Public and private keys, explained properly

A public key and a private key are a matched pair of very large numbers. One of them, the private key, is a secret that only you hold. The other, the public key, is derived from it and can be handed out to the whole world. In cryptocurrency, whoever controls the private key controls the funds; the public key — or an address derived from it — is simply where other people send money to you. Get that one split straight and most of crypto security stops feeling like arbitrary rules.

What the two keys actually are

Public-key cryptography — asymmetric cryptography, if you want the formal name — leans on two mathematically linked keys instead of one shared password. The link only runs one way. Deriving the public key from the private key is easy; working backwards, from public to private, is computationally hopeless. That asymmetry is the whole trick. It’s what lets you broadcast one half of the pair to everyone while the other half stays locked away.

Most cryptocurrencies — Bitcoin and Ethereum among them — use elliptic-curve cryptography, on a curve called secp256k1, to mint these pairs. You don’t need the maths to use any of it. But one takeaway is worth pocketing: a private key is really just a random number drawn from a range so absurdly vast that guessing someone else’s isn’t a realistic attack. The security leans on that sheer size, not on hiding the method.

How keys prove ownership without revealing themselves

Send cryptocurrency and you’re not typing a password into a central server that checks it against a list. Your wallet builds a digital signature instead. Signing chews on two inputs — the transaction details and your private key — and produces a signature that anyone can verify using your public key. That check confirms two things in one stroke: the signer held the matching private key, and nobody has altered the transaction since it was signed.

Here’s the elegant bit. The signature never leaks the private key. Each one is welded to the exact transaction it authorises, so it can’t be peeled off and reused on some other payment. This is how a fully public network lets you prove you control funds without ever broadcasting the secret that grants that control. Curious how those signed transactions then get accepted by everyone else? That’s covered in how a crypto transaction gets confirmed.

Keys, addresses, and why they are not the same

People sling “public key” and “address” around as though they’re interchangeable. They aren’t. An address is usually derived from the public key by pushing it through extra hashing and encoding steps. What comes out is shorter, carries a built-in error-checking component so a mistyped character gets caught, and keeps the raw public key hidden until the moment you actually spend.

A rough map of the three layers:

This layering is the exact reason handing out your address to receive a payment is perfectly safe. It reveals where funds can land. Not how to move them.

Seed phrases: the human-friendly form of a private key

Wrangling raw private keys by hand would be a catastrophe waiting to happen, so modern wallets wrap them in a seed phrase — recovery phrase, mnemonic, same thing — usually twelve or twenty-four everyday words. That phrase is a human-readable encoding of the master secret, and from it your wallet mathematically derives every private key and address you’ll ever use. The standard sits out in the open as BIP-39, published for anyone to read.

And here’s the consequence that actually matters: your seed phrase is your money. Anyone who reads it can regenerate every key in your wallet and stroll off with the funds — on any device, with no phone of yours and no password needed. Lose it with no backup and those keys are unrecoverable. Gone. There’s no support line to reset it, because literally nobody else holds a copy. That’s not a flaw in the system. That’s the design doing exactly what it promised.

Custodial versus self-custody: who holds the key

Whether you personally touch keys at all depends on how you hold your crypto. Under self-custody, your wallet stores the private keys and you’re the only one who can sign. Under a custodial arrangement — most centralised exchanges work this way — the company holds the keys, and what you hold is an account balance that’s really a claim against them, worked through an ordinary login. That worn-out line “not your keys, not your coins” sums up the trade cleanly. Custody hands convenience and account recovery to a third party, and in return you’re trusting that third party with the keys.

Neither model wins outright; they just carry different risks. Self-custody wipes out counterparty risk but dumps the full weight of key security onto you. Custody lifts that weight — while dragging back in the very middleman that public-key cryptography was invented to make optional. Choose your poison with your eyes open.

Protecting a private key: the defensive basics

Because a private key or seed phrase hands over total control, nearly every real-world loss traces back to the secret being exposed or misplaced — not to anyone cracking the cryptography itself. So sensible defence fixes its attention on where that secret lives:

• Keep the seed phrase offline. Write it on paper, or stamp it into metal. Either way it stays clear of malware, cloud backups, and screenshots that quietly sync themselves to some server.
• Never type it into a website, and never share it. No real wallet, exchange, or “support agent” will ever need your seed phrase. A request for it is a theft attempt. Full stop.
• Watch for fake apps and lookalike sites. A classic attack coaxes you into entering your phrase on a convincing clone. Download wallets from official sources only, and eyeball addresses before you trust them.
• Think about a hardware wallet for larger sums. These gadgets keep the private key sealed inside dedicated hardware and sign transactions internally, so the secret never so much as touches an internet-connected computer.

Spot the pattern? Every one of these guards the secret itself. The cryptography isn’t the soft spot. The handling of the key is — every single time.

Why randomness is the quiet foundation

All of it rests on one assumption that’s easy to miss: that your private key was picked at random from a range so enormous nobody could ever stumble onto the same number. The security of the entire scheme depends less on the elegance of the maths than on the quality of that randomness. Generate keys from a weak or predictable source and an attacker who notices the flaw can regenerate them — without laying a finger on the underlying cryptography.

This isn’t hypothetical. There have been real cases of funds stolen because keys came out of flawed software with poor randomness, or from human-invented “brain wallet” passphrases that turned out to be guessable. For an ordinary user the lesson is reassuring rather than alarming: reputable wallets handle key generation properly, pulling from strong sources of randomness. Which is exactly why you should let a trusted wallet create your keys and seed phrase rather than trying to dream them up yourself. A phrase you cooked up in your own head is far easier to guess than one a good wallet generates. Human brains, it turns out, make lousy random number generators.

What this means

Public and private keys take a genuinely hard problem — proving you own something on a network with no central authority — and turn it into a routine operation. The public key and address let the world pay you and check your signatures. The private key, which you’ll usually meet as a seed phrase, is the single thing that authorises spending. Once that division clicks into place, the security rules stop feeling arbitrary. You can share an address without a second’s hesitation, and you have to guard a seed phrase as if it were the funds themselves — because, functionally, it is. If any of the ideas underneath this feel new, it’s worth starting with what a blockchain actually is.