Understand Bitcoin.Decide for yourself.

Read the lesson

What makes money work?

Imagine you've finished a week's work and get paid. You can spend those dollars today, compare two prices, or keep some for later. Money connects what you do now with something you might need in the future. That familiar idea gives us a way into Bitcoin. Before thinking about buying any, let's ask what money does, what makes a digital payment work, and why someone would try a different design.

Money does three jobs

Money helps people pay, price and save. Economists call these a medium of exchange, a unit of account and a store of value. Those are names for three jobs you already know. The jobs don't always fit together neatly. Something you hope will rise in value may be awkward for pricing groceries. Something convenient for spending may buy less over time. A useful comparison asks which job matters to you.

Your dollars are already digital

Your bank balance is already digital. Bitcoin's distinctive idea is that people can hold its asset and check the transfer history without one institution keeping the authoritative account book. A network means computers communicating with each other. Banks also provide services, including account recovery and payment dispute processes. Bitcoin's base network has no help desk that can reset a private key or cancel a confirmed payment. Different designs create different responsibilities.

Why copying is a problem

Send a photo to two friends, and both can keep a copy. Money needs a different result. Once you've spent particular funds, you mustn't be able to spend those same funds again. This is called the double-spending problem. A bank can prevent it by keeping the account record. Bitcoin asks whether a public network can agree on the spending history without a single central record keeper. That's the puzzle behind its design.

Where Bitcoin began

Satoshi Nakamoto published the Bitcoin whitepaper in two thousand eight, and the network began operating in two thousand nine. A whitepaper is a document explaining a proposed system. Satoshi's identity remains unknown. The paper describes electronic payments between willing participants, using cryptographic proof and a shared history to prevent double spending. Its timing during a financial crisis helps explain interest in alternatives. It doesn't establish every motive of its creator.

One name, two meanings

Bitcoin names both the network and its asset. An asset means something you can own. BTC is the short label for the Bitcoin asset. Owning it doesn't give you shares in a company. Cryptocurrency is a broader category. Other cryptocurrencies have their own assets and rules. A familiar logo doesn't make them interchangeable. When we say Bitcoin in this course, we're talking about this particular system and its asset.

One amount, two units

One Bitcoin divides into one hundred million smaller units called satoshis, or sats. Like dollars and cents, these units help us describe an amount. You don't need a whole Bitcoin to understand or use the system. Maya, our fictional learner, sees one thousandth of a Bitcoin, written zero point zero zero one BTC. That's one hundred thousand sats. Changing the display from BTC to sats changes the unit, not how much Bitcoin she has.

What attracts people to it?

Some people value controlling their own spending keys, using an open payment network, or checking a published issuance schedule. Issuance means the creation of new Bitcoin. These are reasons to study the system, even without buying. Each raises a practical question. Who helps if you lose access? Will the other person accept Bitcoin? What will a transfer cost? Could its value change before you spend it? The design gives us questions to explore, rather than one answer for everybody.

Explain it without a price chart

Try describing Bitcoin without mentioning its market price. What does the network record? Who can authorize spending? Why doesn't copying a wallet create extra coins? You can pause and put those ideas into your own words. Then name one feature you find useful and one limitation that matters to you. Stage two follows the copying problem through an actual example. You can keep learning without opening an account or moving money.

Try the stage one check

Before you continue, Maya's display switches from one thousandth of a Bitcoin to one hundred thousand sats. Did she receive extra Bitcoin, exchange it for a different asset, or simply change the unit? Only the unit changed. Return to stage one for its example and understanding check. The deeper written guide also links to the opening of the whitepaper and an explanation of money's three jobs.

Revised October 23, 2026. What is money? Bank of England. Bitcoin.org FAQ. Bitcoin whitepaper.

Read the lesson

Which payment should count?

Imagine Maya has one spendable Bitcoin amount. She signs two conflicting transactions using it. One pays Leo, and the other pays Noor. A transaction is a proposed record of spending. Both payments can't spend the same funds on the accepted history. A signature can show permission to spend, but it can't by itself choose which payment counts. Bitcoin needs both spending rules and an agreed order. A bank uses its own records. Let's see how a public network approaches the problem.

A key authorizes spending

A private key is secret computer information used to authorize spending. A wallet prepares a transaction and uses the required keys to make a digital signature. Other computers can check that signature without learning the secret key. This proves something about authorization. It doesn't prove a payment request is honest or settle the order of conflicting payments. Keep permission, ordering and the recipient's honesty as separate questions.

Follow a fictional payment

Suppose Maya controls an unspent amount of one hundred thousand sats. She wants to pay Leo thirty thousand. Her transaction creates thirty thousand sats for Leo and sixty-nine thousand sats of change for her. The remaining one thousand sats is the network fee. One hundred thousand in, ninety-nine thousand in outputs, and one thousand as the fee. An output assigns an amount under spending conditions. These amounts are invented arithmetic, not a recommended fee.

Nodes check the spending rules

A node is a computer running Bitcoin software. A full node checks transactions and proposed blocks against the rules it enforces. It checks spending authorization, the amounts and whether an earlier amount has already been spent in the history it accepts. If a conflicting payment spends Maya's original amount first on the accepted chain, she can't spend it again there. Her wallet doesn't send a file containing coins, and its signature doesn't publish her private key.

Miners propose blocks

A block groups transactions together. Miners repeatedly calculate hashes, which are fingerprints derived from block data, until they find a result that meets the required target. This search is called proof of work. Finding that result takes computing resources. Other nodes can check it quickly and still check the block's other rules. Mining work helps order valid history. It doesn't make an invalid payment or an excessive reward acceptable.

Blocks connect to earlier blocks

Accepted blocks form the blockchain, a linked transaction history. Each block refers to an earlier block through its hash. Changing earlier information changes the fingerprints that later blocks refer to. An attacker can't make an altered history acceptable simply by recalculating those links. It must contain valid transactions and sufficient accumulated proof of work. These requirements explain why the record involves more than a list of payments.

What if two blocks arrive together?

Two miners can find valid blocks close together. Some nodes may hear about one first, while others hear about the other. For a time, there can be competing valid histories. Nodes follow the valid chain with the most accumulated proof of work. Later blocks can extend one branch until it becomes the history they follow. A payment in the other branch may become unconfirmed again or conflict with spending on the accepted branch.

Why confirmations help

Broadcast means a transaction has been shared with other computers. Its first confirmation means inclusion in a block on the current chain. Later blocks add confirmations and generally reduce the chance of reversal through a competing chain. This isn't one vote per computer. Creating thousands of computer identities doesn't create thousands of votes over the history. Proof of work gives the ordering process a cost, while full nodes keep checking validity independently.

Why use electricity?

Proof of work makes competing to propose blocks costly, while checking the result is quick. Its search serves the ordering of Bitcoin's history. It isn't solving medical research problems or other outside calculations. Electricity and equipment are real costs. Whether the system's benefits justify them is a further question people disagree about. Energy consumption and emissions also aren't identical measures. The deeper mining guide explains these distinctions without promising every attack is impossible.

Where trust still remains

You don't have to run mining equipment or a node to learn about Bitcoin. Most people still rely on software, devices and services. If a provider holds the keys, its security and withdrawal practices matter too. Self-custody means managing your own spending keys and recovery information. It can reduce reliance on a custodian while increasing your responsibilities. The network can check rules. It can't decide whether this is the recipient or payment you intended.

Does expensive work excuse a bad block?

Now try this: a miner finds valid proof of work, but its block claims more new Bitcoin than the rules permit. Must a full node accept it because the work was expensive? No. It checks the other rules and rejects the block. Choosing between valid histories is different from accepting an invalid one. Return to stage two for its understanding check, then explore how the supply rules fit into the miner's reward.

Revised October 23, 2026. Bitcoin whitepaper. Bitcoin developer guide.

Read the lesson

A useful feature is not a price

Why would people value something digital? Start with three questions. What do the rules permit? What would someone use it for? And what are buyers and sellers willing to pay? Your answers can point in different directions. Bitcoin's current rules cap issuance at twenty-one million BTC. Nodes enforcing those rules reject excessive new issuance. That describes a quantity constraint. It doesn't establish a fair market price or guarantee demand.

What a halving changes

Miners can receive newly created Bitcoin within the block subsidy limit, plus fees from existing Bitcoin. A halving cuts the subsidy limit in half every two hundred and ten thousand blocks. It is based on block height, not a calendar appointment. Transaction fees don't create extra supply. A halving doesn't halve your wallet balance or automatically double Bitcoin's price. More mining work doesn't let a miner ignore the permitted reward.

Issuance and purchasing power differ

New issuance measures growth in the Bitcoin quantity. Consumer price inflation measures changes in the prices of goods and services. One is about an asset's supply. The other is about what money buys. Bitcoin's supply schedule is predictable under its current rules, but its purchasing power isn't fixed. Calling it scarce doesn't establish that it will reliably preserve the money you need for everyday spending.

Try a basket-of-goods example

Suppose a familiar basket of goods costs one hundred dollars and later costs one hundred and ten. An unchanged one hundred dollar balance buys about ninety point nine percent of that basket. This is an invented example, not a current inflation reading. Holding a fixed Bitcoin quantity doesn't guarantee you can still buy the basket either. Its dollar price can fall. To compare purchasing power, you need both the asset's market value and the prices of what you intend to buy.

Why people value different assets

A company share can represent a claim on a business. A bond sets out payment obligations. Gold has physical uses and a monetary history. Bitcoin offers transfer on its network and rules that participants can inspect. Bitcoin itself doesn't pay its holder dividends or interest, and no issuer promises redemption for dollars. Different assets give people different reasons to value them. A stock or bond valuation method can't simply be copied across.

Use and speculation can coexist

Some people value direct control of spending keys, global transfers or restricted issuance. Others buy mainly because they expect a future buyer to pay more. One person can have several motives. A useful payment network can also attract speculation. Speculative demand can leave quickly. A real use case doesn't establish that any particular price is reasonable. Ask whether a claim describes a feature or predicts future adoption.

The same Bitcoin can be worth less

Maya holds one thousandth of a Bitcoin in this fictional example. At an invented price of one hundred thousand dollars per Bitcoin, it's worth one hundred dollars before costs. At eighty thousand dollars per Bitcoin, it's worth eighty dollars. No Bitcoin moved, but its displayed dollar value fell. A supply cap doesn't stop that loss. A long holding period doesn't guarantee recovery, and an attractive feature doesn't make Bitcoin suitable for money you'll need soon.

Why disagree about fixed supply?

Supporters value an issuance schedule that doesn't expand in response to a policy decision. Critics ask how a system with inflexible supply handles changing demand, credit and economic shocks. Predictability is a design choice with tradeoffs. Ordinary monetary systems also do more than print notes. Commercial bank lending can create deposits within financial and regulatory constraints. You can compare these designs fairly without assuming one asset meets every need.

Take the strongest questions seriously

There is no agreed formula that gives Bitcoin a dependable fair price. Its lack of cash flow, price volatility and competition from other systems are serious questions. A precise price target needs assumptions beyond a supply cap. Mining uses electricity and equipment, and on-chain space is limited. Supporters and critics disagree about whether the benefits justify those costs. Listen for the evidence and assumptions on both sides, rather than treating enthusiasm or skepticism as proof.

What would change your mind?

Choose one feature you find interesting and a condition under which it might not help. For example: I value predictable issuance, but my purchasing power could still fall if demand falls. Then try the same exercise with a skeptical argument. What evidence would make you reconsider either view? Understanding Bitcoin doesn't require agreeing with every case for owning it. You can learn, wait or decide never to buy. A lesson score can't make that financial decision for you.

Does limited supply guarantee a return?

If new issuance falls while fewer people want to hold Bitcoin, must its price rise? The supply rule alone can't tell you. Think about buyers, sellers and what they're willing to pay. Return to stage three for its price-loss example and check. The written supply and value guides link to primary explanations and further questions. Next comes who controls the keys, another part of understanding the system before buying.

Revised October 23, 2026. Inflation: Federal Reserve. How money is created: Bank of England. Bitcoin.org FAQ.

Read the lesson

Who can authorize spending?

Imagine Maya's phone stops working. Her Bitcoin hasn't turned into missing files inside the phone. The network records spendable amounts. The question is whether she can still get the information needed to authorize spending. A wallet helps manage that access and shows information about the network. Some wallets hold signing keys. Others only monitor activity, or work with a separate signing device. A balance on a screen doesn't by itself establish who can spend it.

Custody and device are different choices

Custody describes who controls the keys. With a custodian, a provider manages them and you use its account system. With self-custody, you manage the keys or the signing arrangement yourself. Each has different recovery responsibilities. Mobile and hardware describe tools. A phone app can be custodial or self-custodial. A hardware device can protect signing keys while an app shows activity. Choose by the control and recovery process, rather than assuming a particular device removes every risk.

Four kinds of information

A receiving address is information a sender can use to pay you. A device PIN or account password controls access to a particular tool or service. A private key authorizes spending. A recovery backup may recreate those keys. These aren't interchangeable. Support may help recover a provider login, but it can't recreate self-custody information it doesn't hold. Sharing recovery words can give someone spending access even if they don't know your device PIN.

What the recovery words recover

Many wallets use a recovery phrase, sometimes called a seed phrase. Under common designs, the words help derive a family of keys and addresses. They don't contain a downloaded copy of your coins or a receipt for every payment. Some setups also use a separate passphrase, or a different recovery design altogether. Exact compatibility matters. Don't assume any set of recovery words opens the same accounts in every app. Follow the genuine documentation for your particular wallet.

A hardware device has limits

A hardware wallet is designed to isolate signing keys from an internet-connected phone or computer. Its trusted display can help you verify the destination and transaction details before approval. Use the maker's current instructions. It can't make a dishonest recipient trustworthy, and it doesn't replace a backup. If recovery information is exposed, an attacker may not need the original device. Device security, backup protection and payment verification solve different parts of the problem.

Plan for loss before it happens

Before adding funds, explain how you would recover from a lost phone, a damaged device or an inaccessible provider account. Identify the official recovery process and the information it needs. A plan that depends entirely on the lost device isn't complete. Use a maker-supported backup check when available, following its verified instructions privately. Don't reset a funded wallet or enter real recovery information into this lesson as an experiment. A successful paper exercise alone doesn't prove your backup works.

Protect the backup and its context

A backup needs protection from theft, accidental loss and damage. Storage choices have tradeoffs. Multiple copies can reduce one kind of loss while increasing exposure if they are poorly protected. Use the security method appropriate to the wallet's design. Keep non-secret notes about the product and recovery requirements, but don't put recovery words into email, support chat or a shared study sheet. A photograph or cloud copy can expose them to accounts and devices you didn't intend to trust.

If access or a backup is exposed

If you suspect someone saw recovery information, changing an app password or buying a replacement device doesn't necessarily replace the underlying keys. Stop sharing information and use the wallet maker's verified incident guidance. Moving funds to a newly secured setup may be necessary, but requires careful verification and can involve fees. Don't follow a stranger's recovery link or send another payment to unlock help. Tracing a transaction isn't the same as having authority to recover funds.

Future access needs a plan too

Think beyond the next phone upgrade. Someone you trust may eventually need to locate your recovery arrangements. A plan can explain where to find appropriate instructions without placing the spending secrets in an ordinary shared document. Complex arrangements can add ways to make a mistake. Seek suitable professional advice for legal or inheritance decisions, and learn the exact wallet process. The goal is a setup you can maintain and recover, not the largest possible collection of security products.

Try the recovery decision

A person using a familiar company logo asks Maya for recovery words to check an incoming payment. Would an address or transaction reference answer the delivery question without giving spending access? Think about which information each task needs. Keep the words private and contact genuine support independently. Return to stage four for its understanding check. Then write a non-secret recovery plan: who controls access, how recovery works, and which verified instructions you would use.

Revised October 23, 2026. Bitcoin developer guide: wallets. BIP 39 recovery-phrase specification. Bitcoin.org: securing your wallet.