A public key is the shareable half of a cryptographic key pair that lets others send you crypto and verify your signatures, while the private key is the secret half that proves ownership and authorises spending. Whoever controls the private key controls the funds, which is why it must never be shared.
Almost every crypto security rule comes back to this one pair of numbers. If you understand the difference, advice such as “never share your seed phrase” suddenly makes sense. This guide explains the idea with everyday analogies, shows how keys relate to addresses and signatures, and lists practical habits for keeping your private key safe. It builds on what a crypto wallet is and crypto wallet addresses.
Key takeaways
- The public key (and the address derived from it) can be shared safely; the private key must stay secret.
- A private key creates digital signatures that prove you authorised a transaction without revealing the key itself.
- Your seed phrase is a human-readable backup that can regenerate all your private keys.
- Nobody legitimate will ever ask for your private key or seed phrase, and lost keys usually cannot be recovered.
The basic idea: a lock everyone can see and a key only you hold
Public-key cryptography, also called asymmetric cryptography, uses two mathematically linked numbers. They are generated together as a pair. What one does, only the other can check.
A common analogy is a mailbox with a slot. Anyone can drop a letter in through the slot, which is like using your public address to send you funds. But only the person with the physical key can open the box and take things out, which is like using your private key to spend. The analogy is imperfect, because on a blockchain the coins are not physically in the box; they are records on a shared ledger, and the key is what authorises changes to those records. Still, it captures the one-way nature of the relationship.
| Public key | Private key | |
|---|---|---|
| Who can see it | Anyone | Only you |
| Main job | Receive funds, verify signatures | Sign transactions, prove ownership |
| If someone else learns it | Little risk beyond privacy | They can take your funds |
| If you lose it | You can generate it again from the private key | Funds are usually lost for good |
How keys, addresses and seed phrases fit together
The relationship is one-directional. A private key is a very large random number. A public key is calculated from it using a mathematical process that is easy to run forwards and, as far as anyone knows, practically impossible to reverse. An address is then usually derived from the public key by further hashing and formatting. The chain looks like this:
- Your wallet generates a random private key.
- The public key is calculated from the private key.
- The address is calculated from the public key.
- You share the address to receive funds.
Many wallets do not show you the raw private key. Instead they give you a seed phrase, typically 12 or 24 ordinary words, which can regenerate a whole family of private keys. That makes the seed phrase equivalent to all of your private keys at once. Read seed phrase security for storage guidance.
Terminology can be slippery. Some wallets and guides use “public key” loosely to mean the address. In practice, when you are told to share your “public address” with a sender, that is safe. When you are asked for a “private key”, a “recovery phrase” or “secret words”, the answer is always no.
What a digital signature does
When you send crypto, your wallet does not transmit your private key. Instead it uses the key to produce a digital signature for that specific transaction. The network can check the signature against your public key and confirm two things: the transaction was authorised by the holder of the matching private key, and it has not been altered since. The key itself is never revealed.
This is why a signature on one transaction cannot simply be copied onto a different one. Each signature is tied to the exact contents it was made for. For a fuller walk-through of what happens next, see how crypto transactions work.
Why a signature request still deserves care
Signing is powerful. A malicious website can ask you to sign a message that looks harmless but grants permission for a smart contract to move your tokens. Your private key stays hidden, yet you have still handed over access. Always read what you are signing, and be suspicious of unexpected pop-ups. More on this in crypto scams.
How to keep your private key safe
Because there is no bank to call, you carry the responsibility. These habits cover most risks:
- Never type your seed phrase into a website, chat, form or email, and never photograph it or store it in cloud notes.
- Write it down offline and keep it in a secure place; consider a durable backup such as metal for long-term holdings.
- Use a hardware wallet for larger amounts so that the key never touches an internet-connected device. See hot wallet vs cold wallet.
- Ignore anyone claiming to be “support” who asks for your keys. Genuine support never needs them.
- Buy devices only from the manufacturer and download wallet software from official sources.
- Test your backup with a small amount before relying on it.
Custodial vs non-custodial: who holds the key?
On an exchange account, the exchange usually holds the private keys on your behalf, and you log in with a password. This is called custodial. It is convenient and you can often reset your password, but you depend on the platform’s security and solvency. With a self-custody wallet you hold the keys yourself, which gives you full control but also full responsibility. Neither is automatically right for everyone; the best choice depends on the amount, your experience and how carefully you can manage backups. The phrase “not your keys, not your coins” summarises the trade-off, though it does not mean that using an exchange is always unwise.
As an illustration, imagine someone holding the equivalent of a small sum for everyday use. A reputable app with strong two-factor protection may be sensible for that person. Someone with a larger long-term holding may prefer a hardware wallet and a carefully stored backup. These are examples only, not recommendations.
Can someone work out my private key from my public key or address?
With current technology, no. The mathematics is designed to be one-way. The real risks come from poor storage, malware and scams, not from cracking the maths.
Is a seed phrase the same as a private key?
Not exactly. A seed phrase is a backup from which many private keys can be generated. Treat it with at least the same care as a private key, since it gives access to everything derived from it.
Can I change my private key?
Not for an existing address. If you suspect a key is exposed, create a new wallet with a fresh seed phrase and move your funds to it promptly.
What if I lose my private key?
If you have no backup, the funds are usually unrecoverable, because no company or developer can reset a self-custody wallet. This is why backups matter.
Is it safe to share my wallet address?
Yes, it is designed to be shared. Remember that blockchains are public, so anyone with your address can see its balance and history, which has privacy implications.
Next step: learn how to store your backup properly in seed phrase security and decide where your keys should live with hot wallet vs cold wallet.
