Vanity Address
A vanity address is a Bitcoin address that contains a specific, human-readable pattern chosen by the user. It is generated by repeatedly creating random key pairs until an address matching the desired pattern is found.
How It Works
Generating a vanity address is a brute-force process. Software generates random private keys, derives the corresponding addresses, and checks if the address matches the desired pattern. Each additional character in the pattern exponentially increases the computation required. A 4-character custom prefix takes seconds, while an 8-character prefix can take days or weeks of computation.
The primary legitimate use case for vanity addresses is brand recognition — a business might want an address starting with their name for donation purposes. However, the security implications are serious. If you use an online vanity address generator, the operator has seen your private key. Even if they claim to delete it, you have no way to verify this. The only safe approach is to generate vanity addresses locally on your own hardware using open-source, audited software.
Vanity addresses also create a dangerous attack vector called address poisoning. An attacker can generate an address that starts and ends with the same characters as your real address, then send you a small transaction. If you later copy an address from your transaction history without verifying the full string, you might send funds to the attacker's lookalike address. Always verify full addresses, not just the first and last few characters.
Key Points
- Created by brute-force testing random keys until a matching address pattern is found
- Never use third-party generation services — they may retain your private key
- Computation increases exponentially with each additional custom character
- Can be exploited in address poisoning attacks using lookalike addresses
- Always verify the complete address, not just the prefix or suffix