Bitcoin VerityOpen comparator

Level 5 · How Bitcoin works

Private key, public key, address and signature

Four frequently confused terms: what must remain secret, what may be shared and what a signature actually proves.

Article
44
Reading time
16 minutes
Reviewed
8 September 2026

In a nutshell

A private key is a secret value from which a public key can be derived. An address is a convenient expression of a payment destination or condition, not a vault containing bitcoins. A digital signature proves that the required authority was supplied without revealing the private key.

01

The two halves of a key pair have different jobs

A private key is a very large secret number produced by a secure source of randomness. Software derives a public key from it mathematically. Computation in that direction is practical, but no known ordinary method can recover the private key from the public key.

The public key can verify a signature, while the private key creates it. They should not be confused with a username and password. The network has no central list of people and no button for resetting a forgotten key; it merely checks whether the supplied data satisfy the rules of a particular output.

02

An address is neither an account nor a private key

A Bitcoin address is encoded data that helps the payer's wallet build the correct output condition. Depending on its type, it may be based on a hash of a public key, a script or a Taproot public key. A checksum catches some typing mistakes, but it cannot prove that the address belongs to the person you intend to pay.

An address can receive payments, and safer wallets generate a fresh one for each new payment. Reusing an address makes public payments easier to link and reduces privacy. Publishing a receiving address does not by itself give anybody the power to spend the corresponding outputs.

  • the private key remains secret and can create a signature
  • the public key allows a signature to be verified
  • an address helps construct a payment condition and can be shared with a payer
03

A signature approves specific data

When spending, a wallet does not broadcast the private key. It uses that key to create a digital signature over precisely defined transaction data. A node can use the public key to check that the signature matches and that the protected portion of the transaction has not been altered.

Bitcoin has historically used ECDSA signatures and also uses the Schnorr signatures defined in BIP 340 for Taproot outputs. The essential idea for an ordinary user is the same: a valid signature proves authorization for the specified instruction; it neither reveals the secret nor grants general permission for arbitrary future payments.

04

Cryptography cannot prevent every human mistake

If an attacker obtains a private key or recovery words, they can make a valid signature and the network cannot know that it is theft. If a user signs a transaction to the wrong address, the mathematics may regard it as perfectly valid. The destination and amount should therefore be checked on a trusted display.

Wallets commonly manage many keys through a single backup. Seeds, passphrases, hardware wallets and multisignature arrangements will be covered in the later security level. For now, the precise rule is enough: an address is for receiving, a public key is for verification, and secret material is never sent to a stranger or to website support.

Level 5 · How Bitcoin works

Terms to know

Private key
A secret cryptographic value used to create a signature; disclosure may mean losing control of the associated bitcoins.
Public key
Data derived from a private key that can be used to verify the corresponding signatures.
Digital signature
A mathematical proof bound to a key and message that verifies authorization and the integrity of signed data.

Common misconception

A Bitcoin address is like a bank account number and the private key is that account's password.

A more accurate explanation

An address expresses the destination or condition of a new output; the block chain has no personal account protected by one password. A wallet may control many keys, addresses and separate UTXOs.

A more accurate explanation

Is self-custody automatically safer than a custodial account?

Not for every person or setup. Self-custody removes the risk that a custodian freezes, loses or misuses funds, but the user assumes responsibility for backups and key security. A trustworthy regulated custodian may offer access recovery and procedures that limit mistakes. The choice should match the person's knowledge, amount and risks.

44

Key takeaways

  1. 01A private key creates a signature; a public key allows it to be checked.
  2. 02An address is neither a vault nor a person's identity, but a tool for constructing an output condition.
  3. 03A signature authorizes a particular transaction without sending the private key.
  4. 04Cryptography cannot rescue a user who reveals a backup or approves the wrong destination.

A child-friendly recap

In very simple terms

A private key is like a very secret pen that can sign a payment. The public key helps others check the signature, and an address tells them where to pay. You never send anybody the secret key or recovery words.

Reviewed: 8 September 2026

Sources and further reading

Sources support particular facts and definitions; listing one does not mean the editors endorse every view of its author.

01
Bitcoin Developer Guide: wallets and keysBitcoin Developer Guide
developer.bitcoin.org
02
Bitcoin Developer Guide: signing transactionsBitcoin Developer Guide
developer.bitcoin.org
03
BIP 340: Schnorr signatures for secp256k1Bitcoin Improvement Proposals
bips.dev

Educational material, not an investment recommendation.