Keys, Addresses, and Wallets

By now you know the Bitcoin ledger is a shared, append-only history that thousands of nodes keep honest, and that miners do the work of sealing new blocks. But one question has been quietly waiting the whole time: when the ledger says coins sit at your address, what actually stops a stranger from writing a line that spends them? The answer is a single secret number you control — and a tidy chain of one-way math that turns it into something you can safely shout from a rooftop. Get this lesson straight and seed phrases, hardware wallets, “not your keys, not your coins,” and the cold dread of a lost backup all snap into focus.

One Secret Number to Rule Them All

Owning bitcoin starts with one thing: a private key — an astronomically large, randomly chosen secret number. Whoever knows that number controls the coins the ledger has filed under its corresponding address. That’s it. No username, no account, no company vouching for you. The number is you, as far as Bitcoin is concerned.

From the private key you derive a public key using elliptic-curve cryptography on a specific curve called secp256k1. This is a genuine mathematical one-way street: computing the public key from the private key is fast and easy, but running the calculation backward — recovering the private key from the public key — is, for any key of real size, computationally infeasible. The secret stays secret even though its partner is out in the open.

Then you take one more one-way step: hash and encode the public key to produce your address — the short string you hand to people who want to pay you. So the whole identity is a chain of one-way derivations:

private key → public key → address.

Each arrow is easy to walk forward and effectively impossible to walk back. That single property is what lets you publish the end of the chain (your address) to the entire planet while the start of it (your private key) stays locked in your head, your device, or your safe.

Signing: Proving It’s You

So you have a secret you can never reveal — how do you ever use it? With a digital signature. When you spend, your wallet builds a transaction (roughly: “move these coins from my address to Bob’s”) and runs it through your private key to produce a signature — a chunk of data unique to both that exact transaction and that exact key. Anyone on the network then uses your public key to verify the signature: the math confirms “yes, the holder of the matching private key signed this, and the message hasn’t been altered.”

Two properties fall out, and they are the entire security model:

1. Authenticity — only the private-key holder could produce a valid signature, so a valid signature is the proof of authorization. Nobody can forge it without the key.
2. Integrity — the signature is bound to the exact transaction. Change one character afterward and the signature stops matching; verification instantly fails.

And crucially: verifying never reveals the private key. The signature proves you hold the secret without ever showing it. Don’t take my word for it — drive it yourself. Hit sign to wrap your private key around the message and watch a signature appear, hit verify with the public key and see it pass, then tamper with the message and verify again to watch the check fail the instant they stop agreeing:

That failed check is why Bitcoin needs no central authority to police spending. Every node re-runs the verification on every transaction; a forged or altered one simply can’t produce a signature that checks out, so the network rejects it without ever seeing your secret.

Addresses: Safe to Share

Your address is your “receive here” pointer — the string you put on an invoice, a QR code, or a tip jar. Because it’s derived purely from public information (your public key, hashed and encoded), it is completely safe to share. People send coins to your address; nobody can spend from it without the private key. This is where beginners get the danger exactly backward: posting your address is the whole point, while leaking your private key or seed phrase is the catastrophe.

Bitcoin has more than one address format, and you’ll see them in the wild:

• Legacy addresses start with 1... — the original style, fine but a bit costlier to spend.
• SegWit addresses start with bc1... — a newer bech32 encoding that generally means lower transaction fees and better error detection.

You don’t need to memorize the internals; just know multiple formats exist, your wallet handles the difference, and the newer bc1... style is the cheaper, modern default.

What a Wallet Actually Stores

Here’s the sentence that should bother you more than it does: a Bitcoin wallet holds no coins. Recall from crypto-basics that your bitcoin isn’t a token sitting in an app — it’s a set of UTXOs (unspent transaction outputs) recorded on the blockchain. What a wallet actually does is:

• Store or derive your keys (private and public).
• Track which UTXOs your addresses control by reading the public ledger.
• Build and sign transactions when you want to spend.

So “money in your wallet” is just shorthand for “UTXOs on the chain that your keys can unlock.” This distinction has a wonderful payoff: if your phone dies, your laptop is stolen, or the wallet app vanishes from the store, your coins are untouched — they were never in the app. As long as you can recreate the keys, any compatible wallet can find your UTXOs again and spend them.

The Seed Phrase: Your Master Backup

Raw private keys are unwieldy gibberish no human can copy by hand without errors. So modern wallets are HD (hierarchical deterministic) wallets: instead of juggling many keys, you get a single random seed phrase — a list of, typically, 12 or 24 ordinary words (the BIP39 standard), like ribbon, oxygen, glide, marble…

Those words aren’t a password sitting beside your keys. They are the seed from which every private key in the wallet is deterministically generated (the BIP32 standard). Same words, same order, every time, reproduce the exact same keys and addresses. That’s why you can restore an entire wallet onto a brand-new device just by typing the phrase — it recomputes all your keys on the spot. Back up the seed phrase and you’ve backed up every key you’ll ever use in that wallet.

Which makes the seed phrase the single most powerful and most dangerous object you own:

• Anyone who has it controls all your coins. Full stop — the words are your keys.
• Lose it with no backup and the coins are gone forever. There is no reset, no “forgot password,” no support line, no recovery. Nobody on Earth can get them back.

Not Your Keys, Not Your Coins

Everything above leads to the question that decides how safe you actually are: who holds the private keys? Crypto has a slogan for it — “not your keys, not your coins.”

With non-custodial custody, you hold the seed phrase and the keys it generates. You answer to no one — and no one bails you out. With a custodial setup (most beginner-friendly exchanges), the company holds the keys; you just have an account. It’s convenient and it gives you a reset button, but it quietly reintroduces the exact middleman Bitcoin was built to remove: counterparty risk — the chance the party holding your money is breached, freezes withdrawals, or fails. If the exchange controls the keys, “your” balance is their promise to pay, not coins you control.

The Big Picture

Five moving parts, one idea: ownership is control of a secret key. Chunk it into one picture:

A mixed recap — it pulls from everything above:

Key Takeaways

You now know who can move a bitcoin and how they prove it. But a signed transaction is only the starting gun — it still has to travel the network, outbid others for limited block space, and earn its place on-chain. Next up: sending a transaction and the fee that buys it a seat.