Public Key vs Private Key: Encryption, Bitcoin and PKI Explained

Summary: Public key vs private key in one line: a public key is the half you can hand out, and your wallet address is derived from it. A private key is the half that proves the funds are yours and authorises spending them. The pair is mathematically linked in one direction only: the public half can be worked out from the private half, but not the reverse. Share the public one freely. Anyone who has the private one has your money.

• Public key: shareable, used to receive, and the basis of your address.
• Private key: secret, used to sign transactions, and equivalent to ownership itself.
• The maths runs one way, which is what makes publishing the public half safe.
• No exchange, wallet, support agent or verification process ever needs your private key.

The two names sound like a matched pair of passwords, which is where the confusion starts. They do completely different jobs, and mixing them up is the single most expensive misunderstanding in crypto.

What Is a Public Key?

What is a public key? It is the half of the pair that exists to be seen. Its job is to let anyone verify that a transaction was signed by the matching private key without ever learning what that private key is. That is the whole trick of public-key cryptography, and it is why the system works without a trusted middleman.

Publishing it costs you nothing. There is no scenario in which someone drains a wallet because they learned its public key, in the same way that knowing a bank account number does not let a stranger empty it.

What Is a Private Key?

A private key signs. When you send crypto, your wallet uses the private key to produce a signature over the transaction, and the network checks that signature against the public key. Nothing else authorises a spend.

This is the part worth sitting with: the private key does not protect ownership, it constitutes ownership. There is no separate register of who owns what. Whoever can produce a valid signature is, as far as the network is concerned, the owner.

How the Pair Works Together

The private key is generated first, essentially as an enormous random number. The public key is then derived from it by a calculation that is easy to run forwards and computationally infeasible to reverse.

That asymmetry is the entire security model. Anyone can confirm a signature came from the holder of a particular private key, and nobody can work backwards from the public key to produce signatures of their own. The security does not rest on the public key being hidden, because it is not hidden.

Public Key vs Private Key at a Glance

That table is the public private key relationship in short: one half is published, the other is guarded.

How Does Public-Key Cryptography Work?

Public key cryptography, also called asymmetric cryptography, uses a linked key pair instead of one shared secret. It has two main uses, and it helps to keep them apart:

• Public key encryption: anyone can encrypt a message with your public key, but only your private key can decrypt it. This is how secure email and parts of HTTPS protect data in transit.
• Digital signatures: you sign with your private key, and anyone can check the signature with your public key. This is what Bitcoin and most blockchains use. Your transactions are signed, not encrypted.

So when people ask how does public-key cryptography work in crypto wallets, the answer is mostly signatures. Public private key encryption is the same family of maths, applied to keeping data secret rather than proving who sent it.

Private key encryption is a different idea. It usually means symmetric encryption, where one shared secret key both encrypts and decrypts, as in AES. It is faster, but both sides need the same key, which is the problem public key cryptography was invented to solve.

RSA Private Key vs Bitcoin Private Key

An RSA private key belongs to one of the oldest public key systems, published in 1977 and still common in HTTPS certificates and SSH logins. RSA keys are long, typically 2,048 bits or more, and their security rests on the difficulty of factoring large numbers.

A Bitcoin private key uses elliptic curve cryptography instead, on a curve called secp256k1. It is just a 256-bit number, usually shown as 64 hexadecimal characters or in a shorter format starting with 5, K or L. Smaller keys give the same level of security as a much larger RSA private key, which is why blockchains favour elliptic curves.

What Is Public Key Infrastructure (PKI)?

Public key infrastructure (PKI) is the system that ties public keys to real identities on the web. Certificate authorities sign certificates that say “this public key belongs to this website”, and your browser trusts those certificates to set up HTTPS.

Bitcoin deliberately has no public key infrastructure. Nobody certifies that an address belongs to a person, which is why you must check addresses yourself and why sending to the wrong one cannot be reversed.

Where an Address Fits In

Most people never see a raw public key. What you copy and paste is an address, which is a shortened, checksummed representation derived from the public key. It is easier to handle and includes error detection, so a mistyped character usually gets rejected rather than sending funds into nowhere.

So the practical hierarchy runs private key, then public key, then address. Each step derives from the one before it, and only the first is secret.

How a Seed Phrase Relates

Modern wallets rarely ask you to handle a private key directly. Instead they give you a seed phrase, a list of words from which many private keys can be regenerated deterministically. One phrase can therefore restore an entire wallet with all its accounts.

The consequence is that a seed phrase is even more sensitive than a single private key, because it unlocks all of them at once. Treat the phrase with at least the caution you would give the keys themselves.

What Happens if Someone Gets Your Private Key

They can move the funds, immediately and irreversibly, and there is no support desk that can undo it. There is no password reset, because the key is not a credential checked by a company. It is the mathematical proof the network relies on.

There is also no way to change a private key while keeping the same address, since the address is derived from it. If a key is exposed, the only real remedy is to generate a new wallet and move everything across before someone else does.

Why Nobody Should Ever Ask For It

This is the practical payoff of understanding the pair. A merchant needs your address to pay you. A network needs a signature, which your wallet produces locally. Nobody in a legitimate flow ever needs the key itself, so a request for one is always an attempt to steal, and it shows up constantly in crypto scams dressed as support, verification or a wallet migration.

The rule needs no judgement calls. Address out, key in. If a request inverts that, it is theft regardless of how plausible the explanation sounds.

Where the Keys Actually Live

Who holds the private key is the difference between custodial and self-custodial. If an exchange holds it, you have a claim on the exchange rather than direct control of the coins. If you hold it, control is genuinely yours and so is the entire responsibility, which is the trade-off behind hot and cold wallet choices.

Public and Private Key FAQ

Can a public key be used to find a private key?

No. Deriving the public key from the private key is easy, but reversing it is computationally infeasible with today’s computers.

Where is my Bitcoin private key stored?

In your wallet. A software wallet stores it on your phone or computer, and a hardware wallet keeps it on the device. Your seed phrase can regenerate it.

Is public key encryption used in crypto transactions?

Not for the transactions themselves. Blockchains use digital signatures; public key encryption is used elsewhere, such as protecting your connection to a wallet app.

What is public private key encryption?

It is public key encryption described by both halves: the public key locks the message and the private key unlocks it. Public private key encryption is the basis of secure messaging and HTTPS.

Is private key encryption safer than public key encryption?

Neither is simply safer. Private key encryption is faster but needs a shared secret, while public key encryption solves the sharing problem. Most secure systems use both together.

Does crypto use public key infrastructure?

No. There is no certificate authority for wallet addresses, so verifying who controls an address is up to you.

Keeping the Two Straight

One sentence covers it: the public key is how the world finds you, and the private key is how you prove it is you. The first is meant to be copied into a payment field. The second should never leave the device it was created on.

In everyday use the distinction rarely comes up, because a wallet handles the signing quietly and only shows you an address. If you are paying with crypto and want to see which coins and networks are accepted, the supported currencies list is the place to look.