A private key is a secret 256-bit number that gives you, and only you, the ability to spend the cryptocurrency associated with its corresponding public address. Whoever knows this number controls the funds. There is no password reset, no customer support, and no recovery if it is lost or exposed.
What Is a Private Key?
3 min read
The short version
Your private key is the master password to your crypto. Unlike a bank password that can be reset by calling customer service, a private key is the only way to prove ownership. If someone else sees it, they can take everything. If you lose it, nobody can help you get it back, not even the people who built the software.
How It Works
A private key is generated by picking a random number between 1 and roughly 1.16 × 10^77 (the order of the secp256k1 elliptic curve used by Bitcoin and Ethereum). From this single number, the public key is derived through elliptic curve multiplication, a one-way mathematical operation that is computationally infeasible to reverse. The public key is then hashed and encoded to produce your wallet address. When you sign a transaction, your wallet software uses the private key to create a digital signature that proves you authorized the spend without revealing the key itself. Nodes verify the signature against the public key. The private key never needs to leave your device for normal operations.
How a private key signs a transaction
You want to send 1 ETH. Your wallet takes the transaction data (recipient, amount, gas), hashes it, then applies the ECDSA signing algorithm using your private key. This produces a unique signature (two 256-bit numbers: r and s). Your wallet broadcasts the transaction plus the signature. Every Ethereum node takes your public key (derivable from the signature), verifies the signature matches the transaction data, and confirms you authorized it. At no point did the private key itself travel over the network, only the proof that you possess it.
What People Get Wrong
Your private key is stored on the blockchain
The blockchain stores transactions and public keys/addresses only. Your private key exists solely on whatever device you used to generate it, your hardware wallet, your phone, or a piece of paper.
Wallets hold your cryptocurrency
Your crypto exists on the blockchain as a record. Your wallet holds the private key that proves you own that record. Moving wallets does not move coins, it moves the key that controls them.
A strong password on your wallet app protects your private key from everyone
The password encrypts the key file on your device. If someone extracts the unencrypted key (malware, physical theft of an unencrypted backup), the password is irrelevant.
Private keys can be guessed if someone knows your address
The key space is 2^256, more possible keys than atoms in the observable universe. Randomly guessing a specific key is statistically impossible with any conceivable technology.
Keep Reading
Sources & Further Reading
- Elliptic Curve Cryptography (Bitcoin Wiki)
Technical reference for the secp256k1 curve used in Bitcoin and Ethereum
Questions People Also Ask
- What does a private key look like?
- In hex format: 64 characters like e9873d79c6d87dc0fb6a577... In WIF (Wallet Import Format for Bitcoin): a Base58 string starting with 5, K, or L. In practice, most users never see their raw private key, they interact with a seed phrase that encodes it.
- Can two people have the same private key?
- Mathematically possible but astronomically unlikely. The chance of randomly generating the same 256-bit key is roughly 1 in 10^77, far less probable than winning the lottery every day for a lifetime.
- Should I ever share my private key?
- Never. No legitimate service, support agent, or software update will ever ask for your private key. Anyone who asks is attempting to steal your funds. The single most important security rule in crypto.