What is a Bitcoin private key? How keys prove ownership, why 'not your keys, not your coins' matters, and how institutions secure keys at treasury scale.
A private key is the secret number that controls bitcoin. Technically a randomly generated 256-bit integer, it is the cryptographic proof of ownership: whoever knows the private key can sign transactions spending the coins at its corresponding addresses. There is no account recovery, no password reset, no customer service. The key is the asset.
Bitcoin uses elliptic curve cryptography (the secp256k1 curve). From a private key, the software derives a public key, and from that, the addresses you share to receive funds. The math runs one way only: deriving the public key from the private key is instant, while reversing it would take longer than the age of the universe with current computers. When you spend, your wallet uses the private key to produce a digital signature over the transaction; every node on the network verifies that signature against your public key without ever seeing the key itself. Modern wallets manage thousands of keys from a single seed phrase — 12 or 24 mnemonic words that deterministically regenerate every key you'll ever use.
Bitcoin is a bearer asset: control of the key is ownership, full stop. Coins on an exchange are an IOU — you hold a claim on the company, and the company holds the keys. History has punished that arrangement repeatedly, from Mt. Gox (850,000 BTC lost in 2014) to FTX. The phrase "not your keys, not your coins" condenses a decade of expensive lessons into six words. It also explains sovereign behavior: when governments seize bitcoin, what they actually seize are private keys, and when the United Kingdom holds 61,245 BTC from a fraud case, it means UK law enforcement controls those keys in custody.
No serious treasury trusts one key or one person. Institutions use multisignature schemes — spending requires M of N keys held by different people in different places — plus hardware security modules, air-gapped signing, and audited procedures. Corporate holders on our public companies index typically use qualified custodians who run exactly this infrastructure; Twenty One Capital goes further by proving key control publicly through on-chain proof of reserves. The US government's seized holdings, tracked on our USA page, live in the same paradigm at national-security grade.
The rules are simple and unforgiving. Generate keys on trusted hardware, never type a seed phrase into anything connected to the internet, back it up on metal (fire and flood beat paper), split backups geographically, and plan inheritance while you're alive — an estimated several million BTC are already lost forever to forgotten keys, permanently tightening the 21-million cap. For meaningful amounts, use a hardware wallet at minimum and consider multisig. See our cold storage entry for the full custody picture.
Every bitcoin on earth — from a hobbyist's satoshis to the US Strategic Bitcoin Reserve — is controlled by private keys and nothing else. Understand the key, and you understand what owning bitcoin actually means.
Continue with Cold Storage for how keys are protected in practice, Blockchain for the ledger keys interact with, and Bitcoin for the full monetary picture. The custody stakes scale all the way up: our global reserve tracker follows sovereign holdings that are, at bottom, just very well-guarded private keys.