Private Key
Last updated 17 October 2026Last verified 17 October 2026
What is a private key in crypto?
TradFi equivalentA bearer instrument, and then some. A bearer bond at least has an obligor who owes the holder something. A private key has no obligor at all and nothing to present it to, so possession is not evidence of a claim, it is the entire asset.
A 256-bit number. On Bitcoin and Ethereum it operates over the secp256k1 elliptic curve, where the public key derives from the private key and the address derives from the public key. The derivation runs one way only, which is the entire security model.
The distinction that matters operationally is that a private key is not a password. A password authenticates you to a system that holds your balance and can reset your access. A private key is the authority.
There is no issuer to appeal to, no reset flow, and no counterparty who can reverse a transaction it signed. Possession is control, and control is indistinguishable from ownership at the protocol level.
That is why institutional key management focuses less on the key than on the process around it. Where it was generated, whether it ever existed in one place at one time, who can invoke it, what policy sits between a request and a signature, and what happens when the person who holds it is unavailable. Chainalysis has attributed the largest single share of stolen funds in recent years to key and seed compromise rather than smart-contract bugs. The full institutional treatment is in the self-custody risk guide.