Public Key vs Private Key Explained

A private key is a secret number that lets you authorize transactions from a crypto address, while a public key is derived from it and can be shared so others can verify your signatures and send you funds. The private key proves ownership; the public key (and the address made from it) is safe to share. Anyone who gets your private key controls your crypto.

This key pair is the foundation of how cryptocurrencies work. Understanding it explains why "not your keys, not your coins" is a common saying, why nobody legitimate will ever ask for your private key or seed phrase, and why lost keys can't be reset.

How Public-Key Cryptography Works

Public-key (or asymmetric) cryptography uses two linked keys:

1. 1Private key — a very large random number, kept secret.
2. 2Public key — calculated from the private key using a one-way mathematical function.

"One-way" is the key point. Computing the public key from the private key takes a fraction of a second; working backward from the public key to the private key would take an impractical amount of computing time with current technology. That's why you can safely publish the public key.

Bitcoin and Ethereum both use elliptic-curve cryptography over a curve called secp256k1. Other blockchains, including Solana, use a different curve (Ed25519), but the principle is the same.

Digital Signatures: How the Keys Work Together

When you send crypto, your wallet:

1. 1Builds a transaction ("send 0.1 from my address to this address").
2. 2Signs it with your private key, producing a digital signature unique to that transaction.
3. 3Broadcasts the transaction and signature to the network.

Nodes then use your public key to verify that the signature is valid and that the transaction wasn't altered. They never see your private key. If anyone changes even one character of the transaction, the signature no longer matches.

Private Key vs Public Key vs Address

On Ethereum, for example, an address is the last 20 bytes of a hash of the public key, written in hexadecimal with a 0x prefix.

Where Seed Phrases Fit In

Modern wallets don't make you manage individual private keys. Instead, they generate a seed phrase (usually 12 or 24 words) and derive a whole tree of private keys from it — one for each address, across many blockchains.

That means:

• Backing up the seed phrase backs up every key in the wallet.
• Anyone who learns the seed phrase can recreate every key.
• An exported single private key controls only one address.

See what a seed phrase is and how to back it up properly.

Custody: Who Holds the Private Key?

Our comparison of custodial vs non-custodial wallets goes into more detail.

A Simple Analogy

Think of a mailbox with a slot in the front and a locked door at the back:

• The address is the mailbox's location — you can publish it so anyone can drop mail in.
• The public key is like a description of the lock that lets the post office confirm a key genuinely belongs to this box.
• The private key is the only key that opens the back door and lets mail out.

The analogy isn't perfect — in crypto, the private key creates a signature rather than physically opening anything — but it captures the essential point: sharing the address is safe, sharing the key is not.

How Private Keys Get Stolen

Attackers rarely "crack" keys. They trick people into revealing them:

• Fake support agents asking you to "validate" or "sync" your wallet by entering your seed phrase.
• Phishing sites and fake wallet apps that look like the real thing.
• Malware that searches devices for key files, screenshots or notes containing seed phrases.
• Cloud backups of photos or documents with your seed phrase.

Warning signs that should make you stop immediately:

• Any website, app or person asking for your seed phrase or private key.
• A "wallet validation", "airdrop claim" or "unlock" process that wants your recovery words.
• Pressure to act quickly.

Practical Rules for Key Safety

1. 1Never type your seed phrase or private key into a website or share it with anyone.
2. 2Store backups offline — on paper or metal — not in photos, email or cloud notes.
3. 3Use a hardware wallet for meaningful amounts.
4. 4Verify addresses on the device screen before signing.
5. 5Keep separate wallets for everyday experimenting and long-term savings.

Bottom line

Your private key is your crypto: it signs transactions, and whoever holds it controls the funds. Your public key and address are designed to be shared so others can pay you and verify your signatures. Guard the private key and seed phrase as the only things that truly matter, and treat any request for them as an attack. For more fundamentals, browse our basics category.