<blockquote>
  <p>Does the private extended key give you access to spend all the funds in all the public addresses generated with that 1 private extended key?</p>
</blockquote>

<p>No, the extended private key just lets you derive all of the child private keys, which would then be used to spend any funds that were sent to the corresponding public keys (addresses). The extended private key itself cannot be used to sign for child key transactions. </p>

<p>An exchange can keep an extended pubkey on their server to generate new receiving addresses for customers, while keeping the extended privkey offline. This allows them to derive derive addresses and priv keys securely in a low-maintenance manner. </p>

<blockquote>
  <p>Also, when we say addresses should never be used more than 1 time, I assume it still must be used 2 times at some point, since you add funds and then withdraw it, meaning 2 transactions total?</p>
</blockquote>

<p>Yes, generally when people say "only use an address once", they mean "only send bitcoin to this address once". Of course, to later spend that bitcoin, you'd need to create another transaction. </p>

CC BY-SA 4.0
2019-05-15T21:16:57.683Z
2019-05-15T21:16:57.683Z
chytrik
<p>It is not more secure to use different adress for every bitcoin you receive, it just gonna give you more privacy since it is gonna be harder to track you.</p>

<p>I guess the exchange use different bitcoin account then generate different adress for them just like we could, and keep a track of all that.</p>

<p>I think you are just confuse about the way exchange keep your coins, once you send them your bitcoin, you do not have a bitcoin key to access the adress you send 
your bitcoin to, they just have keep track of it, and if you want to withdraw your bitcoin to your cold wallet, they will use one of their wallet to send it.</p>

<p>And as I said it is safe to use the same adress to receive your bitcoin, but you are right in your example they gonna be 2 transactions.</p>

CC BY-SA 4.0
2019-05-15T21:00:07.330Z
I should have specified it's more secure after you used the address to withdraw funds once since your public key is now known after that, but yes, you are right about receiving money, doesn't make difference except for privacy.
dan
CC BY-SA 4.0
2019-05-15T21:09:04.963Z
*"It is not more secure to use different adress for every bitcoin you receive"*, this is not strictly true: address reuse is not theoretically secure against quantum computation. Once a public key is revealed (during a spend), a quantum computer may be able to calculate the corresponding private key.
chytrik
CC BY-SA 4.0
2019-05-15T21:26:26.543Z
By the time a hacker can use a computer quantum computer able to break a public key we would have all been informed of this new technology and move our asset to quantum resistant wallet
Saxtheowl
CC BY-SA 4.0
2019-05-15T21:41:43.113Z
@Saxtheowl Even if that is true, my original comment still stands. I do agree privacy is the largest consideration in any case.
chytrik
CC BY-SA 4.0
2019-05-15T20:49:59.127Z
2019-05-15T20:49:59.127Z
Saxtheowl
<p>I'm slowly getting educated about how the blockchain and Bitcoin addresses work. I now understand why it is more secure to use a different Bitcoin address for every transaction you make but I'm now trying to understand how I could achieve that with something as basic as paper wallets for educational purposes.</p>

<p>So, I noticed most big exchanges nowadays do generate a new public address every time you want to deposit cryptocurrencies. From what I've read, this is made possible by the use of an extended key, which contains a public and private part, just like regular keys. Now, where I'm still a little bit confused is how does it work exactly for them (the exchanges) to access all the funds from all the public addresses you generated at the same time (since they do show you a total balance and you can spend that balance with what seems to be only 1 transaction). Does the private extended key give you access to spend all the funds in all the public addresses generated with that 1 private extended key?</p>

<p>Also, when we say addresses should never be used more than 1 time, I assume it still must be used 2 times at some point, since you add funds and then withdraw it, meaning 2 transactions total? Or do I get it completely wrong?</p>

<address><exchanges><private-key><public-key><address-generation>
Trying to understand extended keys
dan
# Trying to understand extended keys

(Asked by: username_0 on 2019-05-15)

I'm slowly getting educated about how the blockchain and Bitcoin addresses work. I now understand why it is more secure to use a different Bitcoin address for every transaction you make but I'm now trying to understand how I could achieve that with something as basic as paper wallets for educational purposes.

So, I noticed most big exchanges nowadays do generate a new public address every time you want to deposit cryptocurrencies. From what I've read, this is made possible by the use of an extended key, which contains a public and private part, just like regular keys. Now, where I'm still a little bit confused is how does it work exactly for them (the exchanges) to access all the funds from all the public addresses you generated at the same time (since they do show you a total balance and you can spend that balance with what seems to be only 1 transaction). Does the private extended key give you access to spend all the funds in all the public addresses generated with that 1 private extended key?

Also, when we say addresses should never be used more than 1 time, I assume it still must be used 2 times at some point, since you add funds and then withdraw it, meaning 2 transactions total? Or do I get it completely wrong?

**Tags:** address, exchanges, private-key, public-key, address-generation


---

## 2 answers

### Answer by username_1 on 2019-05-15. Score: 1 | Accepted answer

> Does the private extended key give you access to spend all the funds in all the public addresses generated with that 1 private extended key?

No, the extended private key just lets you derive all of the child private keys, which would then be used to spend any funds that were sent to the corresponding public keys (addresses). The extended private key itself cannot be used to sign for child key transactions.

An exchange can keep an extended pubkey on their server to generate new receiving addresses for customers, while keeping the extended privkey offline. This allows them to derive derive addresses and priv keys securely in a low-maintenance manner.

> Also, when we say addresses should never be used more than 1 time, I assume it still must be used 2 times at some point, since you add funds and then withdraw it, meaning 2 transactions total?

Yes, generally when people say "only use an address once", they mean "only send bitcoin to this address once". Of course, to later spend that bitcoin, you'd need to create another transaction.


---

### Answer by username_2 on 2019-05-15. Score: 2

It is not more secure to use different adress for every bitcoin you receive, it just gonna give you more privacy since it is gonna be harder to track you.

I guess the exchange use different bitcoin account then generate different adress for them just like we could, and keep a track of all that.

I think you are just confuse about the way exchange keep your coins, once you send them your bitcoin, you do not have a bitcoin key to access the adress you send
your bitcoin to, they just have keep track of it, and if you want to withdraw your bitcoin to your cold wallet, they will use one of their wallet to send it.

And as I said it is safe to use the same adress to receive your bitcoin, but you are right in your example they gonna be 2 transactions.

> **Comments:**
> **username_0**: I should have specified it's more secure after you used the address to withdraw funds once since your public key is now known after that, but yes, you are right about receiving money, doesn't make difference except for privacy.  
> **username_1**: *"It is not more secure to use different adress for every bitcoin you receive"*, this is not strictly true: address reuse is not theoretically secure against quantum computation. Once a public key is revealed (during a spend), a quantum computer may be able to calculate the corresponding private key.  
> **username_2**: By the time a hacker can use a computer quantum computer able to break a public key we would have all been informed of this new technology and move our asset to quantum resistant wallet  
> **username_1**: @username_2 Even if that is true, my original comment still stands. I do agree privacy is the largest consideration in any case.  

---

