keys depends on the script. A script may contain one or more public keys, or it may impose other conditions. The address prefix alone cannot tell you which conditions apply or how many keys the script contains. BIP 16 specifies the P2SH spending behavior, and BIP 13 describes the corresponding address format.
P2SH can also be used for a script that commits to a SegWit construction. In that case, the 3… clue still signals a P2SH address, but it does not mean the spending conditions are necessarily a legacy, non-SegWit script. Look at the actual output and spend data rather than inferring every detail from the prefix.
P2WPKH: a witness public-key hash, then the full key in the witness
Pay-to-witness-public-key-hash, or P2WPKH, is a SegWit v0 construction. A typical mainnet address begins with bc1q. The output commits to a public-key hash; when spent, the witness provides a signature and the full public key.
Also popular on Amazon
- Sleek 7-in-1 USB-C Hub: Features an HDMI port, two USB-A 3.0 ports, and a USB-C data port, each providing 5Gbps transfer speeds. It also includes a USB-C PD input port for charging up to 100W and dual SD and TF card slots, all in a compact design.
- Flawless 4K@60Hz Video with HDMI: Delivers exceptional clarity and smoothness with its 4K@60Hz HDMI port, making it ideal for high-definition presentations and entertainment. (Note: Only the HDMI port supports video projection; the USB-C port is for data transfer only.)
- Double Up on Efficiency: The two USB-A 3.0 ports and a USB-C port support a fast 5Gbps data rate, significantly boosting your transfer speeds and improving productivity.
- Fast and Reliable 85W Charging: Offers high-capacity, speedy charging for laptops up to 85W, so you spend less time tethered to an outlet and more time being productive.
- What You Get: Anker USB-C Hub (7-in-1), welcome guide, 18-month warranty, and our friendly customer service.
For the question “is the key visible before spending?”, P2WPKH has the same core answer as P2PKH: the output contains the hash, not the full public key. The difference is the SegWit witness construction and address encoding. BIP 141 specifies P2WPKH as a witness v0 public-key-hash program and describes how it is spent.
P2WSH: a witness script hash, then the script on spending
Pay-to-witness-script-hash, or P2WSH, also uses a typical bc1q mainnet address, but its output commits to a script hash rather than a public-key hash. The spend reveals the witness script and the witness stack that satisfies it. Any public keys included in that script become visible then.
A bc1q prefix alone cannot distinguish P2WPKH from P2WSH. The two share the SegWit v0 address family, but the witness-program details identify which construction is involved. The P2WSH script is not exposed merely by receiving a payment; it is disclosed when spending the output. BIP 141 describes both witness-script-hash and witness-public-key-hash spending constructions.
P2TR: an output key immediately; different disclosures by spend path
Pay-to-Taproot, or P2TR, commonly uses a mainnet address beginning with bc1p. Its output commits to a 32-byte tweaked x-only output key, so a public key is present in the output from creation. It is important to call this the tweaked output key, not the untouched internal key.
A Taproot spend can take a key path or a script path. A key-path spend reveals a signature; it does not, by itself, reveal the hidden internal key or a script tree. In a script-path spend, the transaction reveals the executed script and a control block used to prove that script is committed to by the output. The control block includes the internal key and the data needed to verify the relevant commitment. The output key is already public in either case.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Repair Windows errors before they cause bigger problems3Fix the driver behind crashes, sound loss and screen glitchesAlso popular on Amazon
- Portable and powerful USB-C HUB: BENFEI USB Type-C HUB, with super-soft and knot-free silicone woven design cable, meets most mobile office needs. Compact, lightweight, stylish, and powerful portable USB C Hub equipped with 1 x HDMI port, 1 x 100W charging, and 3 x USB ports. 18-month warranty, 24-hour response, to ensure you feel at ease when using our product.
- Design centered on comfort and reliability: Thanks to BENFEI's end-to-end in-house cable production capability, in-house PCBA and assembly capability, using the industry's most advanced silicone woven design and process, 20cm cable in length, no knots, super-soft, the HUB is easy to use in all scenarios: laptop, tablet, stand etc. Super-soft, 25000+ life cycles, to meet your daily carrying and office needs.
- 100W Charging: Support up to 90W USB C pass-through charging via Type-C port to keep your laptop powered. 10W is reserved for other interface operations. No data and video function on the Type-C port.
- 4K HDMI Display: The HDMI port supports media display at resolutions up to 4K 30Hz, keeping every incredible moment detailed and ultra vivid. Please note that the C port of the Host device needs to support video output.
- Transfer Files in Seconds: Transfer files and from your laptop at speeds up to 10 Gbps with USB A 3.2 port. Extra 2 USB A 2.0 ports are perfectly for your keyboards and mouse.
Taproot therefore does not mean “no public key is exposed.” It means the output key is public, while additional information about the internal key and script conditions depends on the spending path. BIP 341 specifies the output-key and spending rules. The bc1p encoding uses Bech32m, specified for version 1 and later witness addresses by BIP 350.
Why do the address prefix and spending path both matter?
A prefix is a quick clue about an address encoding, but it is not a full description of every condition or disclosure associated with an output. You need to identify the output construction and, if it has been spent, inspect the corresponding input and witness data.
1…: commonly P2PKH on mainnet; the output contains a public-key hash, and a spend reveals the key and signature.3…: commonly P2SH on mainnet; spending reveals the redeem script, whose contents determine whether keys are exposed.bc1q…: a SegWit v0 address family that includes P2WPKH and P2WSH; inspect the witness program to tell which it is.bc1p…: commonly P2TR on mainnet; the tweaked x-only output key is already public, while a script-path spend reveals additional script data.
These prefix clues are specific to common mainnet encodings. Testnet and other Bitcoin networks use different human-readable prefixes, and P2PK does not require a standard address form. Bitcoin Core’s descriptor reference provides a useful map between output templates and address encodings, but the actual transaction data answers what a particular output or spend discloses.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What does public-key disclosure mean for privacy?
Public-key visibility is one detail of transaction transparency, not a measure of whether coins are safe or whether a private key has been exposed. The public key can be shared and checked by the protocol; possession of the corresponding private key is what enables signing. Nothing about publishing an address, or seeing a public key in an output, is evidence that the private key has been revealed.
Hash-based outputs delay publication of the full key in that output until the spend. If an address is reused, spending one output associated with the same key or script can make that key or script relevant to other funds tied to it. That is a privacy consideration, not a claim that an address reveals a private key. The precise implications depend on the outputs and spending conditions involved.
Also popular on Amazon
- 【Read before You Buy】 Note: This adapter is USB 2.0 version and cannot transmit HDM, VGA, or other video signals. Nevertheless, they are fully capable of charging devices,duplicating files, and can be seamlessly integrated with USB-C earphones, wireless network adapters, and SD card adapters.
- 【Easy to Use and Safe】Thanks to modern manufacturing techniques, we've made these adapters sufficiently compact so that they can remain inserted in your device without noticeable protrusion or inconvenience. This means you don't have to constantly plug and unplug them, reducing the likelihood of wear and misalignment, and making them more convenient to carry around.
- 【Reliable Quality】Engineered for enhanced durability, durable aluminum alloy shell material,get excellent wear resistance and heat dissipation,the male USB C and female USB connectors & the male USB and female USB C connectors are designed to be plugged and unplugged up to 20000 times. Provides data transfer, device charging, memory space expansion, and additional computer peripherals.
- 【Think more for you】Do you need to connect a USB-C-enabled device to an odd device that only has USB-A ports? Then these USB-A male to USB-C female adapters are made for you.Simply insert the adapter into the USB-A port on the device, and you can instantly connect your USB-C device to the device that originally didn't have the correct connection port.
- 【Trusted xiwxi Quality and Service】As a responsible brand seller, you will receive xiwxi's 12-month Quality assurance and lifetime friendly customer service, you're not just buying a product,you're investing in peace of mind with all-round quality and exceptional customer service.
Similarly, a script-hash output conceals the committed script until it is spent, but the spend reveals the script and may reveal keys within it. Taproot key-path spending reveals less about hidden script conditions than a script-path spend, but both paths use an output whose tweaked key is already public. Avoid treating “hash-based,” “SegWit,” or “Taproot” as blanket guarantees of secrecy: each describes a construction, and the data disclosed depends on its spending rules.
How can I tell what a particular transaction revealed?
Use the transaction’s output and spend data rather than the address alone. This sequence separates what was public when funds arrived from what appeared later:
- Identify the network and address family. Check whether the address is a mainnet address or belongs to another network; prefix clues differ across networks.
- Inspect the output script or witness program. Determine whether it is P2PK, P2PKH, P2SH, P2WPKH, P2WSH, or P2TR. Do not classify every
bc1qoutput as P2WPKH. - Ask what the output commits to. Is the public key directly present, is a key hash present, is a script hash present, or is the Taproot tweaked output key present?
- If spent, inspect the input and witness. Look for a full public key supplied to satisfy P2PKH or P2WPKH, a redeem or witness script supplied for a script-hash output, or the Taproot key-path signature versus script-path script and control block.
- Separate public from private data. The transaction can reveal public keys, signatures, scripts, and commitment data; that is not the same as revealing the private key.
This method also avoids a common error: confusing what an address string encodes with all the information a later spend will publish. The address points to a locking condition; the spend demonstrates how that condition was met.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minutePC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Frequently Asked Questions
Can someone spend my bitcoin if they know my public key?
No. A public key supports verification of signatures, but spending requires a valid signature made with the corresponding private key. Public-key visibility alone does not provide that signing authority.
Does a Bitcoin address contain the public key?
Not necessarily. Some address forms encode a hash or witness program rather than a full public key, while Taproot addresses encode a witness program for the tweaked output key. The output and its later spending data are the right places to check what was actually exposed.
Can I tell whether a bc1q address is P2WPKH or P2WSH from the prefix?
No. Both are SegWit v0 forms that can use the bc1q prefix. You need the witness-program length or the output script details to distinguish a key-hash program from a script-hash program.
Does a Taproot key-path spend reveal the Taproot internal key?
A key-path spend reveals a signature, not the hidden internal key or script tree. A script-path spend reveals an executed script and control block, which includes the internal key and commitment data.
Recommended Free Tools
