ProductsAppsFor Business

Coins

Support

Blog

Docs

Highlander

Understanding Hierarchical Deterministic Wallets

Understanding Hierarchical Deterministic Wallets

Understanding Hierarchical Deterministic Wallets

How KeepKey Manages your crypto

KeepKey is an “HD” wallet — that’s Hierarchical Deterministic, not High Definition

Almost all other wallets these days are too, and there’s a standard called BIP-32 so they’re all (mostly, I’ll get back to that in a sec) interoperable.

HD wallets have one master private key, and can derive other keys from it according to something called a “path”.

The master key is what you get from your recovery sentence, and you never use it for anything other than deriving child keys.

There’s a particular path for each address you get, generally one per type of coin but sometimes more.

For example, your default ETH address (“account #0”) is at

m/44'/60'/0'/0/0

When you make a new account, you’re just telling the device to use a different path, like

m/44'/60'/1'/0/0
.

That’s account #1 for ETH — the

60'
part means Ethereum.

Unfortunately, different wallets are, for historical reasons, sometimes confused about which paths to use for which accounts. It’s clearly specified in the standard, but the standard was written for Bitcoin and some wallet makers changed things for other coins.

Basically everyone agrees this was a horrible mistake and regrets it, but they can’t fix it because it would mean their older users would wake up one day and not be able to see their funds.

So, for example, Metamask uses

m/44'/60'/0'/n
where
n
is the account number, which almost everyone agrees is wrong — but Trezor uses it too, because they want to be compatible with Metamask.