Taproot Privacy Improvements — What Changed and What Didn't

Taproot Privacy — Honest Assessment

When Taproot was being developed, privacy was a major selling point. Now that it's been live for over three years, let me give you an honest assessment of what actually improved.

What Improved

Script Privacy (Key Path Spend)

The biggest win: when all parties cooperate and use the key path spend, any spending condition looks identical on-chain. A 3-of-5 multisig, a Lightning channel close, a DLC settlement, a time-locked contract — they all look like a simple single-signature payment. This is genuine privacy improvement.

MAST Script Path Privacy

When the script path is used, only the executed branch is revealed. If your contract has 10 possible spending conditions, and you use condition #3, the other 9 conditions remain hidden. With the old P2SH approach, the entire script was revealed.

Lightning Channel Privacy

Taproot channels (still being rolled out) make Lightning channel opens and cooperative closes indistinguishable from regular payments. This is significant because previously, anyone could identify Lightning channels on-chain by their distinct 2-of-2 multisig pattern.

What Didn't Change

Address Reuse Still Detectable

Taproot doesn't help if you reuse addresses. Each bc1p address should be used once.

Amount Privacy — Still None

Transaction amounts are still fully visible on-chain. Taproot does nothing to hide how much Bitcoin is being transferred.

Graph Analysis Still Works

Chain analysis firms can still trace the flow of funds through the UTXO graph. Taproot makes it harder to determine the spending conditions used, but the flow of satoshis is still visible.

Script Path Reveals Information

If you do use the script path (because cooperation failed), you reveal that specific script branch. This is better than revealing everything, but it still leaks information about your setup.

The Taproot Fingerprint Problem

Ironically, Taproot adoption being incomplete creates a new privacy issue. During the transition period, Taproot transactions (bc1p addresses) stand out because they're a minority. Until most transactions use Taproot, using it can actually reduce your anonymity set.

Combining Taproot with Other Privacy Tools

For maximum privacy, combine Taproot with:

• CoinJoin: Breaks the transaction graph (works with or without Taproot)
• Lightning: Payments are off-chain and onion-routed
• Tor/VPN: Prevents IP-to-transaction correlation
• Payjoin: Makes transactions look like regular payments

Taproot is a meaningful privacy improvement, but it's not a magic bullet. Real privacy requires combining multiple techniques. Don't assume using a bc1p address makes you invisible.

Read our full privacy guide at the learning center.