Public vs Private Keys, Explained With an Analogy That Works

Every crypto wallet is built on a pair of numbers. One you hand out freely. One you never show anyone. Understanding which is which prevents most of the ways beginners lose money.

The analogy that actually holds

Think of a glass safe deposit box in a public lobby.

The public key, and the address derived from it, is the box number. You can paint it on the front. Anyone can walk up, drop something through the slot, and anyone walking past can see what is inside. That is not a flaw; it is how the system proves the deposit happened.

The private key is the only key that opens the door. It never leaves your pocket, and the bank does not keep a copy. Lose it and the box stays sealed with your money visible inside it forever.

Most analogies break down at some point. This one breaks down here: the box is genuinely glass. Every balance and every transaction is public. Privacy comes from nobody knowing which box is yours, not from the contents being hidden.

Why the pair works

The two keys are mathematically linked, but the relationship only runs one way. The public key can be derived from the private key in a fraction of a second. Going backwards, from public key to private key, would take longer than the universe has existed, using every computer on Earth.

That asymmetry is what makes a signature possible. When you send coins, your wallet uses the private key to produce a signature specific to that exact transaction. Anyone can then use your public key to confirm the signature is genuine, without ever learning the private key itself.

So the network can verify you authorised a payment without you revealing the secret that authorises it. No password travels anywhere. Nothing is stored on a server that could leak it.

Where the seed phrase fits

Almost nobody handles raw private keys today. Modern wallets show you a seed phrase instead: twelve or twenty-four words that generate your private keys deterministically.

That means the phrase is not a backup of your keys. It is the thing your keys are built from. Feed the same words into any compatible wallet, anywhere, and you get the same keys and the same coins back.

Which leads to the rule the whole rest of this comes down to:

Anyone who reads your seed phrase can recreate your private keys and take everything, from anywhere, without your phone, your PIN or your permission.

The practical consequences

You can safely share	Never share, ever
Your wallet address	Your private key
A QR code of your address	Your seed phrase
Your transaction history	A photo of either

Three things follow from this:

One consequence worth stating plainly: while coins sit on an exchange, the exchange holds the private keys, not you. That is fine as a place to buy, which is why buying it on a regulated exchange and then withdrawing is the usual path, but it is not custody.\n\nSharing your address is harmless. People new to crypto often hesitate to post an address. There is no risk in it. Knowing the box number does not open the box. The only cost is privacy, because anyone who knows the address can look up everything it has ever done.

Nobody legitimate will ever ask for the private half. Not support, not an exchange, not a wallet developer, not a giveaway, not a “verification” page. There is no technical situation in which a real service needs it. Every single request is theft.

Typing it into anything connected to the internet is the risk. The phrase is safe on paper. The danger is the moment it touches a keyboard, a camera roll or a cloud-synced note. Wallet-draining sites exist entirely to collect phrases from people who thought they were restoring a wallet.

A useful mental test

Before you enter a seed phrase anywhere, ask: am I restoring a wallet I own, on a device I control?

If yes, proceed carefully. If the answer involves anyone else, whether support asked, a site asked, a form asked or a friend asked, then whatever is happening is a theft in progress, no matter how convincing the reason sounds.

That single question, asked consistently, prevents the most common catastrophic loss in crypto.