Definition
The Taproot tweak is the cryptographic operation at the heart of BIP341 that fuses a single public-key spending condition with an entire tree of alternative scripts into one on-chain key. Starting from an internal key P, the tweak scalar t is derived as t = hashTapTweak(P || merkle_root), where the merkle root summarises every script leaf. The published output key is then Q = P + t·G, with G the secp256k1 generator point.
Why the tweak matters
Because t is added on the elliptic curve, the holder of the internal private key p can still sign for Q using the tweaked private key p + t. This is what lets a cooperative spend look like an ordinary single-key payment: observers see only Q and cannot tell whether any scripts are committed, how many exist, or what they contain. The tweak is an application of the pay-to-contract construction, where the committed contract is the script tree.
Key-path versus script-path
If a tree contains no useful scripts, an unspendable NUMS ("nothing up my sleeve") internal key is often used so the key path is provably disabled. When a script is needed, the spender reveals the leaf plus a merkle path proving it was committed under the same tweak. The tagged-hash domain separation (hashTapTweak) prevents cross-protocol hash collisions, a recurring concern in Bitcoin's privacy and security model.
For the keys this operation combines, see Taproot Internal Key and Taproot Output Key, and the broader commitment scheme at Pay-to-Contract.
In Simple Terms
The Taproot tweak is the cryptographic operation at the heart of BIP341 that fuses a single public-key spending condition with an entire tree of alternative…