Bitcoin has value because people find it useful as a form of money.
It can serve that function of storing and exchanging value because it has robust monetary properties, most notably scarcity. Those properties are established by a novel combination of cryptography, incentives, decentralization, and energy.
This article explains what that structure is, how it differs from what backs gold and fiat money, and why it matters.
What Does "Backing" Mean for Money?
Traditionally, "backing" meant that a currency could be exchanged for a fixed quantity of something valuable, typically a precious metal like gold. The currency derived value from that link, since a dollar could be redeemed for a defined amount of gold, and that redeemability gave people confidence in the paper money.
But that kind of backing is not a guarantee. What it requires is trust in people and institutions that they will not print money beyond what the reserve supports, that the institutions will honor requests to redeem paper money for gold, and that political and economic pressures will not erode the arrangement over time.
Being backed by gold also assumes that gold itself is valuable. This raises a more fundamental question about what makes anything valuable as money in the first place.
What it comes down to is that people need a way to store, exchange, and measure value. Barter systems can handle simple trades, but they break down at scale, because for any transaction to happen, both parties must have exactly what the other wants, in the right amount and at the right time. As trade becomes more complex and more distant, a shared medium of exchange becomes necessary: money.
Anything can theoretically serve as money, but some things serve that function far better than others. What differentiates them are their monetary properties.
-
Durability. It should hold up over time without degrading, rusting, or tarnishing
-
Portability. It should be easy to carry and transfer without significant loss or friction
-
Verifiability. It should be testable for authenticity, so that fakes are detectable
-
Fungibility. Each unit should be interchangeable with every other unit of the same money
-
Divisibility. It should be subdivisible into smaller units to handle transactions of any size
-
Scarcity. It should have limitations on its production, or it will be produced en-masse and lose its capacity to store value
Things that are robust across all of these properties are relatively better at serving as money, while those that are weak face predictable problems.
What Backs Gold?
Gold became the world's monetary standard across cultures and centuries because it scores well across all of those properties. Gold does not degrade, it has a high value-to-weight ratio for portability, it can be measured and subdivided, every unit of pure gold is chemically identical to every other, and its purity can be tested without trusting a third party.
Gold is also scarce. Producing new gold requires finding deposits, extracting ore, and refining it, all of which is constrained by physics and economics. You cannot easily increase production of gold without significant time, effort, and resources. The annual production of gold stays relatively stable at 1.5 to 2 percent of the total amount already above ground.
This relationship between existing stock and the annual flow of new supply is called the "stock-to-flow ratio". A high ratio means supply grows slowly relative to what already exists, which helps an asset preserve purchasing power over time. Gold's stock-to-flow ratio has been consistently high for centuries, meaning it's hard to produce more of it even when there is persistent demand. This is a significant reason why it was independently adopted as money by cultures that had no contact with each other.
Gold's monetary properties are not man-made. They are established by chemistry and physics, and no government or technology can change them. Gold is backed by the laws of physics.
What Backs Fiat Money?
The value of fiat money (dollars, euros, yen, etc.) comes from two sources: government enforcement and public trust.
Governments require taxes to be paid in the local fiat money, and legal tender laws require that it be accepted for debts. Refusing to comply with these laws results in fines, penalties, and ultimately the threat of legal action and prison. This creates a baseline demand for fiat money that has nothing to do with its intrinsic properties.
People use fiat money because they trust that it will be accepted for payment in the future and that it will sufficiently hold value between now and that future date. For a money to hold value, the monetary institutions that control its supply must be trusted to not print excessive amounts of money, which dilutes and destroys its value. History has multiple examples of public trust being lost when authorities printed excessively and people abandoned the use of the money (Venezuela 2016-19, Zimbabwe 2007-08, Germany 1921-23).
Between 2020 and 2023, the US M2 money supply expanded by approximately 40% as governments created new money in response to economic disruption. The following years saw rates of high inflation, in what can be described as "monetary debasement": the loss of purchasing power that results from expanding the money supply. As a matter of policy, institutional leaders often target a consumer price inflation of ~2%, while expanding the money supply on average by ~7% and retaining the discretion to adjust those amounts as they see fit. The risks of holding cash in a bank covers what monetary debasement means for savers in full.
Fiat money is backed by government authority, ongoing public trust, and monetary authorities' restraint to not print excessively. When any of those erode, the currency's value follows.
What Backs Bitcoin?
Bitcoin is not backed by physics, government decree, or redeemability for another asset. It is backed by a novel combination of four forces that work together to establish and maintain its monetary properties.
Those forces are decentralized rule enforcement, cryptography, incentive alignment, and energy.
Decentralized rule enforcement
Bitcoin operates as a protocol, a set of standardized rules, encoded in open-source software that defines its monetary properties, including the supply limit and the conditions defining a valid transaction. Anyone can download the software and run it on their computer, becoming a node in Bitcoin's network. What is Bitcoin? covers how the node network operates in greater detail.
Nodes are distributed across the globe, and each one independently verifies that new transactions and blocks follow the rules and rejects anything that does not conform. No single entity controls this process.
A node operator can modify their own copy of the software, but any modification from the network's established rules will cause the rest of the network to reject their transactions. The rules are enforced not by any authority, but by the consensus of countless independent participants, each acting in their own self-interest.
No individual or group can unilaterally change Bitcoin's consensus rules. A proposed change to the supply cap would need to be adopted by node operators worldwide, all of whom hold bitcoin and would be financially harmed by a changed supply cap. The economics of changing such rules make adoption effectively impossible.
Cryptography
Bitcoin's security rests on mathematical foundations that can be independently verified and tested. The key tools for this are hash functions and the use of astronomically large random numbers in generating private keys.
A one-way hash function takes any input and produces a fixed-length output that cannot be reversed or predicted without guessing. Bitcoin uses hash functions throughout its operations: to link blocks together, to derive public keys from private keys, and to structure the mining process for confirming new transactions. Generating a private key involves selecting a random number from a space so vast that guessing someone's key is effectively impossible given any computational resources that exist on earth.
These foundations are the same mathematical tools and principles used to secure military communications and global banking, and are independently auditable.
In practice, these properties produce four specific protections.
-
Your private key cannot be guessed. The number of possible private keys is so large that any search is computationally impossible.
-
A valid signature cannot be forged. No one can produce a valid transaction signature without the private key, and the network can verify any signature without the key ever being revealed.
-
A valid block cannot be faked. The only known way to mine a bitcoin block is through a trial and error computation process that cannot be precomputed, meaning every valid block requires real, expended computational work.
-
Past transactions cannot be silently altered. Every block is cryptographically linked to the one before it, so changing any historical record requires redoing all the computational work that followed it.
These protections are enforced by mathematics, not by any institution's authority or policy.
Incentive alignment
Bitcoin's rules are enforced by self-interested participants and changing the rules cannot be imposed by any authority.
Miners are motivated by profit. If their operating costs exceed expected revenue, they do not operate, whereas if revenue exceeds costs, they do operate. Given that their revenues are in bitcoin and their costs are in fiat, they have a financial interest in the increased fiat value of bitcoin. Anything that undermines Bitcoin's monetary properties (fixed supply, secure verification, censorship resistance) undermines the value of the miners' revenue. Miners are therefore strongly incentivized to follow the rules, lest their blocks be rejected or the value of their revenues be diminished.
Node operators are similarly incentivized to follow Bitcoin's rules. People run their own in order to independently verify their own transactions and to ensure their preferred rules are being implemented to safeguard the value of their bitcoin. If a node operator adopted incompatible rules, the rest of the network would reject their transactions and their time and efforts would be wasted.
Altering Bitcoin's foundational properties would require convincing a globally distributed network of financially self-interested participants to adopt changes that would reduce the value of their holdings and revenues. The economics of self-interest is a force that maintains the stability of Bitcoin's monetary properties.
Energy expenditure
Producing a valid Bitcoin block requires finding a specific number that, when combined with the block's transaction data and passed through a hash function, meets a target set by the network.
There is no way to calculate this number in advance because the input includes data from the most recent block, which was produced roughly ten minutes ago. The only way to mine a block is through trial and error computation in order to win a reward paid in bitcoin. What is Bitcoin? describes Bitcoin mining as guessing a winning lottery number.
This process requires real hardware and electricity. The more computational power a miner deploys, the more likely they are to find a winning solution and earn newly issued bitcoin. A valid block is therefore proof that real work was performed. That work secures three things in Bitcoin:
-
The supply schedule. Bitcoin's rules specify exactly how much new bitcoin a miner can be rewarded per block. Any block producing more is rejected by every node in the network, and the miner's efforts are wasted.
-
Transaction permanence. Reversing a transaction in a confirmed block requires rebuilding an alternative chain that exceeds the total proof of work of the existing one. This task would demand more computational power than the rest of the network combined, making successful reorganizations practically impossible.
-
Decentralization. Controlling the transaction history would require controlling more than half the network's total computational power, an investment so large it becomes economically self-defeating.
The innovation of Bitcoin's difficulty adjustment means that global mining will always remain competitive.
Because mining is globally competitive and location-independent, it tends toward energy sources that would otherwise go unused: surplus from renewable sources, off-peak grid capacity, and stranded energy that cannot be transported to demand centers.
Every bitcoin produced and every transaction confirmed is the product of real energy expenditure. That energy is not wasted. It is used to establish and secure Bitcoin's valuable monetary properties.
How Do These Backing Forces Work Together?
The forces that back Bitcoin form a mutually self-reinforcing system that runs across three types of participants.
-
Nodes enforce the protocol rules independently because those rules protect the value of the bitcoin they hold. Any block or transaction that violates the rules is easily detected and rejected.
-
Miners expend real energy and hardware to produce blocks and are paid in bitcoin. Their revenue depends on Bitcoin's value, so they are financially motivated to enforce the rules that preserve it and reject any change that would compromise it.
-
Holders acquire bitcoin for its valuable monetary properties, most notably its scarcity. Its properties allow people to own, verify, and transact in a fixed-supply asset without any third party involved.
Cryptographic foundations and participant self-interest set a foundation for Bitcoin's monetary properties. As holders buy bitcoin to access those asset properties, market value grows, attracting miners who secure the network for profit. This adoption drives an increase in node operators who independently verify their transactions and enforce consensus rules, further hardening the monetary properties and supporting a flywheel effect. To gauge Bitcoin's success and the strength of its monetary properties, it's valuable to track hashpower, node count, and number of addresses, rather than price alone.
Bitcoin is backed by a combination of forces that had no precedent before 2009. Calling it "unbacked" is simply the wrong frame, as it is not trying to replicate the gold standard or the fiat model. Bitcoin is a new invention, giving people the ability to own a digital bearer asset with a fixed supply limit, whose history cannot be altered, and whose ownership cannot be revoked by any authority.
What is Bitcoin self-custody? covers what it means to hold your own keys in full. A history of Bitcoin exchange failures documents why the distinction between self-custody and exchange holdings matters for individual holders.
Related articles
What is Bitcoin self-custody?
How self-custody preserves the properties that give bitcoin value
The risks of holding cash in a bank
The comparison that contextualises Bitcoin's value properties