Private Key
What is a private key in crypto?
A 256-bit number. On Bitcoin and Ethereum it operates over the secp256k1 elliptic curve, where the public key derives from the private key and the address derives from the public key. The derivation runs one way only, which is the entire security model.
The distinction that matters operationally is that a private key is not a password. A password authenticates you to a system that holds your balance and can reset your access. A private key is the authority.
There is no issuer to appeal to, no reset flow, and no counterparty who can reverse a transaction it signed. Possession is control, and control is indistinguishable from ownership at the protocol level.
That is why institutional key management focuses less on the key than on the process around it. Where it was generated, whether it ever existed in one place at one time, who can invoke it, what policy sits between a request and a signature, and what happens when the person who holds it is unavailable. Chainalysis has attributed the largest single share of stolen funds in recent years to key and seed compromise rather than smart-contract bugs. The full institutional treatment is in the self-custody risk guide.