💡 The Plain-English Definition
Public-key cryptography is the math that lets you prove you own bitcoin without ever revealing your secret. It uses two linked keys — one public, one private — built so that knowing the public one tells you nothing useful about the private one.
🤔 But Why Though?
Traditional security works by keeping a secret: a padlock keeps people out because only the right key fits. The problem is sharing. If you want someone to send you a locked box, you would first have to give them a copy of your key — which defeats the purpose. Public-key cryptography solved this with a clever asymmetry: one key locks, and a different key unlocks.
So you keep two keys. The public key verifies, or encrypts. The private key signs, or decrypts. You can give your public key to anyone — all it lets them do is check your signatures or send encrypted messages to you. The private key stays secret, and it is the only thing that can sign or decrypt.
Bitcoin uses a specific type of this called elliptic-curve cryptography. It is a branch of math where a kind of “multiplication” on a special curve is easy to do, but running it backwards to recover the original number is effectively impossible for today’s computers. Your private key is a number. Your public key is what you get by multiplying a fixed starting point on the curve by that number. Anyone can use your public key to check a signature you made. But no one can work backwards from it to your private key.
When you spend bitcoin, your wallet creates a digital signature — a mathematical proof, made with your private key, that you authorised this exact transaction. Every node on the network checks that signature against your public key. If the signature is correct, the transaction is valid. And at no point does your private key itself cross the network. Only the signature does.
🌍 The Real-World Analogy
Think of public-key cryptography like a padlock you can give to anyone. You make a padlock and hand copies to anyone who wants to send you a locked box. They can lock it, but only you hold the key that opens it. The lock — your public key — is safe to share. The key — your private key — never leaves your hands. Bitcoin’s signing works the same way: your public key is the freely shared lock, and your private key is the one thing that proves it is really you, without ever leaving your possession.
⚡ So What?
Understanding public-key cryptography makes clear what a Bitcoin “wallet” really does. It does not store bitcoin — bitcoin lives on the blockchain. It stores your private keys, which are the mathematical proof of ownership. Your address comes from your public key. Your right to spend is proven by your private key’s signature. The whole system rests on one thing: how extremely hard it is to reverse that one-way link from private key to public key.
