What Is Bitcoin — and How Does It Actually Work?

Bitcoin is the first and most famous cryptocurrency. It's digital money that no government, bank, or company controls. The technology underneath is a combination of cryptography, peer-to-peer networking, and economic incentives that had never been assembled this way before. Since its launch in January 2009 it has grown into a widely held asset, partly used as money, partly as "digital gold," and to a large degree as a speculative instrument. This article explains what it actually is, how each piece of the machine works, what it costs to run, and where its real strengths and weaknesses lie.

Educational only — not financial advice. This article explains a technology and its documented risks. It does not recommend buying, selling or holding any asset. Investing involves risk of loss; past performance does not guarantee future results. Consult a licensed financial adviser before making investment decisions.

Key takeaways

• Bitcoin is a decentralised digital currency — there is no central issuer or administrator.
• Transactions are recorded on a public blockchain maintained by thousands of independent computers called nodes.
• New bitcoins are created through mining, a competition in which computers repeatedly hash block data until they find a result below a target.
• Supply is capped at 21 million; the protocol's schedule means about 19.69 million had been issued by the fourth halving in April 2024.
• Bitcoin has a volatile price, real but limited everyday use, and significant electricity use — about 138 TWh a year in a 2025 Cambridge estimate.

The original problem: double-spending

Before Bitcoin, digital cash had a fundamental problem: how do you prevent double-spending?

For physical cash, the problem solves itself. When you hand someone a $20 bill, you no longer have it. Possession is the proof.

For digital cash, there is no such physics. A digital file can be copied endlessly and perfectly. If money is just a file, what stops you from sending the same "coin" to two people at once? How do you prove "this $20 hasn't been spent twice"?

Every solution before 2008 relied on a trusted central party. Your bank keeps the ledger; when you pay by card, the card network and the banks on each side check balances and update their books. That works, but it means somebody has to be trusted, somebody can freeze or reverse payments, and the whole system depends on those institutions staying solvent and honest.

Researchers had tried to build trust-free digital cash for decades — David Chaum's eCash in the 1990s, and proposals such as Wei Dai's b-money and Nick Szabo's bit gold — but none solved the problem of getting strangers on an open network to agree on a single history of transactions without a referee.

In October 2008, a person or group using the name Satoshi Nakamoto circulated a nine-page paper, "Bitcoin: A Peer-to-Peer Electronic Cash System". Its core idea: let the network agree on transaction order by making the ledger expensive to write, so that rewriting history would cost more than any attacker could gain. The software went live on 3 January 2009, when the first ("genesis") block was mined. Nakamoto's identity remains unknown.

How Bitcoin solved it: five pieces working together

The solution involves several components, none of which was new on its own. The innovation was the combination.

1. A public ledger

Every Bitcoin transaction is recorded on a shared ledger called the blockchain. Transactions are grouped into blocks, and each block contains a cryptographic fingerprint (a hash) of the previous block. Change anything in an old block and its hash changes, which breaks the link to every block after it. Anyone can download the full ledger and verify it from the first block forward.

2. Cryptographic signatures

Ownership is proven with public-key cryptography. Each user holds a private key — a very large secret number — and a matching public key from which addresses are derived. Spending bitcoin requires producing a digital signature that only the private key can create, but that anyone can check against the public key. Bitcoin uses the elliptic-curve signature schemes ECDSA and, since the 2021 Taproot upgrade, Schnorr signatures, both over the secp256k1 curve.

3. A decentralised network

Thousands of computers worldwide run the Bitcoin software as full nodes. Each one keeps its own copy of the ledger and independently checks every rule: signatures valid, no coins created from nothing, no output spent twice. A node does not trust other nodes; it verifies.

4. Consensus through proof of work

The rules decide what is valid, but the network also has to agree on order — which of two conflicting transactions came first. Bitcoin resolves this with proof of work: adding a block requires showing that a large amount of computation was spent. Nodes follow the valid chain with the most accumulated work. The white paper calls this the longest chain, and it is what makes history costly to rewrite.

5. Economic incentives

Miners are paid in newly issued bitcoin plus transaction fees for extending the chain. An honest miner earns these rewards; a miner who tries to cheat wastes electricity on blocks that honest nodes will reject. The white paper's argument is that an attacker with large computing power would earn more by following the rules than by attacking.

Together, these create a system where transactions are verifiable by anyone, very hard to reverse once buried, and don't require trusted intermediaries.

How a Bitcoin transaction actually works

Bitcoin doesn't track "account balances" the way a bank does. It tracks unspent transaction outputs (UTXOs). Think of them as individual banknotes of arbitrary size sitting at addresses.

Suppose you received two payments earlier: one of 0.3 BTC and one of 0.5 BTC. Your wallet shows 0.8 BTC, but on the ledger that is two separate outputs. Now you want to pay someone 0.6 BTC.

Step 1: Build the transaction

Your wallet selects inputs — both outputs, totalling 0.8 BTC — and creates new outputs: 0.6 BTC to the recipient's address and, say, 0.1998 BTC back to a new "change" address you control. The 0.0002 BTC difference between inputs and outputs is the fee, which goes to whichever miner includes the transaction. Your wallet then signs each input with the relevant private key.

Step 2: Broadcast

The signed transaction is sent to a few nodes, which check it and pass it on. Within seconds it has spread across the network and sits in each node's mempool — the waiting room for unconfirmed transactions.

Step 3: Inclusion in a block

Miners choose transactions from the mempool, generally preferring those paying the highest fee per unit of data, and assemble them into a candidate block. When a miner finds a valid proof of work, the block is broadcast and every node checks it before adding it to its copy of the chain.

Step 4: Confirmations

The block containing your transaction gives it one confirmation. Each later block on top adds another. A widely used convention is to treat six confirmations — roughly an hour at the 10-minute target — as settled for large payments.

Step 5: Practically permanent

Why does depth matter? The white paper calculates the odds that an attacker controlling a share q of the network's computing power could ever catch up from z blocks behind. With q = 10%, the probability falls to about 0.02% at six blocks. With q = 30%, an attacker still has roughly a 4% chance at ten blocks behind, so the safe depth depends on how large an attacker you fear.

Attacker's share of hash power (q)	Blocks behind (z)	Probability attacker ever catches up
10%	1	20.5%
10%	3	1.3%
10%	6	0.024%
30%	5	17.7%
30%	10	4.2%
30%	20	0.25%

Source: Nakamoto, Bitcoin white paper, section 11 (2008).

How fast is it?

Because blocks are limited in size and arrive about every 10 minutes, the base layer processes only a handful of transactions per second — usually cited as single digits. That throughput is a deliberate trade-off: small blocks keep the ledger small enough that ordinary computers can run full nodes and verify everything themselves.

How mining works

Miners are the participants who assemble blocks and secure the order of transactions. The details of hardware, pools and economics are covered in our explainer on Bitcoin mining; here is the core mechanism.

The puzzle

A block header is a small piece of data — about 80 bytes, according to the white paper — containing the previous block's hash, a summary (Merkle root) of the block's transactions, a timestamp, the difficulty target, and a field called the nonce. Mining means repeatedly changing the nonce (and other adjustable fields), running the header through the SHA-256 hash function twice, and checking whether the result is a number below the current target.

There is no shortcut. A good hash function's output is unpredictable, so the only strategy is to try enormous numbers of guesses. Finding a valid hash is hard; checking one takes a single computation. That asymmetry is the whole trick: work is expensive to produce and cheap for everyone to verify.

The reward

The winning miner includes a special first transaction, the coinbase, paying itself the block subsidy plus all fees in the block. The subsidy has been 3.125 BTC since the fourth halving at block 840,000 on 20 April 2024 (Blockchain.com block explorer).

Difficulty adjustment

If more machines join, blocks would come faster. To prevent that, every 2,016 blocks (about two weeks) each node recalculates the target so that blocks keep arriving roughly every 10 minutes on average. This is why adding computing power makes the network more expensive to attack but does not speed up issuance.

Why it uses so much energy

Today almost all mining is done with ASICs — chips designed only to compute SHA-256. Their electricity cost is what makes an attack expensive: to rewrite history you would need to out-compute everyone else, continuously. The energy use is a feature of the security model, not a by-product that a software update could remove.

The supply cap and the halving schedule

Bitcoin's supply rule is fixed in code: the block subsidy started at 50 BTC and halves every 210,000 blocks (roughly four years). Because the subsidy keeps halving, the total converges on just under 21 million coins. The last fractions of a bitcoin are expected to be issued around the year 2140.

Simple arithmetic shows how front-loaded issuance is:

Era	Approx. years	Subsidy per block	BTC issued in era	Cumulative supply at end of era
1	2009–2012	50	10,500,000	10,500,000
2	2012–2016	25	5,250,000	15,750,000
3	2016–2020	12.5	2,625,000	18,375,000
4	2020–2024	6.25	1,312,500	19,687,500
5	2024–~2028	3.125	656,250	20,343,750

Calculated from the protocol's 210,000-block halving interval; the fourth halving occurred at block 840,000 on 20 April 2024.

By the 2024 halving, roughly 94% of all bitcoin that will ever exist had already been issued. A meaningful amount is also permanently inaccessible because owners lost their private keys, so the usable supply is lower than the issued supply — how much lower is unknowable, because a dormant coin and a lost coin look identical on the ledger.

After the cap

Once issuance ends, miners will be paid only by transaction fees. Whether fees alone will be large enough to fund strong security is one of the most debated open questions about Bitcoin's long-term design. Each halving cuts the subsidy, so this question becomes more pressing over time, not just in 2140.

What the cap does and doesn't mean

A fixed supply means monetary policy cannot respond to a recession or a crisis, which is the opposite of how central banks operate (see how central banks control the money supply). Supporters see that as protection from debasement. Critics argue a currency whose supply can't flex tends to have an unstable value. A fixed supply does not guarantee any particular price: price depends on demand, which can fall as easily as rise.

A short history of Bitcoin, in milestones

Date	Event
31 Oct 2008	Satoshi Nakamoto circulates the Bitcoin white paper
3 Jan 2009	Genesis block mined; network starts
Nov 2012	First halving: subsidy falls from 50 to 25 BTC
Feb 2014	Mt. Gox, then the largest exchange, suspends withdrawals and files for bankruptcy
Jul 2016	Second halving (25 → 12.5 BTC)
Aug 2017	SegWit soft fork activates; Bitcoin Cash splits off in a hard fork
May 2020	Third halving (12.5 → 6.25 BTC)
Sep 2021	El Salvador makes bitcoin legal tender
Nov 2021	Taproot upgrade activates (Schnorr signatures)
Nov 2022	FTX exchange collapses; the SEC charges its founder in December 2022
Jan 2024	US SEC approves spot bitcoin exchange-traded products
20 Apr 2024	Fourth halving at block 840,000 (6.25 → 3.125 BTC)

The halving and white-paper dates follow from the protocol and primary documents above; exchange and regulatory events are matters of public record. The FTX collapse is a reminder that most losses suffered by holders have come from intermediaries, not from the protocol itself: the SEC's December 2022 complaint alleged that customer funds had been diverted to a related trading firm.

Wallets and keys: where your bitcoin actually is

A common misunderstanding is that a wallet "contains" bitcoin. It doesn't. The coins exist only as entries on the blockchain. A wallet stores keys — the ability to sign for those entries.

• Custodial wallets (most exchange accounts): the company holds the keys, and you hold an IOU. Convenient, but if the company fails or freezes withdrawals, your claim is only as good as the company.
• Software (hot) wallets: keys on your phone or computer. You're in control, but malware and phishing are real risks.
• Hardware (cold) wallets: keys held on a dedicated device that signs transactions without exposing the key to an internet-connected computer.
• Seed phrases: most wallets let you back up keys as 12 or 24 words (the BIP-39 standard). Anyone with the phrase controls the funds; lose every copy and the funds are gone.

There is no password reset and no customer service desk in the protocol. That is the flip side of not needing to trust a bank.

Upgrades, forks and Layer 2

Bitcoin's rules change slowly and only with broad agreement among the people running nodes. Two kinds of change exist:

• Soft forks tighten the rules, so old nodes still accept new blocks. SegWit (2017) and Taproot (2021) were soft forks.
• Hard forks loosen or change rules incompatibly. Nodes that don't upgrade split off. Bitcoin Cash (2017) was created this way by those who wanted bigger blocks.

Because the base layer is slow, developers have built systems on top. The best known is the Lightning Network, where two parties lock funds in a shared on-chain contract and then exchange many off-chain payments almost instantly, settling the net result on the blockchain later. Lightning makes small, fast payments possible, but it requires channels with available liquidity and adds operational complexity.

The energy debate

Bitcoin's electricity use is real and large.

How much

The Cambridge Centre for Alternative Finance's April 2025 industry study estimated Bitcoin mining's annual electricity use at about 138 TWh, roughly 0.5% of global electricity consumption, with associated emissions of about 39.8 million tonnes of CO₂-equivalent (Cambridge Judge Business School, 28 April 2025). The figure is based on survey data covering about 48% of global mining activity, so it carries uncertainty, and model-based estimates vary with hardware assumptions and price.

Where it comes from

The same study found that 52.4% of the energy used by surveyed miners came from sustainable sources (renewables 42.6%, nuclear 9.8%), up from 37.6% in its 2022 estimate. Natural gas, at 38.2%, had overtaken coal (8.9%) as the largest single source. Surveyed activity was heavily concentrated in the United States, at 75.4% of reported mining.

Energy source (surveyed miners, 2025)	Share
Natural gas	38.2%
Renewables (hydro, wind, solar etc.)	42.6%
Nuclear	9.8%
Coal	8.9%

Source: Cambridge Centre for Alternative Finance, Digital Mining Industry Report, April 2025.

Why it's built this way

Proof of work requires energy by design: security comes from making attacks expensive in a physical resource that can't be faked. Miners are mobile and price-sensitive, so they gravitate to cheap power, including surplus hydro, curtailed renewables and gas that would otherwise be flared. Critics respond that much of that power could serve other uses and that emissions remain significant.

The alternative

Ethereum switched from proof of work to proof of stake in September 2022, cutting its energy use dramatically; our Ethereum explainer covers the differences. Bitcoin's developers and users have shown no sign of following, arguing that proof of work's security properties are better understood.

The debate — is the security and neutrality worth the energy? — is ultimately about values as much as engineering.

What Bitcoin is used for

Store of value ("digital gold")

Many holders treat bitcoin like gold: scarce, not issued by any government, transferable anywhere at any hour. Whether it behaves like gold in practice is contested; its price has often moved with risky assets such as technology stocks rather than against them.

Cross-border transfers

Bitcoin can move value across borders without banks, which matters in places with capital controls or weak banking. In practice, many people now use dollar-pegged stablecoins for this instead, because they avoid bitcoin's price swings.

Hedging against unstable local currencies

In countries with very high inflation, some residents use crypto assets to escape a collapsing local currency. Usage varies widely; see our ranking of countries with the most cryptocurrency users. For background on why that problem arises, see how inflation works.

Censorship resistance

No single party can block a valid transaction from eventually being mined, though individual miners can choose not to include it. That property is valuable for people facing hostile governments — and is also why bitcoin has been used for ransomware payments and darknet markets.

Legal tender experiment

El Salvador made bitcoin legal tender in September 2021, the first country to do so. Adoption for everyday payments remained limited, and the government later scaled the policy back under an IMF arrangement. It is the clearest real-world test so far of bitcoin as national money, and the results were mixed.

What Bitcoin isn't great at

Fast, cheap retail payments

The base layer's limited throughput and variable fees make it poor for buying coffee. Fees spike when the mempool is congested. Lightning helps, but adds complexity.

Privacy

All transactions are public. Bitcoin is pseudonymous, not anonymous: if an address is linked to your identity — for example through an exchange that verifies your ID — your history can be traced. Blockchain analytics firms do exactly this for law enforcement and compliance teams; see how AI and blockchain analytics fight financial crime.

Stable value

Bitcoin's price has repeatedly risen and fallen by more than half over months. That makes it a poor unit of account: almost nobody prices goods in bitcoin.

Reversibility and consumer protection

A mistaken or fraudulent payment cannot be charged back. There is no deposit insurance on self-custodied coins and generally none on exchange balances.

The risks, stated plainly

This is not a recommendation for or against owning bitcoin. These are the categories of risk that regulators, courts and researchers have documented:

1. Price volatility. Large drawdowns have occurred repeatedly. No mechanism stabilises the price.
2. Custody and intermediary failure. Exchanges and lenders have collapsed, taking customer funds with them — Mt. Gox in 2014 and FTX in 2022 are the best-known cases.
3. Key loss and theft. Lost seed phrases mean permanently lost funds; phishing and malware target wallets directly.
4. Scams. Fake investment platforms, "pig-butchering" romance scams and impersonation schemes are common. Promises of guaranteed returns are a warning sign.
5. Regulatory and tax change. Rules differ by country and change often. In the United States, the IRS states that "digital assets are considered property, not currency," so selling or spending bitcoin can be a taxable event (IRS: Digital assets).
6. Technology risk. The protocol has been robust, but bugs, wallet software flaws and long-term threats exist. Sufficiently powerful quantum computers could in principle break the elliptic-curve signatures Bitcoin uses; no such machine exists today, and migrating to quantum-resistant signatures is an active area of discussion.

Anyone weighing a decision should get advice from a licensed professional who knows their circumstances.

Common misconceptions

"Bitcoin is anonymous"

Pseudonymous. Every transaction is public and permanent; once an address is tied to your identity, past and future activity linked to it becomes traceable.

"Bitcoin is mainly used for crime"

Illicit use is real but is estimated by blockchain-analytics firms to be a small share of total on-chain volume; most activity is trading, saving and transfers. The public ledger also makes bitcoin easier to trace than cash, which has helped investigators recover funds in several cases.

"Bitcoin is a Ponzi scheme"

It is highly speculative, but it isn't a Ponzi scheme in the legal sense: there is no central operator promising returns paid from new investors' money. Many crypto platforms that promised fixed yields, however, did turn out to be fraudulent.

"The blockchain makes Bitcoin unhackable"

The ledger has proven hard to attack. Most losses come from what surrounds it: exchanges, wallets, smart-contract bridges on other networks, and users tricked into handing over keys.

"Bitcoin will replace national currencies"

Unlikely in the foreseeable future. Volatility, throughput, irreversibility and the absence of a lender of last resort make it impractical as the main money for most economies.

"Bitcoin is a proven hedge against inflation"

That is a theoretical argument. During the 2021–2022 inflation surge, bitcoin's price fell sharply as interest rates rose, so the empirical record is weak.

What about other cryptocurrencies?

Ethereum

A programmable platform for smart contracts and applications. More versatile, more complex, and secured by proof of stake since 2022.

Stablecoins

Tokens designed to hold a fixed value, usually one US dollar, backed by reserves of cash and short-term government debt. They are now used heavily for trading and cross-border payments. Their safety depends entirely on the quality and transparency of those reserves.

Thousands of others

Most crypto tokens fail or fade into irrelevance. Memecoins have no underlying function at all and are purely speculative. The "crypto" space is much larger than Bitcoin, and the risk profile of most of it is higher.

Frequently asked questions

Q: Is Bitcoin legal? A: In most countries owning bitcoin is legal, though rules vary widely and China bans crypto trading and mining. Tax obligations apply almost everywhere; in the United States the IRS treats digital assets as property.

Q: Who controls Bitcoin? A: No single party. Developers propose changes, but upgrades take effect only if the people running full nodes adopt them, and miners only order transactions under rules every node checks.

Q: What happens if I lose my private key? A: The bitcoin it controls is permanently inaccessible. There is no recovery mechanism in the protocol, which is why backed-up seed phrases matter.

Q: How many bitcoins will ever exist? A: Just under 21 million. About 19.69 million had been issued by the April 2024 halving, and issuance is scheduled to end around 2140.

Q: Why does Bitcoin use so much electricity? A: Proof-of-work mining deliberately makes adding blocks costly so that rewriting history is too expensive. A 2025 Cambridge study estimated about 138 TWh a year, roughly 0.5% of global electricity.

Q: Can I use Bitcoin like cash? A: Some merchants accept it, and the Lightning Network enables fast small payments, but acceptance is limited and price volatility discourages spending.

Q: Is Bitcoin safe? A: The core protocol has run since 2009 without its main ledger rules being broken. Most real-world losses come from exchange failures, scams, theft and lost keys rather than from the network itself.

The bottom line

Bitcoin is a working decentralised digital currency, secured by cryptography and economic incentives, governed by code that its users choose to run rather than by an authority. Its central innovation — getting strangers to agree on one history of payments by making that history expensive to forge — has survived more than 15 years of attack. Its costs are equally real: high energy use, limited throughput, a volatile price and a security model that leaves users responsible for their own keys. The economic claims made for it — digital gold, inflation hedge, future reserve currency — remain contested. Understanding the mechanism is the best protection against both the hype and the scams that surround it.

Sources

• Nakamoto, S. (2008). Bitcoin: A Peer-to-Peer Electronic Cash System.
• Blockchain.com. Block 840,000 (fourth halving), 20 April 2024.
• Cambridge Judge Business School (2025). Cambridge study: sustainable energy rising in Bitcoin mining.
• US Internal Revenue Service. Digital assets.
• US Securities and Exchange Commission (2022). SEC charges Samuel Bankman-Fried.

Related Reading

• What Is Ethereum — And How Is It Different From Bitcoin?
• What Is the Stock Market — and How Does It Actually Work?
• What Are Stocks — and How Does the Stock Market Actually Work?
• What Is a Recession — and How Bad Can They Actually Get?
• What Are Deepfakes — and How Do They Actually Work?