UNDERSTAND BEFORE USING
Wallet address, private key and recovery phrase explained
No prior knowledge needed. New terms are explained as you go.
THE SHORT ANSWER
An address identifies an account and can be shared to receive a transfer on the correct network. A private key authorizes actions. A recovery phrase can recreate the keys used by many wallets. The last two must stay secret; an app password does not replace them.
Bob asks for an address to send you crypto. Elsewhere, a popup asks for twelve words to “verify your wallet”. These requests are very different: the second may hand control of your funds to a stranger.
The address: where to receive, not a secret
Think of a mailbox: its address tells people where to deliver a letter. A wallet address plays a similar role in identifying an account. You can share it to receive assets, provided the asset and network are compatible.
The analogy has a limit: on a public blockchain, sharing an address can also reveal its history and balances. It is not a password, but that does not make it private information either.
The private key: the power to authorize
For an ordinary key-controlled account, the private key digitally signs actions. Signing means producing a proof the network can check without publishing the secret itself.
Someone who obtains that key can authorize operations as you. Neither a paying friend nor customer support needs it to send you money. Some accounts use different rules, including multiple signatures or recovery mechanisms; check their documentation.
The recovery phrase: access to multiple keys
Many wallets give you a sequence of words to preserve, often twelve or twenty-four. This phrase can recreate multiple keys and accounts. Think of a spare set of keys, rather than a simple login code.
A separately imported account might not be covered by the phrase. Some wallets do not use one at all: follow your tool’s own backup method. Never enter a real phrase into a simulator, support form or page sent to you in a message.
The app password: a local lock
A password may protect opening the app on your device. Changing it does not invalidate a private key or recovery phrase that has already been stolen.
Imagine someone copying your spare door key. Changing your phone’s passcode does not change the door lock. If a phrase is exposed, treat the affected accounts as compromised and follow the wallet’s official procedure using a trusted device.
Before sharing anything
To receive funds, find the address in your own wallet and confirm the supported network with the sender. Check the entire address: copying an unfamiliar incoming entry from your history can mislead you.
- Address: can be shared to receive funds, with network and privacy considerations.
- Private key: do not share it.
- Recovery phrase: keep it out of conversations and websites requesting it.
- Password: do not disclose this either. Genuine support does not need your secrets.
Sources and further reading
- Ethereum.org — Ethereum accounts · in English
- MetaMask — Basic safety and security tips · in English
- Bitcoin.org — Securing your wallet · in English
Page updated on
Documentation checked on · WhyTheBlockchain · Editorial approach