What is Private key?

A private key is the secret number that controls a wallet address. Whoever holds it can sign transactions from that address, which means spending whatever it holds; whoever does not hold it cannot, no matter what else they know. The key is generated once, randomly, and the corresponding public key and address are derived from it by one-way mathematics, so the address can be shared freely while the key stays secret. The address can be published on a business card; the key must never leave the device that holds it.

In practice you rarely see a raw private key. Wallets derive all of their keys from a seed phrase and keep them inside the app or, for a hardware wallet, inside the device. The key is used to sign, and only the signature leaves the wallet. This is the mechanism behind self-custody: the assets are on a public ledger, and control of them is nothing more than control of a key. Losing the key is losing the funds; there is no recovery process anywhere in the system.

Everything that is not signing can be done without the key. Reading a balance, listing transactions, valuing a position, checking an approval, all of it works from the public address, because the ledger is public. This is why a portfolio tracker has no reason to ask for a private key, a seed phrase or a wallet connection, and why any tool that does should be treated as hostile.

TrueHold reads addresses and read-only exchange keys and never holds a private key or a seed phrase. Nothing in the product can sign a transaction, which is the same as saying nothing in it can move an asset.

Key management is the whole discipline of self-custody. Hardware wallets exist to keep the key inside a device that only ever emits signatures; multisig setups exist so that no single key is a single point of failure; backups exist because the key, unlike a password, cannot be reset. Every one of those practices is about the key, and none of them is about the address.