What Is a Private Key in Crypto? A Plain-English Guide
A private key is the secret that controls your crypto. It is a long, unique number that proves you own the coins at a given address and lets you move them. The rule is simple and absolute: whoever holds the private key controls the money.
The core idea
Crypto ownership is not recorded in your name at a bank. It is recorded on a blockchain against an address, and the only way to prove you control that address — and to spend what is on it — is with the matching private key. There is no manager to call, no ID check, no override. Control of the key is ownership.
Public key vs private key
Crypto uses a pair of keys that work together:
- Public key / address. Think of this like an account number or an email address. You can share it freely so people can send you crypto.
- Private key. The secret partner to the public one. It signs transactions to prove they are authorised. This you never share with anyone.
"Not your keys, not your coins"
This is one of the most repeated sayings in crypto, and it captures a real trade-off. When your crypto sits on a crypto exchange, the exchange holds the private keys on your behalf. That is convenient, and it means the company can help if you forget a password — but you are trusting them to stay solvent and secure, a trust that has failed spectacularly before (see the Mt. Gox collapse). Holding your own keys, called self-custody, gives you direct control and removes that middleman risk — but it hands you full responsibility, with no one to recover funds if you slip up.
How the private key is usually handled
You rarely see or type the raw private key itself. In practice it is represented by a seed phrase — a list of 12 or 24 words that can regenerate your keys. That phrase is what people back up and protect. For larger amounts, many holders keep their keys offline entirely on a hardware wallet, so the secret never touches an internet-connected computer. Whichever method, the private key or its seed phrase is the crown jewel.
The rules that never change
- Never share it. No legitimate service, support agent, or "giveaway" will ever need your private key or seed phrase. Anyone asking is trying to rob you.
- Never type it into a website. Fake sites that harvest keys are a leading scam.
- Back it up offline. Written on paper and stored securely beats a screenshot in the cloud.
- Losing it is permanent. No key means no access, forever. There is no reset.
The bottom line
A private key is the secret that unlocks and moves your crypto, paired with a public address that others use to send it to you. Control of the key is control of the coins — which is why "not your keys, not your coins" is such a common warning. Whether you self-custody or leave crypto on an exchange, understanding who holds the private key tells you who is really in charge of the money.
When you're ready to buy, our honest comparison of Canadian crypto exchanges covers fees, safety and who each one suits.
Frequently asked
What is a private key in crypto?
A private key is a long secret number that proves ownership of the crypto at a particular address and authorises moving it. Whoever holds the private key controls the funds. It is the single most sensitive piece of information in crypto, and it must never be shared.
What does 'not your keys, not your coins' mean?
It is a crypto saying meaning that if you do not personally control the private keys, you do not truly control the crypto. When coins sit on an exchange, the exchange holds the keys, so you are trusting that company. Only self-custody, holding your own keys, gives you direct control.
What is the difference between a private key and a public key?
A public key, or the address derived from it, is like an account number you can share to receive funds. The private key is the secret that unlocks and spends those funds. You give out the public one freely and guard the private one completely.
What happens if someone gets my private key?
They can take all the crypto it controls, instantly and irreversibly. Blockchain transactions cannot be undone and thieves are rarely identified, so a leaked private key almost always means permanent loss. This is why keys are never shared or typed into websites.
A free daily email — the biggest movers, in plain English. No spam.