Generator Point

Generator point, often called the base point and written G, is a single fixed point on the secp256k1 curve that every participant in Bitcoin agrees on. It is one of the curve's published domain parameters — identical for every wallet, every node, and every signature ever made on the network. Your public key is nothing more than G multiplied by your private key scalar. That one sentence is the whole of Bitcoin key generation; everything else is encoding.

Why a single base point works

Because secp256k1 has a cofactor of 1, the generator point has prime order n, and repeatedly adding G to itself cycles through all n points of the group before returning to the start. In other words, G generates the entire usable key space — which is exactly what its name refers to. Every valid Bitcoin private key corresponds to a distinct multiple of G, and that multiple is the public key. There is nothing special about the specific point chosen; any generator of the group would work mathematically. What matters is that everyone uses the same one, because a signature verifies only against the parameters it was created under.

From generator to address

Key creation is a single operation: pick a secret scalar k uniformly at random between 1 and n − 1, then compute Q = kG using elliptic curve point multiplication. The result Q is the public key, which is then hashed and encoded into an address. The security of the whole arrangement rests on a one-way street: computing kG from k is fast (a few hundred point operations using double-and-add), but recovering k from Q and the publicly known G is exactly the discrete logarithm problem, for which no efficient classical algorithm is known at this curve size. Publishing Q therefore reveals nothing usable about k.

A constant worth recognizing

The compressed encoding of secp256k1's generator begins with the bytes 0279BE667E… — a constant worth recognizing on sight, because it is the literal origin of every Bitcoin key in existence. It appears in every serious Bitcoin library, hardcoded next to the field prime and the group order. It is a fixed, public point in the curve's finite field, not a secret: knowing G helps an attacker no more than knowing the rules of chess helps them win a game already in progress.

Why this matters to a sovereign holder

Understanding the generator point demystifies what a hardware wallet actually does. When a device derives your keys from a seed, it is computing scalars and multiplying each by G — deterministic arithmetic anyone can reproduce, which is why the same seed phrase restores the same addresses in any compliant wallet. It also clarifies why key generation needs no network, no server, and no permission: the entire ceremony is one random number and one multiplication against a public constant. Bitcoin's openness starts here — the parameters are published, the math is verifiable, and nobody issues you an identity. You compute your own, offline, from G.

Finally, the generator point explains why "brain wallets" and weak randomness fail so badly: since everyone multiplies against the same G, an attacker can precompute kG for billions of guessable scalars and sweep any funds that land on them. The strength of a key is never in the multiplication — it is entirely in how unpredictably k was chosen. Guard the scalar; the point takes care of itself.