OnionSwap

← Blog

How to use Bitcoin privately

Bitcoin is often called anonymous. It is not — it is pseudonymous, which is a very different and much weaker thing. Every transaction you ever make is written to a public ledger that anyone can read forever, and the entire game of Bitcoin privacy is preventing the pseudonym (your address) from being tied to the person (you). Once that link is made, it is retroactive: your whole history becomes visible at once. This guide explains how the link gets made and the concrete habits that stop it, in rough order of how much they matter.

Why Bitcoin is not private by default

Three facts combine into the problem. The ledger is public, so all transaction data is visible. Addresses are reused and clustered, so activity accumulates against identifiable pseudonyms. And most people acquire Bitcoin through a KYC exchange, which permanently ties their real identity to at least one address. From that single anchor, chain-analysis heuristics walk outward and deanonymise everything connected to it. You are not fighting a broken cryptography; you are fighting the fact that the data is all there and one endpoint is already labelled with your name.

Habit 1: never reuse an address

This is the cheapest, highest-impact habit and the one most people ignore. Every time you receive Bitcoin, generate a fresh address — every reasonable wallet does this automatically if you let it. Reusing an address bundles all payments to it into one visible pile tied to a single pseudonym, which is precisely what analysis wants. A donation address in a forum signature, a static address on a website: these are privacy disasters because every payment ever sent to them is linked and public. Fresh address, every time, no exceptions.

Habit 2: understand the common-input heuristic

When a wallet builds a transaction, it often combines several of your coins (inputs) to cover the amount. Chain analysis assumes — usually correctly — that all inputs to one transaction belong to the same owner. This is the single most powerful clustering technique there is. The practical consequence: if you spend a coin tied to your identity together with a coin you wanted to keep separate, you have just merged them, and the private coin inherits the identity of the labelled one. Keep coins with different histories in different wallets, and be deliberate about which coins you spend together. This is called coin control, and good wallets expose it.

Habit 3: protect your network identity

Chain data is not the only leak. When your wallet broadcasts a transaction, the node it connects to can see the originating IP address — which can tie a transaction to your physical location without touching the blockchain at all. Running your wallet over Tor, or connecting it to your own full node, removes this network-layer link. Many wallets support Tor with a single setting. This is the leak people forget because it is invisible, but it is real and it is fixable.

Habit 4: be careful at the fiat edges

The strongest link between you and your coins is almost always the exchange where you bought them. There is no on-chain trick that undoes a KYC record. The mitigations are structural: acquire coins in ways that do not tie them to your identity, keep KYC-sourced coins separate from everything else, and never deposit privacy-sensitive coins back into a verified account, where the identity link is remade instantly and the deposit itself may be flagged.

Habit 5: break the trail when it genuinely matters

Sometimes the four habits above are not enough — you have coins with a history you need to genuinely sever, not just avoid extending. The most effective way to do that is to leave the transparent ledger entirely and come back to a clean address. Swap the Bitcoin into Monero, whose sender, receiver and amount are hidden by default, let it settle, and then swap back to a fresh Bitcoin address if you need Bitcoin at the end. Because the Monero leg is opaque and lives on a different chain, there is no on-chain path linking the coins you started with to the ones you finish with.

This works better than staying on Bitcoin and trying to blur the link, because it does not depend on an anonymity set of strangers behaving well — it relies on Monero's cryptography, which protects every transaction regardless. The mixer-versus-swap comparison goes into why. Do the swaps through a no-account service so neither the exit nor the re-entry is tied to a verified identity, and reach it over Tor if the network layer matters too.

What not to bother with

Two things waste people's effort. Chasing perfect privacy for coins whose origin is already a labelled KYC withdrawal — the anchor is set, and cosmetic shuffling afterward does little. And trusting custodial "mixing" services that take control of your coins; the custody risk and the compliance flags on the output usually outweigh any benefit. Privacy is a set of habits with a clear order of importance, not a product you buy once.

The short version

Use a fresh address every time, do not spend labelled and private coins together, connect over Tor, be disciplined at the fiat edges, and when you need a real break, route through Monero and back to a clean address. None of this requires special expertise — just the understanding that on Bitcoin, the ledger remembers everything, and privacy is the practice of not handing it your name.

Break the trail with a private swap →