What Is a Public Key vs. a Private Key?

If you have ever set up a crypto wallet, you have generated a key pair, whether you realized it or not. Almost everything in crypto involving ownership comes back to two numbers that are mathematically linked: a private key and a public key. Understanding the relationship between them is probably the single most useful piece of knowledge a newcomer can pick up, because it explains deposits, withdrawals, security warnings, and the phrase "not your keys, not your coins" all at once.

Start with the private key. Despite the name, it is not a password in the usual sense. It is an extremely large random number, typically 256 bits long, which is a quantity so vast that the number of possible values is comparable to the number of atoms in the observable universe. That randomness is what makes it secure. Nobody can guess it, and no central authority issues it. Your wallet software simply picks a number at random when you create an account, and that number is yours.

The public key is derived from the private key using a one-way mathematical function, usually based on elliptic curve cryptography. "One-way" is the critical part. Running the function forward is easy: give a computer a private key and it produces the matching public key almost instantly. Running it backward is, as far as anyone knows, computationally infeasible. There is no shortcut that lets someone take a public key and work out the private key behind it. This asymmetry is why the system is called public-key cryptography, and it is the same family of mathematics that secures web traffic and encrypted messaging.

From the public key, wallets usually derive a shorter, more user-friendly string called an address, often by running the public key through a hash function and adding a checksum so that typos are caught before a transaction is sent. The address is what you hand out when someone wants to pay you. Sharing it reveals nothing dangerous. At worst, anyone who knows your address can look up the balance and transaction history associated with it on the blockchain, since those records are public by design.

So what does the private key actually do? It signs. When you send a transaction, your wallet constructs a message describing what you want to do, then uses the private key to produce a digital signature over that message. The signature is unique to both the key and the exact contents of the transaction. Network participants can take the signature, the transaction, and your public key, and verify mathematically that the signature could only have been produced by the holder of the matching private key. Crucially, they verify this without ever seeing the private key itself. It never leaves your device and never touches the blockchain.

This is also why altering a signed transaction is impossible. Change even one character of the amount or the destination, and the signature no longer matches, so the network rejects it outright.

The practical consequences follow directly from the math. Because only the private key can produce valid signatures, whoever holds the private key controls the funds. There is no account recovery department, no identity check, no way to prove you are the "real" owner by any means other than possessing the key. If someone copies your private key, they can move your assets immediately and irreversibly. If you lose it with no backup, the funds remain visible on the blockchain forever but are permanently unspendable.

Most modern wallets hide raw private keys behind a seed phrase, a sequence of ordinary words that acts as a master secret. From that one phrase, the wallet deterministically derives many private keys, and from those, many public keys and addresses. This is why backing up the seed phrase backs up the whole wallet, and why anyone who sees your seed phrase effectively holds every private key it generates.

The rule of thumb is simple. Public keys and addresses are like an email address: share them freely. Private keys and seed phrases are the account itself, not a credential for it. No legitimate service, support agent, or software update ever needs to see them, and typing them into a website or chat window is the most common way people lose funds.

This article is for general education only — not financial advice, and nothing here is a recommendation to buy, sell, or hold any asset. Cryptocurrency carries real risk of loss; always do your own research before making a financial decision.