Public and private keys, explained properly

A public key and a private key are a matched pair of very large numbers. The private key is a secret only you hold; the public key is derived from it and can be shared freely. In cryptocurrency, control of the private key is what lets you move funds, and the public key (or an address derived from it) is where others send funds to you.

What the two keys actually are

Public-key cryptography, also called asymmetric cryptography, uses two mathematically related keys instead of a single shared password. The relationship is one-way: it is easy to calculate the public key from the private key, but computationally infeasible to work backwards from the public key to the private key. That asymmetry is the whole point. It lets you publish one half of the pair to the world while keeping the other half secret.

Most cryptocurrencies, including Bitcoin and Ethereum, use elliptic-curve cryptography (specifically a curve called secp256k1) to generate these pairs. You do not need the mathematics to use it, but the takeaway matters: a private key is effectively a randomly chosen number from a range so enormous that guessing another person’s key is not a realistic attack. The security rests on that size, not on secrecy of the method.

How keys prove ownership without revealing themselves

When you send cryptocurrency, you are not typing a password into a central server that checks it. Instead, your wallet creates a digital signature. Signing takes two inputs — the transaction details and your private key — and produces a signature that anyone can verify using your public key. Verification confirms two things at once: that the signer held the matching private key, and that the transaction has not been altered since it was signed.

Crucially, the signature never exposes the private key. Each signature is specific to the exact transaction it authorises, so it cannot be copied onto a different payment. This is how a fully public network can let you prove control of funds without ever transmitting the secret that grants that control. If you want to see how those signed transactions then get accepted by the network, we cover that in how a crypto transaction gets confirmed.

Keys, addresses, and why they are not the same

People often use “public key” and “address” interchangeably, but they are distinct. An address is usually derived from the public key by running it through additional hashing and encoding steps. The result is shorter, includes an error-checking component so typos are caught, and hides the raw public key until you actually spend from it.

A rough way to hold the three layers in mind:

This layering is why sharing your address to receive a payment is completely safe. It reveals where funds can arrive, not how to move them.

Seed phrases: the human-friendly form of a private key

Managing raw private keys by hand would be error-prone, so modern wallets use a seed phrase (also called a recovery phrase or mnemonic) — typically 12 or 24 ordinary words. That phrase is a human-readable encoding of the master secret from which your wallet mathematically derives all its private keys and addresses. The standard behind this is documented publicly as BIP-39.

The practical consequence is important: your seed phrase is your money. Anyone who reads it can regenerate every key in your wallet and take the funds, on any device, without needing your phone or password. Losing it, if you have no backup, means the keys cannot be recovered and the funds are permanently unreachable. There is no support line that can reset it, because no one else holds a copy.

Custodial versus self-custody: who holds the key

Whether you personally handle keys depends on how you hold your crypto. In self-custody, your wallet stores the private keys and you alone can sign. In a custodial arrangement — most centralised exchanges — the company holds the keys and you hold an account balance that is really a claim against them, controlled by a normal login. The phrase “not your keys, not your coins” captures the trade-off: custody hands convenience and account recovery to a third party in exchange for trusting them with the keys.

Neither model is universally correct; they carry different risks. Self-custody removes counterparty risk but puts the entire burden of key security on you. Custody removes that burden but reintroduces the very intermediary that public-key cryptography was designed to make optional.

Protecting a private key: the defensive basics

Because a private key or seed phrase grants complete control, most real losses come from the secret being exposed or lost rather than from anyone breaking the cryptography. Sensible defence focuses on where that secret lives:

• Keep the seed phrase offline. Writing it on paper or stamping it into metal avoids exposing it to malware, cloud backups, or screenshots that sync to a server.
• Never enter it into a website or share it. No legitimate wallet, exchange, or “support agent” needs your seed phrase. Any request for it is a theft attempt.
• Beware fake apps and lookalike sites. A common attack is tricking you into typing your phrase into a convincing clone. Download wallets only from official sources and verify addresses carefully.
• Consider a hardware wallet for larger amounts. These devices keep the private key inside dedicated hardware and sign transactions internally, so the secret never touches an internet-connected computer.

Notice that all of these defend the secret itself. The cryptography is not the weak point; the handling of the key is.

Why randomness is the quiet foundation

Everything above rests on one assumption that is easy to overlook: that your private key was chosen at random from an unimaginably large range, so that no one else could ever land on the same number. The security of the whole scheme depends less on the elegance of the mathematics than on the quality of that randomness. If keys are generated from a weak or predictable source, an attacker who understands the flaw can regenerate them without ever breaking the underlying cryptography.

This is not merely theoretical. There have been real cases where funds were stolen because keys were produced by flawed software with poor randomness, or from human-chosen “brain wallet” passphrases that were guessable. The lesson for an ordinary user is reassuring rather than alarming: reputable wallets handle key generation properly, drawing on strong sources of randomness, which is exactly why you should let a trusted wallet create your keys and seed phrase rather than trying to invent them yourself. A phrase you thought up in your head is far easier to guess than one a good wallet generates.

What this means

Public and private keys turn a hard problem — proving you own something on a network with no central authority — into a routine operation. The public key and address let the world pay you and check your signatures; the private key, usually experienced as a seed phrase, is the sole thing that authorises spending. Understanding that division makes the security rules stop feeling arbitrary: you can share an address without a second thought, and you must guard a seed phrase as if it were the funds themselves, because functionally it is. If any of the underlying ideas here are unfamiliar, it helps to start with what a blockchain actually is.