Private key
In short A private key is the secret number that proves you control a crypto address and signs its transactions. Whoever has it controls the funds.
A private key is a very long secret number that lets you control a crypto address and authorize transactions from it. Whoever holds the key can move everything at that address, including a thief. There is no bank, support desk, or reset button behind it. The network treats a valid signature as proof of control, but it cannot tell whether the signer is you or someone who stole the key.
Mechanically, the private key is used to generate a matching public key, and your address is derived from that public key. The math only runs in one direction, so sharing your address reveals nothing about the key. When you send tokens or approve a swap, your wallet signs the transaction with the private key, and the network verifies that signature against the public key without ever seeing the key itself. On Ethereum, BNB Chain, and Base, the same key controls the same address on all three, while Solana uses a different signature scheme and key format.
Most people never see their private key, because wallet apps hide it and offer a seed phrase as the backup instead. The seed phrase can generate many private keys, so exporting a single key exposes one account, while leaking the phrase exposes all of them. Software wallets typically store the key encrypted on your device, and hardware wallets typically keep it inside a dedicated chip that signs without revealing it. The exact designs and protections vary by product.
This matters because trading small tokens means connecting to many sites and approving many prompts. Anyone who gets your key can drain the wallet within minutes. The usual routes are fake support chats, sites asking you to import your wallet, malicious browser extensions, and screenshots that sync to cloud storage. Losing the key with no backup is just as final, since the funds stay locked on-chain forever.
Connecting a wallet or signing a transaction never requires typing in your key. Wallet software may ask for one during an import that you started on purpose, but a website, support agent, direct message, or form asking for it is a major warning sign and usually theft. Keep any backup offline, and use a separate wallet with a small balance for unfamiliar tokens. If a key was ever exposed, treat that wallet as compromised and move the funds to a new wallet with a fresh key, created on a clean device, because changing a password does not change the key.