Course outline · 13 lessons
Bitcoin Fundamentals

What Is Bitcoin and What Problem Does It Solve?

Three matching small ledger books lie open to blank cream pages on a walnut table.

Bitcoin is money with no issuer and no bank in the middle. It is a public set of rules, checked independently by tens of thousands of computers, that lets anyone hold value and send it to anyone else over the internet. It solves the central problem of digital money: stopping the same money being spent twice without trusting one company to keep the books. That matters to you because it moves responsibility. A bank keeps your records, can block your payments and can fix your mistakes. With bitcoin in your own wallet, nobody can freeze it, nobody can create more bitcoin than the rules allow, and nobody can undo a mistake for you.

No prior knowledge is needed: every term is explained when it first appears. One convention first: Bitcoin with a capital B usually means the network and its rules, and bitcoin in lowercase (or BTC) means the units of money. One bitcoin divides into 100 million units called satoshis, or sats.

Money Today Runs on Trusted Record-Keepers

Most of the money you use is a number in your bank’s database. When you pay by card or transfer, you ask your bank to lower your number and raise someone else’s, usually through a card network or a second bank. Each of them keeps a ledger, a record of who owns what, and the system works because you trust them to keep it correctly.

Behind the banks stands an issuer, the authority that decides how much of a currency exists. For currencies such as the dollar, the euro or the pound, a central bank sets monetary policy. Most new money is created by commercial banks when they lend, as the Bank of England explains in “Money creation in the modern economy” (2014). Institutions decide how much money there is, and they can change their policy.

These record-keepers do useful work: they reverse card fraud and reset forgotten passwords, and in many countries a government scheme guarantees bank deposits up to a limit. The same position lets them refuse a payment or freeze an account, and you take their records on trust. Satoshi Nakamoto, Bitcoin’s pseudonymous creator, wrote in February 2009: “The root problem with conventional currency is all the trust that’s required to make it work.”

The Double-Spend Problem

Why not make digital cash that passes from hand to hand like a banknote? Because anything digital can be copied perfectly. A digital coin is data, and data can be sent twice.

Picture Alice, who holds one digital coin. She sends it to Bob for a bicycle, and a minute later sends the same coin to Carol for a laptop. Both receive a coin that looks genuine. One of them has been cheated, and neither can tell which without knowing what Alice did elsewhere. Spending the same money twice is called a double spend.

Before Bitcoin, the answer that worked in practice was a central record-keeper that saw every payment and refused the second one. The Bitcoin whitepaper, which Satoshi announced on October 31, 2008, calls that keeper a “mint” and names the cost: “the fate of the entire money system depends on the company running the mint, with every transaction having to go through them, just like a bank.” It also names what any alternative needs: “The only way to confirm the absence of a transaction is to be aware of all transactions.” Bob can only be sure Alice hasn’t already paid Carol if everyone shares the same list of payments and agrees on their order.

Two panels. With nobody keeping a list: Alice holds one digital coin and sends it to Bob for a bicycle and to Carol for a laptop. A digital coin is data, so both receive a copy that looks genuine, and neither can tell which payment counts. Before Bitcoin, one keeper solved this: every payment went through it, and its list accepted Alice's payment to Bob and refused her payment to Carol because the coin was already spent. The same power lets the keeper refuse any payment. Without a keeper, everyone needs the same list of payments, in the same order.
Digital coins can be copied, so someone has to keep the list. Before Bitcoin, one keeper saw every payment and refused the second spend. To work without a keeper, everyone has to share the same list and agree on its order.

How Bitcoin Solves It Without a Bank

Bitcoin combines three pieces. None was new on its own; putting them together was.

Three cards. 1, public ledger: has this coin already been spent? Every full node checks each new payment against the ledger it has verified itself. 2, signatures: did the key holder sign it? Anyone can check a signature, but only the private key can make one. 3, proof of work: which payment came first? The one a miner put in a block, and costly work makes that hard to undo. Together they stop a double spend with no one in charge of the ledger.
Each piece answers one question about a payment. A payment counts only if its coin is unspent, the key holder signed it, and it sits in a block on the chain. Every full node checks all three for itself.

1. One Public Ledger, Kept by Everyone

Every payment is announced to a network of computers called nodes. A full node downloads the whole ledger, every transaction since January 3, 2009, checks all of it for itself, and then checks each new payment against the same rules. Coins can be spent only once, so a node drops any payment that spends coins its ledger already shows as spent. Anyone can run a full node on an ordinary computer, and tens of thousands of people and businesses do (November 2026). What Is Blockchain Technology? shows how the ledger is built.

2. Signatures Decide Who Can Spend

Each coin on the ledger carries a lock that only one secret number, a private key, can open. Your wallet (the app or device that holds your keys) calculates a public key from the private key, and from that a shorter address, which you give people so they can pay you. To spend, the wallet uses the private key to make a digital signature: data that anyone can check against the public key, but that only the key’s holder could have produced. There is no account name and no password reset; whoever controls the private key controls the coins. Keys, Addresses and Signatures in Plain Language explains how.

3. Proof of Work Puts Payments in One Order

If Alice sends both payments at once, some nodes hear about Bob’s first and others about Carol’s. Bitcoin settles the order with miners: computers that gather waiting payments into a batch called a block and compete to find a proof of work. A miner tries number after number until the block’s hash, a short fingerprint of its contents, falls below a target set by the rules. Finding one takes an enormous number of guesses; checking one takes a single calculation. Every 2,016 blocks (about two weeks) the target is recalculated so that blocks keep arriving about every 10 minutes on average, however many miners join or leave.

Every node checks the winning block and adds it to the end of its copy of the ledger. Each block carries the fingerprint of the one before it, so the blocks form a chain: the blockchain. That fixes the order: whichever of Alice’s payments is inside counts, and nodes now reject the other as a double spend. The block that includes a payment gives it its first confirmation, and each block added on top gives it one more; a payment with no confirmations is not settled yet. To undo Bob’s payment, Alice would have to redo that block and every block after it, faster than all other miners combined. In November 2026 the whole network ran at around 1,000 EH/s (exahashes per second), about a billion trillion guesses a second. Six confirmations, about an hour, is a common standard for large amounts.

Alice sends two payments of the same coin at once. 1: nodes hear them in different orders; some get the payment to Bob first, others the payment to Carol. 2: a miner finds a block with proof of work, and it contains the payment to Bob; every node checks the block. 3: every node now agrees: the payment to Bob is in a block and counts, and the payment to Carol is rejected because that coin is already spent. Bob's payment gets its first confirmation in that block and one more with every block on top; six blocks take about an hour. To undo it, Alice must redo all of them faster than all other miners combined; the whole network ran at around 1,000 EH/s in November 2026.
A block settles which payment came first. Nodes can briefly disagree about the order. Once a miner’s block includes one payment, every node rejects the other, and each block on top makes that order harder to undo.

Miners choose which valid payments go into a block; they do not set the rules. A block that breaks them, say by paying its miner more than allowed, is rejected by every full node however much work went into it. Nodes don’t vote: each checks on its own, and proof of work only chooses between valid versions of the ledger. See How Does Proof of Work Secure the Bitcoin Network? and Who Enforces Bitcoin’s Rules, and How Do They Change?

Where New Bitcoins Come From

New coins appear only in the reward paid to the miner of each block, on a schedule fixed from the first day: 50 BTC per block at the start, halving every 210,000 blocks (about four years). That new-coin part, the subsidy, has been 3.125 BTC per block since April 2024; the next halving is expected around early-to-mid 2028. The rules cap the total at 21 million; about 20.1 million existed in November 2026. Every full node checks the reward in every block. How Many Bitcoins Are There? covers the supply.

Left, a staircase of the new bitcoin in each block: 50 BTC from 2009, 25 from 2012, 12.5 from 2016, 6.25 from 2020 and 3.125 since 2024, the current amount; the next halving, expected around 2028, cuts it to 1.5625. It halves every 210,000 blocks, about every four years. Right, all the bitcoin that will ever exist: the rules cap it at 21 million, and about 20.1 million existed in November 2026, so the bar is nearly full. Every full node checks the reward in every block and rejects a block that pays its miner more than the rules allow.
New bitcoins follow a fixed schedule that every full node checks. The new bitcoin in each block halves about every four years, and the rules cap the total at 21 million. About 20.1 million existed in November 2026.
QuestionWith a bankWith Bitcoin
Who keeps the record of who owns what?The bank, in a private databaseEvery full node, in a public ledger anyone can check
What stops the same money being spent twice?The bank refuses the second paymentNodes reject a second spend; proof of work fixes the order
Who decides how much money exists?Central bank policy, and commercial banks when they lendA fixed schedule that every full node checks
Who can block or reverse a payment?The bank, the card network or a courtOne miner can leave a payment out, but another can include it; once a few blocks are on top of it, it is practically permanent

What You Can Do With Bitcoin Today

  • Hold it yourself. Self-custody means keeping your own keys instead of leaving coins with an exchange (a company where you buy and sell bitcoin) or an app, so nobody can freeze them or spend them without you. What Is a Bitcoin Wallet? is the place to start.
  • Send it to anyone, anywhere, at any hour, with no bank account and nobody’s approval. The fee depends on how much block space your payment uses and how busy the network is, not on the amount. See Bitcoin Transactions Explained.
  • Buy a fraction. You never need a whole bitcoin; see What Is a Satoshi?
  • Check the money yourself. Your own full node verifies every payment you receive and the total supply. See Why Run a Bitcoin Node.
  • Make small, fast payments over Lightning, a second layer built on top of Bitcoin, where payments move through channels that two parties open with an ordinary Bitcoin transaction. Its trade-offs: opening and closing a channel each costs a normal transaction fee, and a channel can only send what it holds on your side. Someone must watch for cheating (your own Lightning software or a watchtower service), and some Lightning wallets are custodial, meaning a company holds your coins. See Lightning Network Explained.

What Bitcoin Cannot Do for You

  • Undo a mistake. A confirmed payment to the wrong address or to a scammer stays where it went. Lose your keys and your backup, and the coins are gone. Estimates of bitcoins lost this way range from 3 to 4 million; nobody knows exactly.
  • Keep you anonymous. Every transaction is public. Addresses carry no names, but once one is linked to you, anyone can follow its history. See Bitcoin Privacy and Chain Analysis.
  • Pay you interest. A bitcoin in your wallet earns nothing. Most “yield” offers mean handing your coins to someone else, and “guaranteed returns” are a classic scam (see Is Bitcoin Safe?).
  • Carry every payment on the blockchain itself. Blocks have a size limit. In early November 2026 they held about 4,000 transactions each on average, roughly 7 per second for the whole world. Small blocks keep the ledger small enough for ordinary people to check on their own computers.
  • Exempt you from tax. The US IRS treats bitcoin as property, and the UK’s HMRC counts paying for goods with it as a disposal. In both countries, buying something with bitcoin can create a capital gain or loss. Rules differ by country, so check the ones where you live.

The Trade-offs to Understand First

The Price Swings Hard

Bitcoin’s price has fallen by more than three-quarters four times, from peaks in 2011, 2013, 2017 and 2021. Each time it took between about a year and a half and three years to regain its old high. After its October 2025 peak it fell by roughly half by mid-2026, and in November 2026 it was still about 40% below that high. Past recoveries promise nothing. Hold only an amount you could watch drop by three-quarters, and stay down for years, without it changing your life. Buying small amounts on a schedule (dollar-cost averaging) spreads out the risk of buying at a peak.

Bars showing how long the price stayed below its previous high after each of Bitcoin's four falls of more than three-quarters. After the June 2011 peak it took about 1.7 years to regain it; after December 2013, about 3.2 years; after December 2017, about 3.0 years; after November 2021, about 2.3 years. After the October 2025 peak, 1.1 years had passed by November 2026 and the price was still about 40% below. Hold only what you could watch fall by three-quarters and stay down for years.
A big fall can last for years. After each of the four falls, the price took between about a year and a half and three years to regain its old high. Past recoveries promise nothing about the next one.

Mistakes Are Final

Irreversibility is a design choice. The whitepaper notes that with banks, “Completely non-reversible transactions are not really possible, since financial institutions cannot avoid mediating disputes.” Bitcoin removes the mediator, and with it the safety net. Your seed phrase (or recovery words), usually 12 or 24 words that a wallet shows you when you create it, can rebuild all its keys. Anyone who sees those words can take your coins; lose them along with your device, and nobody can give them back.

You Are Your Own Bank

Self-custody puts security, backups and inheritance in your hands. You can hand that work to an exchange or app, a custodian, but then you are trusting a company again, and some custodians have collapsed or been hacked. Many people use both: a little in an app while they learn, their savings in a wallet they control. Custodial vs Non-Custodial Wallets sets out the choice.

Open Debates

  • The security budget. Miners earn the new coins in each block (the subsidy) plus the fees users pay. The subsidy halves about every four years, and fees were under 1% of miner income in the week to November 6, 2026. Unless fees grow, or the price rises enough to make up for each halving, miners’ income shrinks, and with it the cost of attacking the network. Some expect demand for block space to fill the gap; others doubt it. See Transaction Fees and Bitcoin’s Security Budget.
  • Quantum computers. A large enough quantum computer could work out a private key from its public key. None exists today, but in March 2026 Google Quantum AI estimated that breaking Bitcoin’s kind of key could take fewer than 500,000 physical qubits (the basic working parts of a quantum computer), about 20 times fewer than earlier estimates. Two draft BIPs (Bitcoin Improvement Proposals) show the debate. BIP-360 would add a new kind of address built to protect coins from such an attack while they sit unspent, though not yet at the moment they are spent. BIP-361 would, once a quantum-safe way to spend exists, phase out today’s signatures after an announced date; coins never moved to a quantum-safe address could then be spent only through a special rescue procedure. Both were drafts as of November 2026. Most addresses show only a fingerprint of the public key until you spend from them, so for now let your wallet give you a fresh address for every payment.
  • Energy use. Proof of work uses a lot of electricity; the proof of work lesson gives the figures and both sides of that debate.

Your First Safe Action

You can watch Bitcoin working in ten minutes without buying anything. A block explorer is a website that displays the public ledger; mempool.space is a widely used open-source one.

  1. Open the first block at mempool.space/block/0. This is the genesis block, mined on January 3, 2009. Every transaction lists its inputs, the coins it spends, and its outputs, the new coins it creates. This block’s only transaction has a single input labelled “Coinbase (Newly Generated Coins)”, because it spends no earlier coins: it creates the block reward. Just below that label is the text “The Times 03/Jan/2009 Chancellor on brink of second bailout for banks” (ignore the stray letter in front of it): a newspaper headline showing the block was made no earlier than that day. What Is a Block in Blockchain? tells its story.
  2. Open the first payment between two people. On January 12, 2009, in block 170, Satoshi sent 10 BTC to Hal Finney, one of the first people to run the software. Finney later wrote: “I was the recipient of the first bitcoin transaction, when Satoshi sent ten coins to me as a test.” Open that transaction and see what is public: one 50 BTC input (the block 9 mining reward), outputs of 10 BTC to Hal and 40 BTC back to the sender, a fee of zero, and more than 970,000 confirmations. The 40 BTC is change: an input is always spent whole, so the leftover comes back as a new output. No names appear anywhere. (Coins this early were locked directly to a public key, so the page shows long keys where modern transactions show addresses.)
Two blocks from January 2009. In block 9, mined on January 9, the input is the coinbase, newly generated coins, and the output is a single 50 BTC coin: Satoshi's reward for mining the block. In block 170, on January 12, a transaction signed with Satoshi's key takes that 50 BTC coin as its input and spends it whole. Its outputs are 10 BTC to Hal Finney's key and 40 BTC back to Satoshi's key as change, with a fee of zero: 50 in equals 10 plus 40 plus a zero fee. The ledger shows only keys and amounts, no names.
The first payment between two people, as the public ledger records it. Block 9’s reward to Satoshi was a single 50 BTC coin. Block 170 spent it whole: 10 BTC to Hal Finney and 40 BTC back as change, with no fee. Inputs are the coins a transaction spends; outputs are the new coins it creates.
  1. Watch today’s network. On the mempool.space home page, the blocks on the left of the strip are waiting to be mined (“In ~10 minutes”); the numbered blocks on the right are already in the chain. Open a recent block, then any transaction, and compare its fee rate in sat/vB (satoshis per virtual byte, the unit of block space) with 2009’s zero fee. Later, remember that looking up your own addresses tells the site which addresses interest you.
  2. Keep your recovery words to yourself. Write them on paper and keep them offline: never in a photo, an email or a cloud note. No support agent, app or website needs them, so anyone who asks is trying to take your coins. The Scams That Empty Self-Custody Wallets shows the common tricks.
  3. Start small. Use an amount you are relaxed about losing while you learn, and practise moving it to your own wallet: Your First Withdrawal: From an Exchange to Your Own Wallet walks through it.
  4. Test a recovery before you rely on it. While the wallet holds only a little, check that your written words restore it: run your hardware wallet’s built-in backup check, or restore from the paper onto a second hardware wallet and confirm the first receiving address matches. Type the words only on a hardware wallet, never into a phone or computer. How to Test Your Seed Phrase Backup shows both methods.

Key Takeaways

  • Digital money can be copied, so its core problem is the double spend. Banks solve it by keeping the only ledger; Bitcoin solves it with a public ledger every node checks, signatures and proof of work.
  • Bitcoin has no issuer: new coins follow a fixed schedule, capped at 21 million, that every full node checks.
  • You can hold bitcoin yourself and pay anyone, but nobody can reverse your mistakes, the price swings hard and every transaction is public. Start small, keep your recovery words private and test a recovery.

Check Your Understanding

1. Alice sends the same coin to Bob and to Carol a few seconds apart. Without a bank, what makes sure only one payment counts?

Answer

Every full node keeps the same public ledger and rejects a payment that spends coins already spent. Because nodes may hear the two payments in a different order, a miner settles it: whichever payment first goes into a valid block counts, and nodes then reject the other as a double spend. Each later block on top makes that harder to undo.

2. Name two things a bank can do for you that Bitcoin can’t, and what you get in exchange.

Answer

A bank can often reverse a fraudulent or mistaken payment, and it can restore your access if you forget your password. Bitcoin can do neither. In exchange, nobody can freeze bitcoin you hold yourself or issue more than the schedule allows, and you can pay anyone without asking permission.

3. Why is it an open question whether fees will pay for Bitcoin’s security?

Answer

Miners’ income pays for the work that makes the chain expensive to rewrite. It comes from the subsidy, which halves about every four years, plus fees, which were under 1% of miner income in early November 2026. Unless fees grow, or the price rises enough to make up for each halving, attacking the network gets cheaper. Some expect demand for block space to fill the gap; others doubt it.