Written in August 2026 about events in 2021. This is a retrospective, not contemporaneous reporting.
What happened
Taproot activated at block height 709,632, timestamped 05:15 UTC on 14 November 2021. It was Bitcoin's first consensus change since SegWit in 2017, and it arrived as three specifications: BIP 340 for Schnorr signatures, BIP 341 for the Taproot output type, and BIP 342 for the script rules that go with it.
It locked in during June 2021 through a mechanism nicknamed Speedy Trial: a short signalling window, a 90 percent miner threshold, and a fixed activation height six months out whether or not anything further happened. That gap between lock-in and activation was deliberate, and it existed so node operators had time to upgrade.
What it changed
Before Taproot, the chain revealed the shape of your arrangement. A two-of-three multisig spend looked like a two-of-three multisig spend to anyone reading the block. A single-key spend looked like a single-key spend. Your security setup was public whether you wanted it to be or not.
Two pieces changed that. Schnorr signatures are linear, which means several public keys can be added together into one key, and several signatures into one signature that validates against it. A group cooperating to spend can therefore produce output that is indistinguishable from one person spending alone.
The second piece handles the case where they do not cooperate. A Taproot output commits to a tree of alternative spending conditions, and spending by any one branch reveals only that branch. The rest are never published. So a wallet can have an everyday key path, a recovery path after a timelock, and a path requiring a co-signer, and the chain learns about whichever one was used and nothing about the others.
There was also a modest efficiency gain, since an aggregated signature is smaller than a set of them, and the ability to batch-verify signatures.
What it did not change
It did not give anyone privacy by existing. Taproot creates the possibility that a cooperative multisig spend is indistinguishable from a single-signature spend, and that indistinguishability is only real if enough wallets actually produce such spends. A privacy property that depends on a crowd does not work when the crowd is small.
It changed nothing about supply, and it was a soft fork, so old nodes continued to see Taproot spends as valid. Nobody was forced to upgrade to stay on the chain.
What we know now
Adoption was slow for a long time, both in wallet support and in the share of outputs using the new type. The most visible early consumer of Taproot capacity was not the multisig privacy story at all: from early 2023, inscriptions used Taproot's script path to embed arbitrary data, which is a use nobody proposing BIP 341 had in mind, and which drove much of the subsequent argument about what belongs in a transaction.
That argument is still live. It is the same one behind BIP-110's failed activation in 2026.