Private key

A private key is a secret number, generated using cryptographic randomness, that proves ownership of a blockchain address and authorizes spending the funds held there. Mathematically, it is typically a 256-bit integer, often shown as a 64-character hexadecimal string, from which the matching public key is derived through elliptic curve multiplication (secp256k1 on Bitcoin and Ethereum). That derivation only works in one direction: computing a public key from a private key is trivial, but reversing the process is computationally infeasible with current technology.

Whoever holds the private key controls the assets at its corresponding address, in full, with no third party able to intervene. To move funds, a wallet uses the private key to generate a digital signature over the transaction data. This signature proves control of the key without ever revealing it, and anyone can verify it against the public key. Because private keys are long and unwieldy to manage individually, most modern wallets don't expose them at all. Instead they derive an entire tree of private keys from a single seed phrase, a human-readable backup of 12 or 24 words that can regenerate every key in the wallet if a device is lost.

The core risk is simple but unforgiving: anyone who obtains a private key, whether through malware, a phishing site, a screenshot, or careless storage, gains complete and irreversible control of the associated funds. There is no password reset and no customer support that can undo a theft. Common precautions include never typing a key into a website, storing it offline in a hardware wallet or on paper, and splitting backups across secure physical locations.