Keys come in pairs. The private key is generated at random and kept secret, and from it the wallet derives a <a href="/glossary/public-key/">public key</a> and then a receiving address. The maths runs one way only, so an address reveals nothing useful about the key behind it. That asymmetry is why publishing an address is harmless and publishing the key is total loss.
Draw the line clearly and never blur it. <strong>Safe to share:</strong> your receiving address, a QR code of that address, a transaction ID. <strong>Never share, with anyone:</strong> the private key itself, the recovery phrase, or any part of either. No exchange, wallet maker, support agent, developer, tax tool or airdrop site has a legitimate reason to ask for those words. Anyone who asks is stealing from you.
Most people never see a raw private key. Modern wallets instead show a recovery phrase, usually 12 or 24 ordinary words, from which every key in the wallet can be regenerated. That phrase <em>is</em> the wallet. Whoever types it into a compatible app controls the funds, on any device, anywhere, without needing your phone or your password. Our guide to <a href="/toolkit/how-to-back-up-a-seed-phrase/">backing up a seed phrase</a> covers doing that on paper or metal rather than in a screenshot.
Two failure modes account for nearly every loss: giving the phrase away, and losing it. Both are permanent. There is no reset link, no identity check and no ombudsman. Write the phrase down offline, store it somewhere fire and flood tolerant, tell nobody it exists, and treat any message urging you to verify, migrate or sync your wallet as an attack no matter how official it looks.
What Is a Crypto Wallet? Keys, Not Coins
Key takeaways
- An address is for receiving and can be posted publicly, while a private key or recovery phrase is for spending and is shown to nobody.
- The recovery phrase is a master key to every account in the wallet, not a password that support can reset.
- Legitimate support never asks for your phrase, so the request itself is proof of the scam.
Private Key — frequently asked questions
What is the difference between a private key and a password?
A password protects an account held by a company, so the company can reset it. A private key is the thing itself: there is no account and no company behind it, so nothing can be reset. Lose it and the funds remain on the chain forever, visible to everyone and spendable by nobody. That is why backups matter far more here than password hygiene.
Is it safe to store my recovery phrase in a password manager?
It is better than a photo in your camera roll, but it still places the phrase on an internet-connected device and inside one account whose compromise loses everything. The cautious approach is an offline copy, on paper or stamped metal, kept somewhere physically secure, with a second copy in a different location in case of fire or flood.
New to crypto, or filling in the gaps? Work through the essentials in Learn, browse every term A–Z, or see live prices for the coins these concepts power.