Pseudonymity

An address is a pen name attached to a permanently public diary. Section 10 of the 2008 whitepaper is blunt about the tradeoff, describing privacy as keeping public keys anonymous and recommending a new key pair for every transaction, rather than concealing the transactions themselves. Once a single address is tied to you, everything that address ever touched is tied to you too.

How it works

A bitcoin transaction has no field for a name, a country, or an account holder.

What it does record is exact and permanent: which earlier outputs are being spent, which new outputs are created, how much each one holds, the locking script for each, and the block that included it. Identity enters nowhere. The closest thing to an identifier is an address, which is a short encoding of a public key hash or, for Taproot, of an output key. It works as a pseudonym for as long as nobody knows whose it is.

The catch is that a pseudonym in a permanent ledger accumulates. Every payment made to it or from it stays visible forever, indexed by explorers, and searchable in a second. A name that leaks in 2030 unlocks activity from 2018, because the record was never going anywhere.

Wallet software is designed around that risk, which is why hierarchical deterministic wallets exist. BIP32, published in 2012, lets one seed derive an effectively unlimited tree of key pairs, so a wallet can hand out a fresh address for every single payment while still restoring from twelve words. Using one address repeatedly throws that protection away, and it is still the most common privacy mistake beginners make.

Where you see it

Pseudonymity is easiest to understand at the places where it fails.

Paste any address into a block explorer and you get its complete balance and payment history, going back to its first appearance. Anyone who has ever paid you, or been paid by you, can do this with the address they hold, forever, without asking.

Deposit addresses at an exchange are the strongest link of all, because the venue already holds your identity documents. The address they gave you is theirs, and the address you withdraw to is written into their records next to your name.

Public donation addresses and QR codes in a profile do the same damage voluntarily, joining a name to a cluster in one step. So does reusing the address a friend already knows for an unrelated payment.

The practical response is bookkeeping rather than cryptography. Take a new receive address every time. Label incoming coins with where they came from, since your wallet can track that and your memory cannot. Keep separate wallets for separate purposes so that a leak in one does not expose the other, and use coin control so software never quietly merges the two.

Pseudonymous is not anonymous

Anonymity means no identifier at all; pseudonymity means a durable identifier that happens not to carry your name yet.

The clearest demonstration is bitcoin's own author. Satoshi Nakamoto has stayed a pen name since the whitepaper appeared on October 31, 2008, but the pen name is not private in the slightest. Researchers have picked out a distinctive pattern in the earliest blocks, attributed to a single miner and commonly estimated at over a million coins, and those addresses are watched continuously. A spend from any of them would be public knowledge within minutes.

That is the whole shape of the property. Pseudonymity holds for exactly as long as the link between the pseudonym and the person stays unmade, and because the ledger is permanent, that link can be made at any point in the future using information that does not exist yet.