What is private key?

A secret string that proves ownership of a wallet and authorizes transactions.

Anyone with your private key controls your funds. It should never be shared or entered into a website.

The private key is the thing crypto ownership actually consists of. There is no account, no registry of who owns what, and no company holding a record it can restore. A balance belongs to whoever can produce a valid signature for it, which means the key is not a way to access your money so much as it is your money.

How it works

1. A wallet generates a very large random number. That number is the private key.
2. Elliptic curve mathematics derives a public key from it. The derivation runs one way only: the public key reveals nothing usable about the private key.
3. An address is derived from the public key by hashing, and that is what you share to receive funds.
4. To spend, the wallet signs the transaction with the private key. The network verifies the signature against the public key and accepts the transaction without ever seeing the secret.

In practice you rarely handle a raw key. Modern wallets derive a whole tree of keys from a single seed phrase under a standard, so backing up twelve or twenty-four words backs up every address the wallet will ever generate. See hd wallet and bip 39.

The security question is therefore where the key lives. A hardware wallet keeps it inside a secure element and signs on the device, so the key never reaches an internet-connected computer. A hot wallet keeps it on a machine that is online. A custodial exchange account means the exchange holds the key and you hold a claim.

Example

The key space is the reason guessing is not a threat. A private key is a 256-bit number, so there are roughly 2 to the power of 256 possibilities, a figure with about 78 digits. Trying every one is not slow, it is physically impossible with any conceivable hardware.

The practical risk sits entirely elsewhere: a phrase typed into a fake recovery page, a screenshot in cloud storage, a key generated by weak software, or a transaction signed without reading it. Every large loss you read about came from one of those, not from cryptography being broken.

Why it matters when you buy

When you buy on an exchange, the exchange holds the key and the balance is a claim against that company. Moving the asset to a wallet you control replaces counterparty risk with the responsibility for a secret nobody can reissue. Both choices are defensible; the trade is what matters, and self-custody versus exchange custody sets it out, with your first crypto wallet covering the setup.

Related terms

public key — derived from it, safe to share; seed phrase — the backup that regenerates keys; self custody — holding your own key; hardware wallet — key stored offline; custodial — someone else holds it; address — the public destination it produces.

Questions

Is my private key the same as my seed phrase?

No. The seed phrase is a human-readable master secret from which many private keys are derived. Backing up the phrase backs up every key in that wallet; backing up one key covers only one address.

Can someone steal my funds from my address alone?

No. An address is public and derived one way from the key. Knowing it lets someone watch your balance, which is a privacy concern, not a theft risk.

Where should the key actually live?

For anything you would mind losing, on a hardware device that signs offline. For small spending balances, a reputable software wallet is a reasonable trade. For an amount you are actively trading, an exchange account with strong login protection is a different risk, not a safer one.