<p>No. The computation from children from a parent is like a hash (and involves hashes). It doesn't matter how many children someone sees, they cannot compute the parent key. They cannot even tell which child keys come from the same parent.</p>
<p>The only thing that's possible, and perhaps surprising, is that given a parent xpub, and a privkey derived from it, you can compute the parent xprv.</p>

CC BY-SA 4.0
2021-09-11T06:02:48.247Z
Thanks! this is what I was wondering. Okay will keep the child private keys secure too
Trevor
CC BY-SA 4.0
2021-09-11T04:54:29.620Z
2021-09-11T04:54:29.620Z
Pieter Wuille
<p>Say for example, you have 1 HD Key and are generating multiple children keys. Say a max of <code>2147483647</code> child keys.</p>
<p>Would it be possible to figure out the parent HD pub/priv keys if somebody were to get a large percentage of the child keys?</p>

<deterministic-wallets>
Are hierarchical deterministic Keys secure even against their children?
Trevor
# Are hierarchical deterministic Keys secure even against their children?

(Asked by: username_0 on 2021-09-11)

Say for example, you have 1 HD Key and are generating multiple children keys. Say a max of `2147483647` child keys.

Would it be possible to figure out the parent HD pub/priv keys if somebody were to get a large percentage of the child keys?

**Tags:** deterministic-wallets


---

## 1 answers

### Answer by username_1 on 2021-09-11. Score: 2 | Accepted answer

No. The computation from children from a parent is like a hash (and involves hashes). It doesn't matter how many children someone sees, they cannot compute the parent key. They cannot even tell which child keys come from the same parent.

The only thing that's possible, and perhaps surprising, is that given a parent xpub, and a privkey derived from it, you can compute the parent xprv.

> **Comments:**
> **username_0**: Thanks! this is what I was wondering. Okay will keep the child private keys secure too  

---

