In one sentence
A private key is a secret number that lets its holder create digital signatures — and on a blockchain, whoever can sign for an address controls whatever is recorded to it.
How it works
For Bitcoin and Ethereum a private key is a 256-bit number: one choice out of roughly 1077 possibilities, a figure with 78 digits. Nobody can try them all, so a key that was chosen truly at random cannot be guessed.
That last condition is the important one. The security of a key depends entirely on how it was generated. Keys produced by faulty random-number generators, or derived from short memorable phrases, have been found by attackers who simply tried the likely candidates and then moved whatever the matching addresses held. Standards bodies such as NIST publish detailed requirements for random-number generation for exactly this reason.
The network never sees the private key. Wallet software uses it on your device to produce a signature, and only the signature and public key travel with the transaction. Nodes check the signature and nothing else: there is no name, no password and no customer service in the protocol. If the key is lost, nobody can issue a new one; if it is copied, the copy works exactly as well as the original.
Most modern wallets do not store keys one by one. They derive many keys from a single master secret, following the BIP-32 standard, and that secret is backed up as a recovery phrase.
A simple example
Imagine a program whose random-number generator is broken and can only produce one million different values. To an outsider, its keys look as long and random as any other. But an attacker who discovers the flaw can generate all one million keys in seconds and check which addresses hold anything. The keys were the right length; the randomness behind them was not.
Common misconception
Misconception: My private key is stored by the network, so it can be recovered if I forget it.
In fact: The private key never appears on the blockchain and no node knows it. Unless you or a service you chose has a backup, a lost key means lost control, permanently.
Where you meet it
- Signing every transaction and, for validators, every vote.
- Inside wallet software and dedicated signing devices, which are designed so the key does not leave them.
- Outside crypto: the secret half of HTTPS server certificates and SSH keys.
Related cards
Sources
This card explains a technical concept for general education. It is not a recommendation to acquire, sell or hold any crypto-asset, and it is not financial advice.