START HERE · NO PRIOR KNOWLEDGE NEEDED

How Bitcoin works

Follow one payment from Alice's wallet to Bob. The ten-minute guided tour gives you the whole picture. Optional mastery practice then checks whether you can use and explain it.

Bitcoin in three plain sentences

Bitcoin is a public payment system with no company keeping the master account. Wallets prepare and authorize payments. Independent computers called full nodes check the rules, while miners use costly proof of work to propose the order of valid payments.

Bitcoin with a capital B means the network and protocol. bitcoin with a lowercase b means the asset or units sent through it.

Five-part visual map of one Bitcoin payment
1

WalletCreates and authorizes

2

Full nodesCheck and relay

3

MinerProposes a block

4

Full nodesValidate again

5

ConfirmationsReduce reversal risk

THE WHOLE SYSTEM

Five jobs, kept deliberately separate

This separation is the mental model to keep. A wallet authorizes. Nodes enforce. Miners propose order. Proof of work makes history costly to replace. Confirmations reduce risk.

Problem and response diagram
1

Digital data can be copied

Without a central account keeper, two payments might try to reuse the same earlier value.

2

Transactions name prior outputs

Nodes can detect a conflict because both payments refer to the same uniquely identified output.

3

Valid proof-of-work history orders them

Nodes accept the first valid spend in the selected valid chain and reject later reuse of that output.

Wallet

Manages keys, chooses existing outputs, creates new outputs, and signs a transaction.

Does not decide validity for everyone.

Full node

Checks transactions and blocks against every applicable rule, then updates its own state.

Does not trust a miner's verdict.

Miner

Selects valid transactions, builds a candidate block, and searches for proof of work.

Cannot make invalid data valid.

Block

Orders a batch of transactions and links it to earlier accepted history.

Is only accepted after node validation.

Confirmation

Counts the block containing a payment and valid blocks built after it.

Reduces risk rather than promising magic finality.
ONE CONTINUOUS STORY

Alice pays Bob 40,000 sats

A sat is the smallest bitcoin unit. Bob first gives Alice a payment address, which is a shareable instruction for creating his new output, not a private key or protocol account. Alice begins with one spendable output worth 100,000 sats. Watch the same payment state change at every stage.

Visual value-conservation equation
Existing output100,000 satsAlice can authorize it
=
Bob's new output40,000 satsBob can later spend it
+
Alice's change59,000 satsEntirely new output
+
Fee1,000 satsInputs minus outputs
STAGE 1 OF 8Wallet

Alice's wallet prepares the payment

The wallet chooses Alice's existing output, creates 40,000 sats for Bob, 59,000 sats of change for Alice, and leaves 1,000 sats as the transaction fee. It creates a signature authorizing this input for this transaction. Later lessons explain the alternative parts a signature can commit to. Bitcoin has no protocol account balance to edit.

State now
One unspent output worth 100,000 sats
Rule that matters
Only a valid signature for Alice's spending condition can authorize the input.
BOUNDARIES

What Bitcoin does and does not guarantee

A good mental model includes the limits. The protocol enforces precise rules, but it cannot remove every kind of risk.

What the rules provide

  • Independent verification of transactions and blocks
  • Authorization through spending conditions and signatures
  • A verifiable limit on bitcoin issuance
  • A proof-of-work method for ordering valid history

What the rules do not promise

  • A stable market price
  • Instant or absolute finality after one block
  • Automatic privacy for every transaction
  • Recovery from a lost key or mistaken payment
  • Guaranteed transaction inclusion at a chosen time

Where new bitcoin comes from

Every valid block must begin with exactly one special coinbase transaction. It may create only the subsidy allowed at that block height and collect transaction fees. The subsidy halves on a fixed schedule, so fewer than 21 million bitcoin can ever be created under the current consensus rules.

Every full node checks the amount. A miner claiming too much makes the block invalid.
Guided tour complete

You now have the whole payment story. Continue to foundations now, or choose the optional mastery practice, which takes about 20 minutes.

Start optional practice
OPTIONAL MASTERY PRACTICE · ABOUT 20 MINUTES

Rebuild the payment in the right order

Visit all eight explained stages above to open this activity.

CHANGE ONE CONDITION

Try to break the payment

Predict where the flow stops. A wrong answer is saved as a weak spot so the idea returns in later review.

1

Alice's signature is invalid

What happens first?

What happens first?
2

Alice's input was already spent

Can a second valid signature spend it again?

Can a second valid signature spend it again?
3

A miner includes an invalid transaction

Does proof of work make the block acceptable?

Does proof of work make the block acceptable?
4

Two valid blocks arrive in different orders

What can honest nodes do?

What can honest nodes do?
RECOGNISE, THEN EXPLAIN

Check your understanding

Choose an answer, check it, and read the reason. The final explanation only opens after these shorter checks.

1Who decides whether a received transaction follows Bitcoin's rules?
2What changes when Alice pays Bob?
3What is the miner's core role in this payment story?
4What does a confirmation mean?
NO-HINT RELATIONSHIP TEACH-BACK

Now explain the payment in your own words

Answer all four recognition questions correctly to open the explanation.

PLAIN-LANGUAGE GLOSSARY

Key terms from this overview

Open any technical term in this list for a compact definition. The guided tour also explains these ideas in context before optional practice.

Wallet

Software or hardware that manages keys and constructs transactions. It does not store bitcoin as files.

Private key

A secret number used to create an authorization signature. Never share it.

Address

A shareable payment instruction that helps a wallet construct an output. It is not a protocol account.

Output or UTXO

A uniquely identified amount with a spending condition. UTXO means unspent transaction output.

Transaction

A candidate state change that consumes existing outputs and creates new outputs.

Full node

A computer that independently verifies transactions, blocks, and chain state.

Mempool

One node's temporary set of valid unconfirmed transactions.

Miner

A participant that chooses transactions for a candidate block and searches for proof of work.

Block

An ordered batch of transactions linked to a prior block, with a header that satisfies proof of work.

Blockchain

The ordered chain of validated blocks. Each block commits to the one before it, so changing older history requires replacing its work and the work built after it.

Proof of work

A costly search that makes proposing and replacing block history expensive.

Confirmation

A block containing the payment, plus any valid blocks built after it.

Relay policy

A node's local rules for accepting and forwarding unconfirmed transactions. Policy can differ between nodes without changing Bitcoin's shared block-validity rules.

Difficulty threshold

The numeric boundary a block-header hash must fall below. A lower threshold makes a qualifying result harder to find.

Hash rate

How many proof-of-work hash attempts a miner or the network makes per second.

Consensus rules

The shared validity rules that full nodes apply to transactions, blocks, and chain state.

Coinbase transaction

The first transaction in a block. It collects the block's transaction fees and may create the allowed new bitcoin subsidy.

Block subsidy

The maximum new bitcoin a valid block may create at its height. It halves on a fixed schedule.

Block height

A block's position counted from Bitcoin's first block, which has height zero.

Reorganization

A change in recent accepted history when nodes switch to a different valid branch with more accumulated proof of work.

Threat model

The specific attacks, failures, and adversary capabilities someone chooses to protect against.

Peer

Another computer on the Bitcoin network that a node exchanges transactions and blocks with.

Block header

The compact block summary miners repeatedly hash. It commits to the previous block and the block's transaction set.

Issuance

The rule-controlled creation of new bitcoin through a valid block's coinbase transaction.

YOUR OVERVIEW

Turn the big picture into a foundation

Completion requires the full flow, sequence, four failure cases, four recognition checks, and a no-hint explanation that passes semantic tutor review. Your exact progress is saved in the Guild database.

Inspect all eight payment stagesRebuild the stage orderDiagnose four failure casesPass four knowledge checksPass semantic explanation review