What Is a Bitcoin Public and Private Key Pair?

Your Bitcoin address is public. Anyone can see it, send to it, and watch every transaction it’s ever made. So what actually stops a stranger from spending funds sitting at an address they can see perfectly well?

The answer is the public-private key pair, the mathematical foundation underneath every Bitcoin address. A private key is a large randomly generated number, kept secret by its owner. From that private key, a corresponding public key is mathematically derived using elliptic curve cryptography — and from that public key, a Bitcoin address is derived through further hashing.

The critical property making this whole system work is that the math only runs one direction easily. Deriving a public key from a private key is computationally straightforward. Reversing that process is, with current computing technology, considered effectively impossible. That asymmetry is what lets you safely publish your address without exposing your private key.

Owning Bitcoin, in a very literal technical sense, means knowing a private key that corresponds to an address holding a balance. Whoever knows that private key can produce valid signatures authorizing spends; nobody else can. This is why losing a private key means losing the Bitcoin permanently — there’s no password reset, no customer service line.

It’s also why phrases like not your keys, not your coins carry real technical weight: if an exchange or custodian holds your private keys on your behalf, you’re trusting them to manage that secret correctly — you don’t hold the actual cryptographic proof of ownership yourself.

Modern wallets don’t ask users to manage a single private key directly — instead they generate a seed phrase, a human-readable backup that can regenerate an entire tree of key pairs deterministically.

Want to understand how a single seed phrase can back up many different keys at once? Continue learning in the Bitcoin Academy.