On this page
Understanding the difference between a private key, a public key, and an address is one of the first things anyone using Bitcoin should learn, because it’s what allows you to understand how your funds are managed. Unlike the traditional financial system, where a bank holds your money and validates your transactions, in Bitcoin custody is individual: whoever controls the cryptographic keys controls the funds.
In this article, you’ll learn what each of these concepts is, how they differ, and what role they play in the protocol.
Before we start: why is there a private key and a public key?
Bitcoin uses asymmetric cryptography
We talk about private and public keys because Bitcoin uses an encryption system called asymmetric cryptography, or public-key cryptography. Unlike traditional systems that use a single key to encrypt and decrypt information, this approach uses a mathematically related key pair: a private key, which is kept secret, and a public key, which can be shared safely.
In Bitcoin, this scheme is not used to hide information, but to enable secure transaction validation: the private key is used to sign a transaction, and the public key is used to verify that the signature is valid without revealing the secret. This mechanism is what allows the network to function without intermediaries or central authorities.
The private key: the real control over your funds
The private key is a randomly generated number that allows you to authorize spending of the bitcoin associated with a given address. It doesn’t represent an account, a user, or an entry in a database: it is simply a cryptographic secret.
In Bitcoin there is no authority that validates identities. The network only checks that whoever is trying to move funds holds the corresponding private key. That’s why people often say that, in Bitcoin, ownership is not recorded; it is proven cryptographically.
A simple way to think about it is as a physical key: whoever has the key can open the box. If someone else gets a copy, they can open it too. And if the key is lost, the contents are inaccessible forever.
From an operational point of view:
- The private key must never be shared.
- It should be stored securely, ideally offline.
- Losing the private key means the irreversible loss of the funds.
Modern wallets often represent the private key as a seed phrase of 12 or 24 words. That phrase can regenerate all the keys associated with the wallet and must be protected with the same level of security.
The public key: verifiable identity without revealing the secret
The public key is derived mathematically from the private key. This process is one-way: it’s easy to obtain the public key from the private key, but practically impossible to reconstruct the private key from the public key.
The main function of the public key is to allow the network to verify that a transaction was correctly signed by the holder of the private key, without needing to know it. In this way, Bitcoin makes it possible to validate transactions without compromising the user’s security.
A useful analogy is a handwritten signature. The person signing knows the exact movement of their hand (equivalent to the private key), while others can compare signatures and verify their authenticity without being able to reproduce them perfectly.
The public key acts as a cryptographic identity that lets others validate the legitimacy of a transaction without exposing the secret.
The Bitcoin address: the identifier used to receive payments
A Bitcoin address is a representation derived from the public key, encoded in a format that’s convenient to share and use for payments. It’s what you normally give someone when you want to receive bitcoin.
An address works like an alias or destination reference. It allows other users to send you funds without needing to know the underlying keys.
Functionally:
- The address can be shared publicly.
- By itself, it does not allow anyone to spend funds.
- You can generate as many addresses as you like from the same wallet.
Using multiple addresses also helps improve privacy, making it harder to link all your transactions together.
How the three relate within the system
The logical flow is as follows:
- The wallet generates a private key randomly.
- From that private key, it derives a public key.
- From the public key, it generates a Bitcoin address.
- The user shares the address to receive funds.
- When they decide to spend those funds, the wallet signs the transaction with the private key.
- The network validates the signature using the associated public key.
All of this happens behind the scenes for the user. The wallet abstracts away the technical complexity, but real control still depends entirely on safeguarding the private key.
Self-custody as an operating principle
Bitcoin introduces a model of financial sovereignty in which the user directly assumes custody of their capital. This removes intermediaries, reduces systemic risks, and expands individual freedom—but it also requires operational responsibility.
Understanding what a private key, a public key, and an address are is not just a minor technical detail: it’s the foundation for using Bitcoin safely, consciously, and in line with its principles of decentralization and censorship resistance.
Self-custody is not just a technological feature; it’s also a practice that strengthens an individual’s economic autonomy.