Private Keys, Signatures, and Seed Phrases

Understanding the cryptography that proves ownership and the practical mechanics of self-custody.

12 min · intermediate · part of Security Mastery: Protecting Your Assets

The Key to Everything

In cryptocurrency, ownership is not tracked by a bank or a database row maintained by some company. Ownership is proven mathematically. The phrase "not your keys, not your coins" — coined by Andreas Antonopoulos — captures the entire security model in seven words. This lesson explains what those keys actually are and how to handle them without losing everything. At the heart of cryptocurrency ownership is a mathematical relationship between two numbers: a private key that you keep secret, and a public key that you share with the world. Together they form an asymmetric cryptographic key pair, the foundation of all cryptocurrency security and most of modern internet security as well. This is not a metaphor or analogy. The math is real. When you "send" Bitcoin, you are not actually transferring a digital coin — you are using your private key to sign a message that the network's nodes verify against your public key. Mastering the practical implications of this is the difference between long-term success and catastrophic loss.

Also in this lesson

How Asymmetric Cryptography Works
Seed Phrases: Human-Readable Keys
The #1 Causes of Loss (Real Data)
For Deeper Reading

Key terms

Private key: A 256-bit secret number that proves ownership of cryptocurrency and authorizes transactions. Bitcoin uses elliptic curve cryptography (secp256k1).
Public key: A number derived from the private key via elliptic curve point multiplication. Can be shared publicly; used to verify signatures and generate addresses.
Address: A hash of the public key, typically encoded as a 26-35 character string. The "destination" you send crypto to. Bitcoin addresses start with 1, 3, or bc1; Ethereum with 0x.
Seed phrase / mnemonic: A list of 12-24 common English words that encodes a master key (BIP-39 standard). Anyone with the phrase has full control over derived addresses.
BIP-39: Bitcoin Improvement Proposal 39, published September 2013. The standard for mnemonic seed phrases used by most wallets across many cryptocurrencies.
BIP-44 / HD wallet: Hierarchical Deterministic wallet standard. Allows one seed phrase to derive private keys for many cryptocurrencies and many addresses on each.
Self-custody: Holding your own private keys rather than trusting an exchange or third party. Captured in the phrase "not your keys, not your coins" by Andreas Antonopoulos.
ECDSA / Schnorr signatures: Digital signature algorithms used by Bitcoin (ECDSA originally; Schnorr added with Taproot Nov 2021). Both prove a transaction was authorized by the private key holder.
Phishing: Fraud attempts to steal information by impersonating legitimate websites, emails, or people. Single largest source of crypto loss.
Address poisoning: An attack where attackers send 0-value transfers from addresses matching your contacts' first/last characters, hoping you copy the wrong address from history.
SIM swapping: An attack where the attacker transfers your phone number to a SIM they control, then uses SMS-based 2FA recovery to take over accounts. Michael Terpin won $75.8M judgment for one such case.
Shamir Secret Sharing (SSS) / SLIP-39: A cryptographic technique (1979, Adi Shamir) for splitting a secret into n shares with threshold m. Any m shares reconstruct the secret; fewer reveal nothing. SLIP-39 is the Trezor standard implementation.

Continue this lesson — 4 more sections in the CryptoBipto app.

Open lesson

Educational only — not financial advice.