Glossary
A
Address
A bitcoin address—also called bitcoin invoice address—is a string of characters that you send to someone else to receive funds.
There are currently four invoice address formats in use:
- P2PKH starting with
1 - P2SH starting with
3 - Bech32 starting with
bc1q - Taproot (Bech32m) starting with
bc1p
Address Reuse
Address reuse refers to the practice of reusing a single bitcoin invoice address for multiple transactions. It is highly discouraged since it harms the privacy of yourself and others. You should never reuse addresses.
Air-Gapped
A device that has never been connected to the internet. Air-gapped devices are used for signing transactions securely, as they cannot be remotely compromised. Hardware wallets like Passport and Coldcard support air-gapped operation.
Anonymity Set
The only way to hide in plain sight is by hiding in a crowd. The anonymity set is simply the size of this crowd.
If you are putting on a hat and sunglasses to hide in a crowd of people that are wearing the same hat and sunglasses, your anonymity set is the size of this crowd. If said crowd is 50 people, an attacker could mistake you for anyone out of these 50 people. Similarly, when doing a collaborative transaction in bitcoin, you are creating an onchain footprint that is equivalent to the onchain footprint of others.
Ashigaru Wallet
A fork of Samourai Wallet created after the Samourai developers' arrest. Inherits all of Samourai's privacy features including Whirlpool, Stowaway, Stonewall, and Ricochet.
Azteco
A Bitcoin voucher service that allows you to buy bitcoin without KYC using cash or other methods.
B
Base Layer
Bitcoin's base layer (or Layer 1) refers to any transaction that touches the timechain, i.e. all onchain transactions. The base layer is concerned with global consensus and settlement.
Higher layers build ontop the settlement assurances of the base layer. One example of a Layer 2 system is the Lightning Network.
Batch Transaction
A batch transaction is a transaction that combines multiple real-world transactions into one on-chain transaction. It has multiple inputs and multiple outputs. Different parties may control one or multiple inputs and receive one or multiple outputs.
Bayesian Updating
A statistical method where analysts update their probability estimates as new evidence becomes available. In chain analysis, each new heuristic or data point narrows the possibility space, making deanonymization increasingly likely over time.
Bech32
Bech32 is an invoice address format. It was specified in BIP 173 and is used for both SegWit and Taproot addresses.
BIP (Bitcoin Improvement Proposal)
A design document providing information to the Bitcoin community about new features or processes. Examples include BIP47 (PayNyms), BIP78 (PayJoin), and BIP352 (Silent Payments).
BIP 353
A standard for human-readable Lightning Network payment identifiers that look like email addresses (e.g., user@domain.com). Makes it easy to share payment codes without QR codes.
BIP69
A Bitcoin Improvement Proposal that specifies lexicographic ordering of transaction inputs and outputs. While intended to improve privacy by standardizing ordering, it has ironically become a wallet fingerprint because not all wallets implement it.
Bisq
A desktop P2P exchange. Fully decentralized, no central server. Tor by default. Built-in dispute resolution.
BitBox02
A hardware wallet with a companion desktop app. Simple setup, automatic SD card backups. Bitcoin-only edition available. ~$85.
Bitcoin
A decentralized digital currency that operates without any central authority like a bank or government. Created in 2009 by someone using the name Satoshi Nakamoto. Bitcoin lets you send value directly to anyone in the world without needing a middleman.
Bitcoin Core
The reference implementation of Bitcoin. Includes a full node and wallet. Most trusted and audited codebase. Requires downloading the full blockchain (600GB+).
Bitcoin Knots
A feature-rich fork of Bitcoin Core. Adds additional features and options not in Core, including more granular control over node behavior and better mempool management.
Block
A group of confirmed transactions added to the blockchain. New blocks are created approximately every 10 minutes through mining.
Blockchain
A mostly meaningless marketing term used to confuse newcomers. While "block chain" is still the main term used to refer to Bitcoin's linked data structure of blocks, it has increasingly become meaningless over the years as it got co-opted by grifters, charlatans and marketers. A better, more descriptive term of said data structure is timechain.
Blockstream Green
A mobile wallet (iOS/Android) with 2-of-2 multisig by default, Tor support, and the ability to connect to your own node. No coin control.
Bloom Filter
A space-efficient probabilistic data structure used by some Bitcoin wallets to query transactions from full nodes without revealing the full address. Used in BIP47 version 2 payment codes for notification detection.
Boltzmann Entropy
A measure of the number of possible interpretations of a Bitcoin transaction's inputs and outputs. Higher entropy means more ambiguity and better privacy. Named after physicist Ludwig Boltzmann.
BlueWallet
A mobile wallet (iOS/Android) focused on simplicity. Features include Lightning support, coin control, Silent Payments, and the ability to connect to your own node. No Tor support.
Breez
A non-custodial Lightning wallet with Tor support. Mobile-focused.
C
Cake Wallet
A multi-cryptocurrency wallet (iOS/Android/Desktop) that supports Bitcoin, Monero, and other coins. One of the few wallets with full Silent Payments support.
Chain Analysis
Chain analysis is the practice of applying heuristics to a timechain's public transaction graph. The goal of chain analysis is to link the pseudonymous identities created by bitcoin software with "real" identities corresponding to natural persons or entities.
Chain analysis is based on flawed assumptions, because ownership in bitcoin is defined by secret knowledge, not possession. Identities can only be linked probabilistically, not provably. One of the main assumptions used by chain analysis companies is the common input ownership heuristic. Collaborative transactions break this heuristic.
Change
When using physical cash, spending a $100 bill to pay for a $25 item, you will get $75 back in change. The reason for this is that you can't spend just a part of the bill, because ripping off a quarter of it for payment will invalidate the bill. Consequently, when bills change hands, the whole bill has to be spent, and an appropriate amount of change goes back to the spender.
Bitcoin works the same way. When sats change hands, the spender has to spend the whole UTXO. Bitcoin creates the appropriate amount of change automatically.
Change Detection
When it comes to chain analysis, change detection is the name of the game. The goal of chain analysis companies is to link identities to transactions, and to do that, one has to detect whether funds changed hands or not.
Technically speaking, change detection is trying to figure out which output of a transaction is a change output. Change detection is based on various heuristics. False positives will always exist.
Channel
A payment link between two Lightning nodes. Each channel has a total capacity and a balance split between the two channel partners.
CIOH
Short for Common Input Ownership Heuristic.
Coin Control
A wallet feature that allows manual selection of specific UTXOs as inputs for a transaction, rather than relying on the wallet's automatic selection algorithm. Essential for privacy because it prevents accidentally co-spending UTXOs from different sources, which would link them via the Common Input Ownership Heuristic.
CoinJoin
A CoinJoin is a collaborative transaction that combines inputs from multiple parties. The purpose of a CoinJoin is to combine inputs and create outputs in ways that improves the financial privacy of participants, without relying on a trusted third party for custody. When done correctly, a CoinJoin breaks any deterministic links between transactions, moving the process of chain analysis from quasi-deterministic with high certainty to probabilistic with low certainty.
CoinJoins break the common input ownership heuristic that is used by chain analysis companies to de-anonymize actors. The concept was first introduced in 2011 by Bitcointalk user hashcoin, but later popularised in 2013 by Gregory Maxwell.
All CoinJoin transactions are collaborative transactions. The two main types of CoinJoin transactions are equal-output and unequal-output CoinJoins.
Collaborative Transaction
A collaborative transaction is a bitcoin transaction that is initiated and signed by multiple participants. A collaborative transaction involves two or more parties and is thus always a batch transaction. All CoinJoins are collaborative transactions.
Common Input Ownership Heuristic
The common input ownership heuristic assumes that all inputs of a transaction are controlled by a single entity. This assumption is clearly wrong, because collaborative transactions exist. CoinJoin transactions are designed to break this heuristic.
Coldcard
An air-gapped hardware wallet by Coinkite. Features include encrypted backups, duress attack solutions, and BIP85 support. ~$100.
Confirmation
When a transaction is included in a block. More confirmations (additional blocks built on top) make the transaction increasingly difficult to reverse.
Custodial Wallet
A wallet where a third party holds your private keys. You trust the custodian to manage your funds. Examples include exchange wallets and Wallet of Satoshi. If the custodian goes bankrupt or freezes your account, you lose access to your funds.
D
Deterministic Link
A connection between a transaction input and output that exists in ALL possible interpretations of that transaction. Even in CoinJoin transactions, some input-output links may be deterministic, meaning the CoinJoin provides zero privacy for those specific participants.
Doxxic Change
"Doxxic" change is any leftover change that is going back to you when participating in an equal-output CoinJoin. Doxxic change is problematic because it can potentially destroy any privacy benefits gained from a CoinJoin.
The word is a combination of "toxic" and "doxxing." Doxxing is the act of finding out the legal identity (or similar identifying information) of a pseudonymous entity. Bitcoin is a pseudonymous system and does not require the True Names of participants.
Double Spend
An attempt to spend the same bitcoin twice. Bitcoin's consensus mechanism prevents this by requiring network agreement on which transactions are valid.
Dust Attack
Sending tiny amounts of Bitcoin (dust) to target addresses. If the recipient spends the dust alongside other UTXOs, the attacker can link those addresses together, mapping the victim's wallet.
E
Eclipse Attack
An eclipse attack is an attack in networked systems in which an attacker targets a node to convince it of a false network state. The attacker surrounds the node in order to conceal or block off accurate information, leaving the attacked node(s) in the dark in terms of the global network state.
Electrum
A long-standing desktop wallet (Mac/Windows/Linux) with extensive features including Lightning, multisig, hardware wallet support, and coin control. Can connect to your own node.
Equal-Output CoinJoin
An equal-output CoinJoin is a collaborative transaction that produces outputs of equal denomination, i.e. outputs of equal value when measured in sats. For this reason, these types of transactions are also referred to as equal-amount or equal-value CoinJoin transactions.
Equal-output CoinJoins are batch transactions that are easily identifiable on-chain due to their uniform output structure.
Like any collaborative transaction, an equal-output CoinJoin breaks the Common Input Ownership Heuristic. Participating in such a transaction allows you to gain privacy by "hiding in the crowd."
F
Fidelity Bond
A fidelity bond is an insurance policy which protects the policyholder from wrongful acts committed by others. In JoinMarket, a fidelity bond is a mechanism which ensures that market actors act honestly. It is a protection mechanism against Sybil attacks, because a fidelity bond makes the creation of cryptographic identities costly.
Fungibility
The property of a good where each unit is interchangeable with any other unit. Cash is fungible - one $10 bill is worth the same as any other. Bitcoin's fungibility can be compromised when certain coins are tainted by their history.
Funding Transaction
The on-chain Bitcoin transaction that locks bitcoin into a 2-of-2 multisig wallet to open a Lightning channel.
H
Halving
An event that occurs approximately every four years where the block reward for miners is cut in half. This reduces the rate at which new bitcoin is created.
HD Wallet (Hierarchical Deterministic)
A wallet that generates a new address for each transaction from a single seed phrase. Avoids address reuse by default. Defined in BIP32/BIP44.
Heuristic
A rule-of-thumb used to infer information about a Bitcoin transaction. Privacy scanners apply dozens of heuristics to estimate what surveillance firms can deduce about any transaction or address.
Hodl Hodl
A non-custodial P2P exchange. No KYC required. Wide range of payment methods. Global availability.
HTLC (Hashed Time-Locked Contract)
The mechanism that enables multi-hop routing on the Lightning Network. It ensures that either the payment completes all the way through the route, or it fails entirely and all funds are returned.
I
Invoice
A Lightning Network payment request containing the recipient's node ID, payment amount, payment hash, and expiry time.
J
JoinMarket
A decentralized CoinJoin implementation using a maker-taker model. Makers offer liquidity and earn fees; takers pay for privacy. Creates transactions with varied input/output counts.
K
KYC (Know Your Customer)
Identity verification required by regulated financial institutions. KYC exchanges collect your name, address, photo ID, and link it to your Bitcoin addresses.
L
Lightning Network
A Layer 2 payment protocol built on top of Bitcoin. It enables fast, low-cost transactions by creating payment channels between users that settle on the Bitcoin blockchain only when opened or closed.
Liquidity
The amount of bitcoin available in a Lightning channel for sending. If a channel has 0.5 BTC on your side, you can send up to 0.5 BTC through that channel.
lnproxy
A simple Lightning Network privacy tool that acts as a proxy between sender and receiver. Instead of paying an original invoice directly, you pay a "proxy invoice" generated by an lnproxy relay, which then pays the original invoice. This hides the sender's and receiver's node IDs from each other without requiring trust in the relay.
Low-R Signature
A technique where Bitcoin Core grinds the ECDSA nonce to produce signatures where the R value is in the lower half of the curve order. This produces 71-byte signatures instead of 72-byte, saving 1 byte per input. It is a distinctive wallet fingerprint.
LSP (Lightning Service Provider)
A Lightning node that provides connectivity and routing services to other nodes, particularly mobile wallets that maintain a single connection.
M
Maker
A market maker is someone who offers bitcoin liquidity to the market, to be used by others for collaborative transactions.
Mempool
Short for "memory pool." A pool of valid bitcoin transactions held by each node that are not yet confirmed in a block. Transactions wait here until a miner includes them.
Mining
The process of creating new blocks by solving complex mathematical puzzles. Miners are rewarded with newly created bitcoin and transaction fees.
Multisig (Multi-Signature)
A spending condition requiring M of N private keys to authorize a transaction (e.g., 2-of-3). Used for shared custody, escrow, and enhanced security.
Muun
A non-custodial Lightning wallet that combines on-chain and Lightning in a single interface. No Tor support.
myNode
A plug-and-play node solution that is feature-rich and good for beginners.
N
nLockTime
A transaction field that specifies the earliest block height or timestamp at which a transaction can be mined. Bitcoin Core sets this to the current block height as an anti-fee-sniping measure, which becomes a wallet fingerprint.
Node
A computer running Bitcoin software that validates transactions and blocks. Running your own node allows you to verify Bitcoin's rules independently without trusting anyone else.
Node ID
A public identifier for a Lightning Network node. Everyone with access to an invoice can discover the associated node ID.
nSequence
A per-input field that encodes RBF and timelock information. Different wallets set different default nSequence values, making it a wallet fingerprint signal.
Non-Custodial Wallet
A wallet where you hold your own private keys. You have full control over your funds. Examples include Sparrow, Samourai, BlueWallet, and Bitcoin Core.
O
Offchain
An offchain (or off-chain) transaction is any transaction that does not happen onchain. Examples include transactions on the Lightning network, the handing over of physical private keys, as well as transactions on centralized ledgers such as exchanges and other trusted third parties.
Onchain
An onchain (or on-chain) transaction is a bitcoin transaction that is settled on the bitcoin timechain. The analysis of these transactions is called chain analysis, which is the spying on and de-anonymizing of bitcoin's users by trying to find patterns in the onchain data.
Onion Messaging
An encrypted messaging system on the Lightning Network that routes messages through nodes, similar to how payments are routed. Used by BOLT12 offers.
OP_RETURN
A Bitcoin script opcode that embeds arbitrary data in the blockchain. Can leak metadata like timestamps, protocol identifiers, or messages that fingerprint the transaction.
P
P2PKH
Short for pay-to-public-key-hash. Legacy address format starting with 1.
P2SH
Short for pay-to-script-hash. Address format starting with 3. Used for multisig and other complex scripts.
Passport
An air-gapped hardware wallet by Foundation Designs. Uses QR codes for PSBT communication. Fully open sourced firmware and hardware. ~$170.
PayJoin (P2EP)
A PayJoin is a collaborative transaction between two parties that facilitates an actual payment for a good or service. The merchant agrees to provide one or multiple inputs to the transaction, increasing the privacy of both parties.
A PayJoin has different onchain characteristics than an equal-output CoinJoin and is not detectable via chain analysis alone. A PayJoin transaction has multiple interpretations, all of which are equally valid. In addition to breaking the common input ownership heuristic it poisons the basis of all chain analysis, because of its undetectability.
PayJoin v2 (BIP77)
The asynchronous, serverless version of the PayJoin protocol defined in BIP77. Unlike PayJoin v1 which required the receiver to run a server and respond in real time, v2 uses a relay directory so sender and receiver do not need to be online simultaneously.
PayNym
A user-friendly identity layer built on BIP47 reusable payment codes. Allows receiving Bitcoin without revealing addresses publicly. Used by Samourai and Sparrow wallets.
Peach Bitcoin
A mobile-first P2P exchange. No KYC required. Wide range of payment methods.
Peel Chain
A pattern where a large UTXO is repeatedly spent, peeling off small payments and returning the remainder as change. Creates a traceable chain of decreasing outputs. Chain analysts use this to track funds across many transactions.
Payment Hash
A cryptographic hash used to route Lightning payments. The same payment hash is used across all hops in an HTLC payment.
Phoenix
A partially custodial Lightning wallet. Non-custodial for on-chain funds but uses liquidity service providers for Lightning channels.
Private Channel
A Lightning channel that is not announced to the network through the gossip protocol. Only the two channel partners know about it.
Private Key
A secret number that allows you to spend bitcoin from a specific address. Anyone who knows your private key can spend your bitcoin. Never share your private key with anyone.
Privacy Score
A 0-100 rating computed by privacy scanners based on heuristics. Starts at 70, adjusted by findings. Only CoinJoin, Taproot, and high entropy can raise it. Grades: A+ (90-100), B (75-89), C (50-74), D (25-49), F (0-24).
PTLC (Point Time-Locked Contract)
An upgrade to HTLCs that uses different payment points for each hop, preventing payment correlation by nodes that control multiple hops in a route.
Public Key
A cryptographic key derived from your private key, used to generate receiving addresses. It is safe to share.
PSBT (Partially Signed Bitcoin Transaction)
A format for sharing unsigned or partially signed transactions between devices. Commonly used with hardware wallets where the unsigned transaction is sent to the device for signing, then returned.
R
Raspiblitz
An open source, community-driven node solution for Raspberry Pi.
RBF (Replace-By-Fee)
A feature that allows you to replace an unconfirmed transaction with a new one that pays a higher fee. Useful for speeding up stuck transactions.
Ricochet
A technique where you create several self-payments to your own fresh addresses to simulate a change of ownership of your bitcoin before the final spend. Provides retrospective anonymity by adding distance between a CoinJoin and the final destination.
RoboSats
A Lightning-based P2P exchange. Simple interface, no KYC required, avatar-based identity.
Round Amount Detection
A heuristic that identifies round-number outputs (e.g., 0.1 BTC, 1,000,000 sats) as likely payments, with the non-round output being change. Reveals spending patterns.
S
Samourai Wallet
A mobile wallet (Android only) focused on maximum privacy. Features include Whirlpool CoinJoin, PayJoin (Stowaway), Ricochet, Stonewall, and PayNyms. Runs over Tor and connects to your own Dojo node.
Satoshi (sat)
The smallest unit of bitcoin. There are 100,000,000 sats in 1 BTC. Named after Bitcoin's creator.
Satoshi Nakamoto
The pseudonymous creator (or creators) of Bitcoin. The true identity remains unknown. The smallest unit of bitcoin, one hundred millionth of a bitcoin, is called a "satoshi" in their honor.
Scheduler
The 'scheduler' is a component of JoinMarket which schedules multiple collaborative transactions in a row. It will use random intervals and amounts to make timing analysis and de-anonymization via chain analysis more difficult.
Script Type
The address format used in a transaction (P2PKH, P2SH, P2WPKH, P2TR). Mixing script types in inputs or outputs can fingerprint change outputs since the change usually matches the sender's address type.
Seed Phrase (Recovery Phrase)
A list of 12 or 24 words that can regenerate all the private keys in your wallet. This is the most important thing to back up. Write it on paper and store it somewhere safe. Never store it digitally.
SeedSigner
A DIY air-gapped hardware wallet that can be built for ~$50-70. Minimizes supply chain attack risk. Stateless by default.
Self-send (Self-transfer)
A transaction where one or more outputs return to an address that was also an input. This trivially identifies the change output, revealing the sender's remaining balance and the exact payment amount.
Silent Payments (BIP352)
A protocol that allows a recipient to publish a single static payment address from which senders derive unique, unlinkable Taproot (P2TR) outputs for each payment. Unlike BIP47, Silent Payments require no on-chain notification transaction.
SNICKER
Simple Non-Interactive Coinjoin with Keys for Encryption Reused.
Sparrow Wallet
A desktop wallet (Mac/Windows/Linux) focused on privacy. Features include coin control, Whirlpool integration, hardware wallet support, and detailed transaction previews. Connects to your own node via Electrum server.
Steganographic Transaction
A transaction designed to look like something it is not. Examples include PayJoin (looks like a normal payment but the receiver contributes an input), Stonewall (simulated CoinJoin from a single wallet), and Ricochet (adds intermediate hops). These exploit the fact that chain analysis relies on heuristics.
Stonewall
A steganographic transaction format from Samourai Wallet (now Ashigaru) that mimics a CoinJoin. Has 2-4 inputs and exactly 4 outputs: 2 equal-valued outputs (one real payment, one decoy) and 2 change outputs. Solo Stonewall uses only the sender's UTXOs. STONEWALLx2 involves a collaborator contributing inputs, making it indistinguishable from a genuine 2-party CoinJoin.
Start9
A privacy-focused, self-sovereign node solution.
Stowaway
Ashigaru's implementation of PayJoin. Uses the Whirlpool post-mix wallet to create PayJoin transactions.
Submarine Swap
A trustless atomic exchange between on-chain Bitcoin and Lightning Network payments using Hash Time-Locked Contracts (HTLCs). Allows moving funds between layers without a trusted intermediary.
Sweep
A transaction that sends the entire balance of one or more addresses to a single output with no change. Common when migrating wallets or claiming funds. A single-input sweep (1-in-1-out) has zero entropy.
Sybil Attack
A Sybil attack is a special kind of attack in peer-to-peer networked computing. The victim is surrounded by malicious entities, each of which act as if they are a separate entity. JoinMarket uses fidelity bonds to protect users from Sybil attacks.
T
Taint
Taint is an external property defined by chain analysis surveillance firms. It is an attempt to trace the origin and ownership of UTXOs, classifying their owners and building lists of "good" and "bad" money.
All taint in bitcoin always is and always will be arbitrarily defined and probabilistically applied.
Taker
A market taker is someone who buys bitcoin liquidity from the market, taking up market makers on their offers.
Taproot
A Bitcoin upgrade (activated November 2021) that makes complex spending conditions look like simple ones on-chain. Improves privacy by making multisig, timelocks, and scripts indistinguishable from regular payments.
Taproot Channels
Lightning Network channels that use Taproot (P2TR) outputs with MuSig2 key aggregation for the 2-of-2 funding multisig. Unlike legacy P2WSH channels, Taproot channel opens and cooperative closes are indistinguishable from regular single-signature Taproot spends on-chain.
Temporal Analysis
The practice of analyzing the timing of transactions to identify patterns and link addresses. This includes studying when transactions occur, how quickly funds are spent, and whether there are regular payment patterns.
Timechain
A more accurate term for what is commonly called the "blockchain." It represents a timestamped and linked list of blocks. Anyone can create a new block, but each block must have sufficient proof of work, making it costly to create new blocks.
Timelock
A UTXO can be locked up by a script which defines that said UTXO can only be spent in a block that is higher than a certain value. This makes UTXOs unspendable before a specific time.
Tor
An anonymity network that routes internet traffic through multiple relays. Privacy tools and wallets can use Tor and route requests through .onion endpoints (hiddenservices) to hide which addresses are being queried.
Transaction
A bitcoin transaction describes the movement of sats. It is structured data that describes inputs and outputs, among other things. A valid bitcoin transaction has at least one input and at least one output.
Trezor Model T
A hardware wallet with a touchscreen. Supports multisig and Shamir backup. Not air-gapped (USB connection). ~$180.
Tumbler
A JoinMarket script that performs multiple consecutive CoinJoins with random amounts and random timing between rounds. Unlike a single CoinJoin (sendpayment), the tumbler is designed to achieve meaningful privacy by breaking the amount-matching analysis that can partially unmix single JoinMarket transactions. It uses random amounts, random timing delays, and multiple destination addresses to make blockchain analysis significantly more difficult.
TX
Short for transaction.
U
Umbrel
A plug-and-play node solution with a beautiful interface and app store. Easy setup but more expensive than DIY.
UTXO
Short for Unspent Transaction Output. The tip of the chain of signatures which originates in a coinbase output. It's a "coin" that has not yet been spent and can still be spent.
W
WabiSabi
A CoinJoin protocol used by Wasabi Wallet that allows variable-amount outputs using cryptographic credentials. Supports 20+ participants per round with flexible denomination selection.
Wallet
Software or hardware that stores your private keys and allows you to send and receive bitcoin. A wallet does not actually "store" bitcoin - the bitcoin exists on the blockchain. The wallet stores the keys that prove ownership.
Wallet Fingerprint
Distinctive patterns left by wallet software - transaction version, locktime, sequence numbers, signature encoding - that reveal which wallet created a transaction.
Wallet of Satoshi
A custodial Lightning wallet. Simple to use but the custodian holds your keys and knows your transaction history.
Whirlpool
A CoinJoin implementation by Samourai Wallet that creates transactions with exactly 5 equal outputs at fixed denominations (0.5, 0.05, 0.01, 0.001 BTC), achieving high entropy and strong privacy.
Zeus
A non-custodial Lightning wallet that can connect to your own LND node. Supports Tor.