Private Key

A private key is a long, randomly generated string of letters and numbers that grants complete control over a cryptocurrency wallet and everything it holds. It is generated using asymmetric-key cryptography, a mathematical system that produces a matching pair of keys, a private key that must be kept completely secret, and a public key, derived from it, that can be shared openly and is used to generate the wallet address others use to send funds.

The relationship between the two keys is mathematically one-directional: it is computationally easy to derive a public key and wallet address from a private key, but effectively impossible to reverse the process and derive a private key from a public key or address, even with enormous computing power. This asymmetry is what allows a wallet address to be shared freely and safely while the private key remains secure.

Whoever holds a wallet’s private key has full authority to sign transactions and move the funds inside it, which is why the phrase not your keys, not your coins is common in the crypto community. It refers to the fact that on custodial platforms, such as centralized exchanges, the platform itself holds the private keys on behalf of users, meaning the user does not have direct, independent control over their funds. Self-custody, by contrast, means a user personally holds and secures their own private key, giving them full ownership but also full responsibility for keeping it safe.

Because a private key provides irreversible access to funds, its loss or theft is one of the most serious risks in cryptocurrency. If a private key is lost, with no backup and no company able to recover it, the funds in that wallet are permanently inaccessible. If it is stolen, whether through phishing, malware, or a physical security breach, the thief gains the same complete control the rightful owner had, and the transaction moving the funds out is irreversible.

Most modern wallets represent a private key indirectly through a seed phrase, a sequence of usually twelve or twenty-four common words that can regenerate the private key and the entire wallet if it is ever lost or needs to be restored on a new device. Best practices for protecting a private key or seed phrase include writing it down on paper rather than storing it digitally, keeping it in a secure physical location, never entering it into any website or sharing it with anyone, and considering a hardware wallet for holding significant amounts of cryptocurrency long term.