What's the Difference Between Keys, Addresses, and Wallets?
Three words, constantly confused
Crypto conversations blur keys, addresses, and wallets into one fuzzy concept. They are three distinct things, and most confusion about "where coins live" dissolves once they're separated.
The starting fact: coins don't live in wallets. They live as entries on the blockchain's ledger. What you hold is the means of controlling those entries.
In short: the ledger holds the money; you hold the keys.
The key pair
Ownership on a blockchain runs on public-key cryptography, the mechanism NIST IR 8202 describes as foundational to how these ledgers verify transactions. Keys come in mathematically linked pairs:
- Private key. A secret number. Whoever knows it can sign transactions spending the associated funds. It is not a password protecting an account — it is the control, full stop.
- Public key. Derived from the private key and safely shareable. Anyone can use it to verify that a signature came from the matching private key — without learning the private key itself.
This pairing is why the Bitcoin whitepaper defines a coin as a chain of digital signatures: each transfer is a signed statement handing control from one keyholder to the next, and the whole history is publicly checkable. The one-way relationship carries the entire design: deriving the public from the private is easy; reversing it is computationally infeasible.
Addresses
An address — the string you share to receive funds — is essentially a compact, checksummed form derived from a public key. Think of the relationship as:
- Address — like an account number: share freely.
- Public key — the verification tool behind it.
- Private key — the signing authority. Never shared, with anyone, ever.
One warning belongs in a terminology page because it is terminology: no legitimate service needs your private key or recovery phrase to "verify" anything. The FTC's guide notes that crypto payments lack card-style legal protections and typically can't be reversed — so a key handed to the wrong party means funds gone with no chargeback behind them. Requests for keys are a pattern from the scam glossary, not a security procedure.
In short: address out loud, public key in the machinery, private key in the vault.
Wallets
A wallet is software or hardware that stores keys and handles the bookkeeping — generating addresses, building transactions, signing them. The vocabulary that actually matters:
- Self-custody wallet. You hold the keys, on your device or on a dedicated hardware unit. Full control, full responsibility: keys lost is funds lost, with no recovery desk.
- Custodial arrangement. An exchange or service holds keys on your behalf, and you access funds through an ordinary account login. More familiar, but ownership at the ledger level belongs to whoever holds the keys — you hold a claim on the custodian.
- Hot vs. cold. A hot wallet's keys sit on an internet-connected device (convenient, more exposed); a cold wallet keeps them offline (inconvenient, less exposed).
- Recovery phrase. A human-readable list of words encoding the key material. Functionally equivalent to the private keys themselves — every warning above applies to it in full.
Bottom line
Keys are control, addresses are destinations, wallets are key management — and "who holds the keys" is the single most clarifying question you can ask about any crypto arrangement. Get these four terms straight and most of the vocabulary in the rest of this catalog, from transactions to smart contracts, snaps into place.