Private keys: understand what controls your crypto
A wallet password, a private key and a recovery phrase solve different problems. Learn what each protects, what a backup can restore and what to do when access is lost or exposed.
Your task: identify how your wallet recovers each account, without revealing or entering any secrets here.
How a transaction gets authorised
Private key
A secret used by the wallet to create a digital signature. In a conventional single-key account, someone with the key can authorise spending.
Digital signature
The wallet signs transaction data. A properly designed wallet sends the signature, not the private key, to the network.
Network verification
Nodes check the signature and other transaction rules. Signing does not guarantee confirmation, and the signature is not encryption that hides the transfer.
Make a recovery map before you need it
Identify the wallet type
An exchange login usually accesses an account held by the exchange. A self-custody wallet may use a recovery phrase, hardware device, passkeys or another recovery scheme. Follow that product’s official instructions.
Check what the backup covers
A recovery phrase can derive many accounts. A separately imported private key may not be included. Record which accounts need separate recovery procedures; do not copy actual secrets into a checklist or support message.
Verify without resetting
Use the wallet’s official backup-check feature if available. Check whether an optional passphrase is required too. Do not erase a working wallet simply to test a backup, or enter a phrase into a website claiming to validate it.
Lost access and exposed secrets need different responses
Imagine your phone breaks. An intact, correct recovery backup may restore access on a trusted replacement. Now imagine someone photographs that backup: changing the app password does not revoke the copied keys. Follow the wallet provider’s incident guidance and move assets to a newly secured wallet when appropriate; restore access and remove an attacker’s access are different tasks.
Three mistakes to avoid
Treating the PIN as a blockchain lock
A PIN or app password usually protects local access. It does not stop someone who already has the underlying private key or recovery material.
Backing up only the main account
An imported account can have a different origin. A successful backup check for one wallet does not prove every account shown in the app is recoverable.
Sharing a phrase with support
Receiving funds or investigating a transaction does not require your private key or recovery phrase. Stop if a supposed helper asks for either.
Try it: what would actually restore access?
An app shows Account A, derived from its recovery phrase, and Account B, imported separately with a private key. You saved only the phrase. Does that prove both accounts are backed up?
Show the reasoning
No. The phrase covers the accounts derived from it, not necessarily the separately imported account. Check B’s official recovery method while access still works. Never paste the key or phrase into this exercise.
