What is a private key in crypto? Meaning, examples and safety
A private key in crypto is a secret number that proves you own a blockchain address and lets you approve, or sign, transactions from it. Whoever knows the private key controls the funds, so it works like the only key to a safe that has no locksmith. Your wallet keeps it for you, usually behind a seed phrase, and you should never type it into a website or share it with anyone.
What is a private key in crypto, in plain words?
A private key is a very large, randomly generated number that only you should know. From it, your wallet software derives your public key and your wallet address, the part you share so people can send you crypto.
Think of it as three layers:
- Private key: the secret. It signs transactions and gives full control over the funds.
- Public key: calculated from the private key. It lets the network check your signatures.
- Wallet address: a shorter code made from the public key. This is what you give someone to receive funds.
The maths only works one way. Turning a private key into a public key takes a fraction of a second; turning a public key back into the corresponding private key is, with today’s computers, practically impossible.
What does a private key look like?
A bitcoin private key is a 256 bit number. Wallets usually show it as 64 letters and numbers in hexadecimal (0 to 9 and a to f), or in a shorter Bitcoin format that starts with a 5, K or L. A shortened, made-up example looks like this: e9873d79c6d8…aa33262.
The number range is so large that guessing someone else’s unique private key is not a realistic attack. Thieves do not guess keys; they trick people into revealing them or steal them from badly protected devices.
How does a private key work?
A private key works by creating a digital signature. When you send crypto, your wallet takes the transaction information (amount, recipient, fee) and uses the private key to digitally sign it. The network then checks that signature against your public key.
That check proves two things without ever revealing the key: that the owner of the address authorised the payment, and that nobody changed the details afterwards. This is why the private key never needs to leave your wallet, and why nobody legitimate will ever ask for it.
Private key vs public key
| Private key | Public key | |
|---|---|---|
| Who sees it | Only you | Anyone you transact with, and the whole network once you spend |
| What it does | Signs transactions, gives access to your funds | Verifies signatures; your address is derived from it |
| Safe to share? | Never | Yes |
| If lost | Funds are lost unless you have a backup | Can be recalculated from the private key |
Seed phrase vs private key
A seed phrase, also called a recovery phrase, is a list of 12 or 24 words. Modern wallets use one seed phrase to generate multiple private keys, a separate one for each address and each coin. So your wallet does not hold one key; it holds many individual private keys, all rebuilt from the same words.
In practice, that makes the seed phrase the most sensitive information you own in crypto. One seed phrase restores every key and every coin in the wallet on any device.
What happens if you lose your private key?
If you lose your private key and every backup of it, you lose access to the funds for good. The coins still exist on the blockchain, but nobody can move them, because no company or support team can reset a key. That is the price of full control.
Losing a phone or a hardware wallet is not the same as losing the key. As long as you still have the seed phrase, you can restore the same wallet on a new device or in other wallet software and carry on.
Custodial wallets: not your keys, not your coins
Not every crypto user holds their own keys. On an exchange, the platform keeps the cryptographic keys in custodial wallets and you log in with a password instead. In a non custodial wallet, often called self-custody, the keys are generated and stored on your own device.
“Not your keys, not your coins” means that if a platform holds the keys, you depend on it to give your crypto back. Both routes have a catch:
- Exchange custody. In the EU, a MiCA-licensed exchange must keep client crypto separate from its own assets and follow strict custody rules. But crypto is not covered by investor compensation schemes, and exchanges can be hacked or freeze withdrawals.
- Self-custody. You have full control, and nobody can freeze your coins. You are also the single point of failure: lose your backup and nobody can help you.
There is a link with EU rules too. If you withdraw more than €1,000 from an EU exchange to your own wallet, the exchange must check that the wallet is yours, and one way to prove it is signing a message with your private key.
How to keep your private keys safe
Keeping your private keys safe comes down to two rules: nobody else may ever see them, and you must always be able to restore them. These steps cover both.
- Write your seed phrase on paper or steel, not in a photo, a notes app, an email or cloud storage. Keep it in a secure location away from the device.
- Use a hardware wallet for larger amounts. It keeps the keys in cold storage, offline, and signs transactions inside the device.
- Keep only spending money in a hot wallet on your phone or computer, which is connected to the internet.
- Never enter a seed phrase or raw private key on a website, in a browser pop-up or in a chat. No support team needs it.
- Download wallet apps only from the official site or app store link, and check the publisher. Fake wallet apps exist to steal keys.
- Plan for your family. Write down where your backup is and how it works, so your crypto is not lost if something happens to you.
Private key scams and pitfalls
Most people who lose crypto in self-custody do not get hacked in a technical sense; they are persuaded to hand over their key. Watch for these warning signs:
- Fake support. Someone on Telegram, X or WhatsApp offers to “fix” a problem and asks for your seed phrase. That is always a scam.
- Phishing sites. A copy of your wallet’s website asks you to “verify” or “sync” your wallet by typing in your words. Read more about phishing.
- “Validate your wallet” emails after a data leak, using your real name to look convincing.
- Seed phrases that come with the device. A real hardware wallet makes you generate a new one. A pre-printed seed means someone else knows it.
If you think your seed phrase or private key is exposed, create a new wallet on a clean device at once and move your funds to it before anyone else does. Then report the theft to the police and, if an exchange was involved, to the exchange.
The bottom line
Your private key is your crypto. Keep the seed phrase offline and private, keep larger amounts on a hardware wallet, and treat anyone who asks for your words as a thief. For an overview of the options, see our guide to crypto wallet types.
Questions people ask
Are private keys the same as seed phrases?
No. A seed phrase is a list of 12 or 24 words that your wallet uses to generate many private keys. Anyone with the seed phrase can rebuild every key in the wallet, so protect it at least as carefully as a single private key.
What can someone do with your private key?
Everything you can. With your private key someone can sign transactions and move all the crypto at that address, and because blockchain transactions cannot be reversed, you will usually not get it back.
Where do I find my private key?
If your crypto sits on an exchange, the exchange holds the keys and you do not see them. In a self-custody wallet the keys are created from your seed phrase; most wallets can export a single key, but you rarely need to and it adds risk.
Can I recover a lost private key?
Only from your seed phrase or another backup. Nobody, including the wallet maker, can reset a private key, which is why your backup matters more than the device.