Public Key vs Private Key: What Each One Does

Summary: Your private key is the thing that lets you spend your crypto. Your public key, and the address derived from it, is what you hand out so people can pay you. They are mathematically linked, and the link only works one way: the public one can be calculated from the private one, and never the reverse. Share the public side freely. Never share the private side with anybody, for any reason.

• Private key: spends your funds. Public key and address: receives them.
• The maths runs one way only, which is why publishing an address is safe.
• Your seed phrase generates the private keys, so it is the more dangerous secret of the two.
• Nobody legitimate will ever ask for a private key or a seed phrase. Nobody.

The Difference in One Analogy

A public address is like an account number printed on an invoice. Anybody can use it to send you money, and knowing it gives them no ability to take anything. A private key is closer to the signature that authorises a payment out, except that it cannot be forged and there is no bank to appeal to if somebody else obtains it.

The analogy breaks in one important place. A bank can reverse a payment made with a stolen signature. Nobody can reverse a blockchain transaction signed with a stolen key. That single asymmetry is why the rest of this matters.

How They Are Related

The private key is, at bottom, an enormous random number. Run it through a specific piece of mathematics and out comes the public key. Run the public key through a hashing step and out comes your address.

Each step is easy to compute forwards and effectively impossible to reverse. Deriving a private key from a public one would take longer than the universe has existed with any hardware that exists or is plausibly coming, which is precisely why you can publish an address on a website and sleep soundly. The security does not depend on hiding the address. It depends only on hiding the private key.

Where Your Address Fits In

In everyday use you never see either key. You see an address, which is a shortened, error-checked version of the public key, and your wallet handles everything behind it. Finding your wallet address is a matter of tapping Receive. Finding your private key usually requires deliberately digging through advanced settings, and if you are not sure why you are doing it, you should not be.

One wallet holds many key pairs, one per address, and modern wallets generate them all from a single starting secret. Which brings us to the thing people actually need to protect.

The Seed Phrase Outranks Both

Those twelve or twenty-four words are the master secret. Every private key in your wallet is derived from them, which means the phrase is not equivalent to one private key, it is equivalent to all of them at once, including addresses you have not generated yet.

So in terms of what to guard, the order is: seed phrase first, individual private keys second, and addresses not at all. It also explains why wallet recovery works: restoring a phrase on a new device regenerates the same keys and therefore the same addresses, with your funds exactly where they were, because the coins were never in the device to begin with.

What Actually Happens When You Send

Your private key never travels anywhere, which surprises people. When you approve a payment, your wallet uses the key to produce a signature over that specific transaction, and it is the signature that is broadcast. Every node then checks the signature against your public key and confirms it could only have come from the matching private key, without ever learning what that key is.

This is the entire point of a hardware wallet. The key is generated inside the device and never leaves it, so signing happens on the device and only the signature comes out. Malware on your computer can show you a false address, which is why the screen on the device is the one to trust, but it cannot extract the key. Hot and cold storage differ mostly in where this signing takes place.

What Happens If You Lose Each

• Lose an address: nothing happens. Open Receive and get another one.
• Lose a private key but keep the seed phrase: recoverable. Restore the wallet and the key comes back.
• Lose both: the funds are permanently unreachable. Not frozen, not held by anybody, just unspendable forever. There is no support line for this.
• Somebody else obtains either: assume the funds are gone within minutes. Move anything remaining to a fresh wallet with a new seed phrase immediately, rather than investigating first.

The Only Rule You Have to Remember

Anything labelled public is for sharing and anything labelled private or a recovery phrase is for nobody. No exchange, wallet developer, support agent, giveaway, airdrop or verification process has a legitimate reason to see a private key or seed phrase, and every single request for one is theft in progress. The scam patterns built around this are worth recognising, because they are usually polite and well designed rather than obviously criminal.

If keeping a private key off an internet-connected machine is the part you want to solve properly, a Trezor coupon is the least expensive way to get signing off your laptop and onto a device that does one job.