<blockquote>
<p>Under the covers, my understanding is that a master private/public key will be created from the seed phrase. Then, a child key is created under the parent key for the address.</p>
</blockquote>
<p>That's correct.</p>
<blockquote>
<p>Now, suppose this user completely loses their seed phrase / master keys, BUT they somehow have a copy of the child key pair that contains their Bitcoin.</p>
<p>Is it possible to recover their Bitcoin from that child key alone? If so, what is the process? Are individual child keys just the same as normal (non BIP-32) key/pairs?</p>
</blockquote>
<p>Key derivation is not part of the protocol. It is simply an approach wallets use to avoid the need to store backups of every separate key generated. Old wallet software (2009-2013 era) didn't use BIP32 at all.</p>
<p>BIP32 is just used to turn parent keys into child keys, and then those child keys are used for signing. As far as the protocol is concern, the parents don't exist.</p>
<p>So the process is exactly the same with or without: you sign directly with the child key. If you have that child you, you can sign, regardless of where it came from.</p>

CC BY-SA 4.0
2021-04-18T00:48:23.103Z
Perfect, this is exactly what I wanted to know. Thank you!
Tanner.R
CC BY-SA 4.0
2021-04-19T18:37:17.463Z
Parent Key absent, do you mean Child Key has same security level with Parent Key or practically accepted even having lower security?
Cloud Cho
CC BY-SA 4.0
2021-04-21T20:12:26.440Z
All secp256k1 keys that are properly generated (from actual randomness, or using BIP32 from a secure seed) have around 128 bits of security.
Pieter Wuille
CC BY-SA 4.0
2021-04-18T00:29:19.567Z
2021-04-18T00:48:51.097Z
2021-04-18T00:48:51.097Z
Pieter Wuille
<p>I have a question regarding BIP-32 and keys.</p>
<p>Imagine a scenario in which a user creates a new Bitcoin wallet with a seed phrase. He then generates a new address and sends 1 BTC to this address.</p>
<p>Under the covers, my understanding is that a master private/public key will be created from the seed phrase. Then, a child key is created under the parent key for the address.</p>
<p>Now, suppose this user completely loses their seed phrase / master keys, BUT they somehow have a copy of the child key pair that contains their Bitcoin.</p>
<p>Is it possible to recover their Bitcoin from that child key alone? If so, what is the process? Are individual child keys just the same as normal (non BIP-32) key/pairs?</p>
<p>Thanks!</p>

CC BY-SA 4.0
2021-04-17T21:30:53.050Z
I don't think we could do all transactions even we signed in.
Cloud Cho
CC BY-SA 4.0
2021-04-17T07:04:53.470Z
It looks like we couldn't make parent key from child key (ref: https://bitcoin.stackexchange.com/a/37489/107554)
Cloud Cho
CC BY-SA 4.0
2021-04-17T07:19:37.130Z
I thought about this after I posted the question, but do we need the parent key to sign a TX, or is that done with the child key already? If a TX is already signed using the child key, there must definitely be a way to recover funds from the child key directly.
Tanner.R
<private-key><bip32-hd-wallets>
Can Bitcoin be recovered from a child key alone?
Tanner.R
# Can Bitcoin be recovered from a child key alone?

(Asked by: username_0 on 2021-04-17)

I have a question regarding BIP-32 and keys.

Imagine a scenario in which a user creates a new Bitcoin wallet with a seed phrase. He then generates a new address and sends 1 BTC to this address.

Under the covers, my understanding is that a master private/public key will be created from the seed phrase. Then, a child key is created under the parent key for the address.

Now, suppose this user completely loses their seed phrase / master keys, BUT they somehow have a copy of the child key pair that contains their Bitcoin.

Is it possible to recover their Bitcoin from that child key alone? If so, what is the process? Are individual child keys just the same as normal (non BIP-32) key/pairs?

Thanks!

**Tags:** private-key, bip32-hd-wallets

> **Comments:**
> **username_1**: It looks like we couldn't make parent key from child key (ref: https://bitcoin.stackexchange.com/a/37489/107554)  
> **username_0**: I thought about this after I posted the question, but do we need the parent key to sign a TX, or is that done with the child key already? If a TX is already signed using the child key, there must definitely be a way to recover funds from the child key directly.  
> **username_1**: I don't think we could do all transactions even we signed in.  

---

## 1 answers

### Answer by username_2 on 2021-04-18. Score: 1 | Accepted answer

> Under the covers, my understanding is that a master private/public key will be created from the seed phrase. Then, a child key is created under the parent key for the address.

That's correct.

> Now, suppose this user completely loses their seed phrase / master keys, BUT they somehow have a copy of the child key pair that contains their Bitcoin.
>
> Is it possible to recover their Bitcoin from that child key alone? If so, what is the process? Are individual child keys just the same as normal (non BIP-32) key/pairs?

Key derivation is not part of the protocol. It is simply an approach wallets use to avoid the need to store backups of every separate key generated. Old wallet software (2009-2013 era) didn't use BIP32 at all.

BIP32 is just used to turn parent keys into child keys, and then those child keys are used for signing. As far as the protocol is concern, the parents don't exist.

So the process is exactly the same with or without: you sign directly with the child key. If you have that child you, you can sign, regardless of where it came from.

> **Comments:**
> **username_0**: Perfect, this is exactly what I wanted to know. Thank you!  
> **username_1**: Parent Key absent, do you mean Child Key has same security level with Parent Key or practically accepted even having lower security?  
> **username_2**: All secp256k1 keys that are properly generated (from actual randomness, or using BIP32 from a secure seed) have around 128 bits of security.  

---

