Private key
A private key is a secret number that lets you authorise moving the crypto linked to an address. Anyone holding it controls those assets. The SEC says a private key cannot be changed or replaced, so losing it means losing access for good.
What does a private key do?
Crypto ownership is recorded on a blockchain, and every transfer on it is cryptographically signed. The private key is what produces that signature. When your wallet sends coins, it uses the key to prove the instruction really came from the owner of the address.
NIST, the US National Institute of Standards and Technology, describes a wallet as software or hardware that can store private keys, public keys and associated addresses. So the key is the thing of value. The wallet is just its container.
How is a private key different from a public key or an address?
| Item | Safe to share? | What it is for |
|---|---|---|
| Private key | Never | Signing transfers out of your address |
| Public key | Yes | Lets others check your signature |
| Address | Yes | Where people send crypto to you |
Think of the address as an account number and the private key as the only pen that can sign cheques on that account.
What happens if someone else gets your private key?
A simple example: you save a photo of your key, and the photo syncs to a cloud account that is later breached. The attacker now has the same power you do. NIST notes that a thief with the private key has full access to the assets it controls, and that once stolen funds are transferred, the transaction generally cannot be undone. There is no bank to call and no chargeback.
What are the most common private key mistakes?
- Keeping a single copy. NIST explains it is computationally infeasible to regenerate the same key, so one lost copy can be the end.
- Storing it as plain text or a screenshot on an internet-connected device or cloud service.
- Expecting a reset. The SEC is clear that a private key cannot be changed or replaced, unlike a password.
- Handing it to a helper. Anyone asking for your key, even someone claiming to be support staff, is a classic warning sign. See our crypto scam red flags.
EU supervisors describe losing private keys as a permanent and irreversible loss of access.
Frequently asked questions
Can a lost private key be recovered?
Not from nothing. If you wrote down a recovery phrase when the wallet was created, the SEC notes it can restore the wallet and its keys. Without that backup, the assets are lost.
Do I have a private key if my crypto sits on an exchange?
Usually not. On a platform, the platform typically holds the keys for you, which the SEC calls third-party custody. That swaps the risk of losing your key for the risk of the platform being hacked or failing.
Sources
- NIST IR 8202, Blockchain Technology Overview (2018) — nvlpubs.nist.gov (accessed 2026-10-02)
- SEC, Crypto Asset Custody Basics for Retail Investors – Investor Bulletin (Dec 2025) — investor.gov (accessed 2026-10-02)
- EBA, ESMA and EIOPA, Joint ESAs Warning on crypto-assets (2025) — eiopa.europa.eu (accessed 2026-10-02)