Public and private keys, explained without the maths

A key pair is the starting point

Every crypto wallet begins with a secret. In the simplest picture, that secret is a private key: a large random number that lets you authorise spending. From it the wallet derives a matching public key, which others may see. The two belong together, so they are called a key pair.

You can think of the public key as the part meant for the outside world and the private key as the part that must never leave your control. Different blockchains package and display them in different ways, but the idea is the same on Bitcoin, Ethereum and most other chains.

How an address fits in

People do not usually send funds to a raw public key. They send them to an address, a shorter identifier derived from a public key or, in Bitcoin, sometimes from a script. That is why you can share a receive address freely. It points other people to the place on the ledger where funds can be received, but it does not let them spend.

One wallet normally creates many addresses. A Bitcoin wallet may show you a new receive address for each payment, while an Ethereum wallet often keeps the same address for ordinary use. Under the surface, the wallet is managing keys and address derivation for you.

What a signature proves

When you send crypto, your wallet does not reveal the private key to the network. Instead it uses the key to create a digital signature over the transaction details. Every node can check that signature with the corresponding public key and confirm that the right key approved the transaction.

That matters because anyone can read a public blockchain. The network needs a way to verify permission without exposing the secret that gives that permission. A valid signature answers one narrow question: did the holder of this private key approve this exact message or transaction?

The same idea is used outside payments. Bitcoin and some other systems can verify signed messages, and EVM wallets can sign structured requests that let websites log you in or ask for permissions. Read those requests carefully. A signature is not harmless just because it is not a transaction.

Why the private key is everything

Whoever controls the private key controls the funds at the addresses derived from it. There is no customer support desk that can reset it, no chargeback and no bank that can freeze a thief after the fact. That is why security advice in crypto sounds repetitive: protect the secret, because the secret is the account.

This is also why “not your keys, not your coins” is repeated so often. If you leave coins on an exchange, the exchange holds the keys and owes you a balance in its own database. Exchanges vs self-custody explains that trade-off in detail.

Seed phrases are backups of keys

Most wallets do not ask you to write down each private key separately. They generate one master secret and turn it into a seed phrase, usually 12 or 24 words. From that phrase the wallet can recreate all the keys and addresses it manages. In practice, the seed phrase is the backup of your private keys.

That is convenient, because one written backup can restore a whole wallet on a new device. It also raises the stakes. A person who learns your seed phrase can restore the same wallet and control every key it contains. Seed phrases covers how to store one safely.

What to remember in everyday use

• Share your address when you want to receive funds. Never share your private key or seed phrase.
• A password on a wallet app protects the device; it does not replace the private key underneath.
• A signature proves that a key approved something specific. Check what you are signing before you approve it.
• If you only want alerts, use a watch-only monitor with a public address. Monitoring does not need the private key.

Once you understand that keys authorise, addresses receive and signatures prove approval, most wallet behaviour makes more sense.