›

Nonce: Meaning in English, Cryptography, and Bitcoin Mining

A nonce is something used for one occasion only. In everyday English it survives in the phrase "for the nonce"; in cryptography it is a one-time value that defeats replay attacks; in Bitcoin mining it is the 32-bit field a miner increments while searching for a valid block hash.

Three different fields use the word "nonce", and they all mean the same thing underneath: something that is used once, for one occasion, and then discarded. This page covers the everyday English word, its etymology, the cryptographic sense, the Bitcoin mining sense — and Nonce, the mining management platform named after it.

nonce/nɒns/ UK/nɑːns/ US

Noun and adjective. From Middle English, around 1200. Plural nonces.

The everyday English word

1nounarchaic

The one particular occasion, time, or purpose. Now used almost exclusively inside the fixed phrase for the nonce, meaning "for now", "for this one time", "for the present purpose".

2adjectivelinguistics

Made or coined for a single occasion, not intended to last. The standard example is a nonce word: a word invented on the spot for one particular use, which never enters general circulation.

Shakespeare and Joyce are both heavy coiners of nonce words.

The adjective is much younger than the noun. James Murray, editing the New English Dictionary — the work that became the Oxford English Dictionary — needed a label in 1884 for words that appeared to have been used only once, for the occasion. He coined nonce-word, and the adjective spread from that editorial convention into ordinary usage.

Where the word comes from

"Nonce" is a mistake that stuck. The original Middle English phrase was for then anes — "for the one purpose" — where then was an inflected form of the definite article. Readers gradually moved the word boundary in the wrong place and re-split then anes as the nanes. The stray n slid off the article and onto the following word, and English was left with for the nonce.

This kind of misdivision, called rebracketing, has happened repeatedly in English:

Original	Rebracketed as	Result
for then anes	for the nanes	nonce
an ewt	a newt	newt
a nadder	an adder	adder
a napron	an apron	apron

The phrase is attested from around 1200, and Chaucer uses for the nones in the General Prologue to The Canterbury Tales — by then it had already become a handy metrical filler for poets who needed an extra syllable.

One thing the etymology is not: "number used once". That gloss is a backronym, invented later because it happens to describe the cryptographic sense neatly. It is a good mnemonic and a bad history.

Nonce in cryptography

3nouncryptography

An arbitrary value that a protocol uses exactly once, in order to make a message or session unique. A nonce is what stops an attacker from recording valid traffic and replaying it later to impersonate a legitimate party.

The server issues a fresh nonce with every authentication challenge, so a captured response is worthless a second time.

The mechanism is simple. If a message contains a value the recipient has never seen before and will never accept again, then a captured copy of that message cannot be reused. Without one, an attacker does not need to break the encryption at all — they can just send the same encrypted order ten more times.

Nonces show up throughout modern security work:

HTTP digest authentication sends a new nonce with every 401 challenge, so each response is valid exactly once.
AEAD ciphers such as AES-GCM and ChaCha20-Poly1305 pair a nonce with the key, so the same key never produces the same keystream twice. Reusing a nonce here is catastrophic.
Ethereum accounts carry a transaction nonce that increments with each transaction, fixing ordering and preventing the same transaction from being mined twice.
Signed API requests commonly include a nonce and a timestamp so an intercepted request cannot be resubmitted.

The term entered the security literature in 1978, in Needham and Schroeder's work on authentication in large networks.

Nonce in Bitcoin mining

4nounbitcoin

The 4-byte field at the end of the Bitcoin block header that a miner varies while searching for a hash below the difficulty target. The nonce that produces such a hash is the proof of work.

At 100 TH/s, a single miner burns through the entire 32-bit nonce range roughly forty times a second.

Every Bitcoin block starts with an 80-byte header made of six fields. Five of them are determined by the network and by the block's contents. The sixth is free:

Version4B

Block version and signalling bits

Prev Block Hash32B

Hash of the previous block header

Merkle Root32B

Commitment to every transaction in the block

Timestamp4B

Seconds since the Unix epoch

Bits4B

Difficulty target, compact form

Nonce4B

32-bit counter the miner varies

80 bytes total. The nonce is the one field a miner is free to change at zero cost — which is why it is the innermost loop of the search.

How the search actually works

The miner assembles a candidate block and builds its 80-byte header.
It hashes the header with double SHA-256 — SHA256(SHA256(header)).
It compares the result against the difficulty target encoded in the Bits field.
If the hash is not below the target, the miner increments the nonce and hashes again.
If it is below the target, the block is valid. The miner broadcasts it, and every other node can verify the work in a single hash.

That asymmetry is the whole point of proof of work. Finding the nonce takes the network quintillions of attempts; checking it takes one.

When the nonce runs out

A 32-bit field holds 4,294,967,296 values — roughly 4.3 billion. That sounds enormous, and it is completely inadequate. A single modern ASIC runs through the entire nonce range in a fraction of a second, and the network as a whole needs on the order of 10²³ attempts per block.

So miners extend the search by changing something else in the header, which resets the nonce space:

extraNonce

Arbitrary bytes inside the coinbase transaction. Changing them changes that transaction, which changes the merkle root, which changes the header — yielding a fresh 4.3 billion nonces. This is the standard outer counter.

Timestamp rolling

The timestamp field can legitimately advance within the window the consensus rules allow, and each new value gives another full nonce range.

Version rolling

Unused bits of the version field can be varied as extra search space. This is the mechanism standardised for ASICBoost and negotiated over Stratum.

The header nonce is therefore the inner counter and the extraNonce the outer one. Between them a miner has effectively unlimited search space, and hashrate — hashes per second — is simply the rate at which a fleet gets through nonces.

A note on British usage

In British and Irish slang the same spelling carries a completely unrelated and highly derogatory sense, recorded from the mid-1970s, referring to a sex offender. It shares no etymology with the word described above. It is worth knowing about if you use the technical term in front of a British audience; nothing else on this page relates to it.

Nonce, the Bitcoin mining platform

Nonce is a management platform for Bitcoin mining operations — built by miners, for miners. The name is the unit of work itself: every hash your fleet computes is one more nonce tried, and how many nonces per second your sites get through is exactly what you are being paid for.

The product is organised around three jobs:

Monitor Metrics

Know what's working and what's not, across every site and every machine, so problems get fixed fast.

Manage Assets

Cut the time spent on manual fleet work and keep machines online — discovery scans, batch power, firmware, reboot, locator light, and pool changes across thousands of miners at once.

Automate Strategy

Let the data drive the strategy — mining modes, auto reboot, and shortcuts that push the fleet toward maximum bitcoin per watt.

Operationally it is organised as workspaces containing farms, with an Agent installed on-site to discover and talk to miners. It runs on web, mobile, and Slack; it is SOC 1 Type 2 audited; and it exposes a public API and an MCP server so AI assistants can query and act on the fleet directly.

Product — nonce.app
Documentation — docs.nonce.app

Go deeper

This entry is the overview. These pieces take the mining sense further:

Frequently asked questions

What does nonce mean?

A nonce is something used for a single occasion. As a noun it means the one particular occasion or purpose, and it survives almost entirely inside the fixed phrase "for the nonce" — meaning for now, for this one time. As an adjective it labels something coined or made for one use only, as in "nonce word". Modern technical English then borrowed the word: in cryptography a nonce is a value used exactly once in a message or session, and in Bitcoin mining it is the counter a miner varies to search for a valid block hash.

Where does the word nonce come from?

It comes from a Middle English slip of the pen. The phrase was "for then anes" — "for the one purpose" — where "then" was a form of the definite article. Over time readers moved the word boundary and re-split "then anes" as "the nanes", so the stray "n" migrated onto the following word and produced "nonce". English has done this before: "an ewt" became "a newt", and "a nadder" became "an adder". The phrase is attested from around 1200 and Chaucer uses "for the nones" in the General Prologue to The Canterbury Tales.

Does nonce stand for "number used once"?

No. "Number used once" is a backronym — a memorable gloss invented after the fact because it happens to describe the cryptographic sense well. The real origin is the Middle English phrase "for then anes". The gloss is still a useful mnemonic for engineers, but it is not the etymology.

Is nonce still a real English word?

Yes, though the standalone noun is archaic. Outside the fixed phrase "for the nonce" you will rarely meet it in general prose. The adjective is younger than the noun: James Murray coined "nonce-word" as an editorial label in the New English Dictionary (later the Oxford English Dictionary) in 1884, for words that appear to have been used only for the occasion.

What is a nonce in cryptography?

A cryptographic nonce is an arbitrary value that a protocol uses only once. Its job is to make every message or session unique so an attacker cannot capture valid traffic and replay it later. HTTP digest authentication issues a fresh nonce with each challenge for exactly this reason, and stream ciphers and AEAD modes pair a nonce with the key so the same key never encrypts two messages under the same keystream. The term entered the security literature in 1978 with Needham and Schroeder.

What is the nonce in Bitcoin mining?

It is a 4-byte (32-bit) field at the end of the 80-byte Bitcoin block header. Mining is a search: the miner assembles a candidate header, hashes it with double SHA-256, and checks whether the result is below the difficulty target. If not, it changes the nonce and hashes again. The nonce is the cheapest thing in the header to change, so it is the innermost loop of the search. A nonce that produces a hash below the target is the proof of work that makes the block valid.

How many nonce values are there, and what happens when they run out?

A 32-bit field holds 4,294,967,296 values — about 4.3 billion. A modern ASIC exhausts that entire range in well under a second, so the nonce alone is nowhere near enough search space. When it overflows, the miner changes something else in the header to get a fresh 4.3 billion nonces: it increments the extraNonce inside the coinbase transaction, which changes the merkle root; it rolls the timestamp forward within the allowed window; or it rolls unused bits of the version field. Each of those resets the nonce search.

What is the difference between the nonce and the extraNonce?

The nonce is a real field in the block header — 4 bytes, hashed directly. The extraNonce is not a header field at all: it is arbitrary data the miner puts in the coinbase transaction. Changing it changes that transaction, which changes the merkle root, which changes the header. So the extraNonce is the outer counter and the header nonce is the inner counter. Together they give the miner effectively unlimited search space.

Why is the Bitcoin mining platform Nonce called Nonce?

Because the nonce is where mining work actually happens. Every hash a fleet computes is one more nonce tried, and the number of nonces a site gets through per second is its hashrate. Nonce the platform is named for that unit of work: it monitors, manages, and automates the machines doing the searching, so more of the fleet is producing valid work more of the time.

›