A recipe nobody can rewrite
Picture a vending machine that bakes one fresh loaf of bread every ten minutes and hands it to whoever solved that round's puzzle. Now add a strange rule baked into the machine: every four years it bakes half as much bread per loaf as before. Do the arithmetic far enough and the loaves shrink toward crumbs, and the *total* bread the machine will ever bake settles on one final, fixed number. That, in a nutshell, is how Bitcoin issues coins.
Most money is created at someone's discretion: a central bank decides to print more, and the supply grows by however much it chooses. Bitcoin took the opposite stance. Its issuance is pre-scheduled — written into the rules every full node enforces — so the exact number of new coins minted in any given week was knowable on day one and will be the same in a hundred years. The plan for how a cryptocurrency creates and distributes its coins is called its tokenomics, and Bitcoin's is famously rigid: a hard ceiling of 21 million coins, and not one more.
Halvings: the supply that keeps slowing
New coins enter the world only one way: as a reward paid to whoever wins the proof-of-work race and adds the next block. This payout is called the block subsidy, and it is the engine of mining. At launch each block paid 50 new coins. But roughly every four years — precisely, every 210,000 blocks — that subsidy is cut in half. This event is the halving.
Era Block reward New coins added in the era
1 50 BTC 10,500,000
2 25 BTC 5,250,000
3 12.5 BTC 2,625,000
4 6.25 BTC 1,312,500
5 3.125 BTC 656,250
... ... ...
total -> ~21,000,000 (approaches, never exceeds)Here is the quietly beautiful part. Adding up 50 + 25 + 12.5 and so on forever does not blow up to infinity — it converges, like a ruler you keep halving that never quite reaches the next mark. The math guarantees the running total approaches 21 million and stops there. Because each halving makes new coins scarcer on a fixed timetable, Bitcoin is called disinflationary: the supply still grows, but the *rate* of growth keeps falling, heading toward zero around the year 2140 when the last fraction of a coin is mined.
Satoshis: dividing the coin
If there will only ever be 21 million coins, how could it serve billions of people? The answer is that a Bitcoin is not really the smallest unit. Each coin divides into 100 million tiny pieces called satoshis, named after Bitcoin's pseudonymous creator. The whole network actually counts everything in satoshis under the hood; the friendly "1 BTC" you see is just a label for 100 million of them.
1 BTC = 100,000,000 satoshis (sats)
0.001 BTC = 100,000 sats
0.00000001 BTC = 1 sat (smallest unit)
Total cap: 21,000,000 BTC
= 2,100,000,000,000,000 sats (2.1 quadrillion)The "digital gold" idea
A fixed, predictable supply is why many people reach for the phrase "digital gold." The comparison is about *behavior*, not value. Gold is prized partly because no one can conjure more of it at will — mining it is slow and costly, so its quantity rises only gradually and unpredictably. Bitcoin aims for an even stricter version of that property: its issuance is not just slow but mathematically capped and scheduled in advance.
This is where the phrase store of value comes in: the hope that something whose supply can't be inflated away will hold its purchasing power over long stretches of time. It's a *design goal*, born from the cap, not a guarantee — and we'll be careful to keep those two apart in the next section.
What a cap does — and doesn't — promise
It helps to be precise about what the 21-million cap actually delivers. It does guarantee scarcity: there is a known, unchangeable maximum, and the rate of new supply is transparent to everyone. It does make the rules predictable — no committee can quietly double the money supply, because every full node would simply reject blocks that mint too many coins. That credibility, enforced by software rather than promises, is the real product.
But a cap does not guarantee that any one coin will be worth a particular amount, or that its worth will rise — supply is only one side of a market, and demand can move in any direction. Nor does scarcity protect coins you lose: a forgotten password or a discarded drive can put coins permanently out of reach, which actually nudges the *usable* total below 21 million. And the cap says nothing about how the network stays secure once the subsidy shrinks toward zero — by then, miners are expected to be paid mostly through transaction fees instead.