Section 4 — Wallets, Transactions, Custody, and Safety
Lesson 12 explains what a blockchain wallet does, separates public addresses from private credentials, and explains why keys and seed phrases must never be shared.
Estimated time: 65–100 minutes
Educational and safety boundary: This lesson provides general education about blockchain access and digital security. It does not provide individualized financial, investment, legal, or tax advice. It does not recommend a wallet, exchange, device, network, company, or financial product. You do not need internet access, an account, a wallet, or a digital asset to complete the lesson. Never place a real password, private key, seed phrase, authentication code, account number, or wallet address in a course response.
In Lesson 9, we examined how a community used BNB Smart Chain to create a token connected with the Prison Professors mission. We also discussed a public treasury address that people could inspect through BscScan, a blockchain explorer. That public record can support transparency because anyone can examine activity associated with the address.
The public address does not give a visitor authority to move the assets. Control depends on private credentials that must remain secret. Those credentials do not appear on BscScan, and Prison Professors will never ask a participant to provide them.
That distinction gives us a practical reason to study wallets, addresses, private keys, and seed phrases. A person may share an address in an appropriate setting, just as an organization may publish a mailing address. A private key or seed phrase belongs in an entirely different category. Anyone who obtains that secret may be able to exercise control without the owner's permission.
I encourage you to learn the concepts without creating an account or handling any real credential. Understanding the responsibility comes before using the technology.
Lesson 12 corrects the misconception that a wallet physically stores digital assets. It explains how wallets help people view blockchain records, manage credentials, and authorize actions.
Essential question: What information may be public, what information must remain private, and what responsibilities come with controlling digital credentials?
After completing this lesson, you should be able to:
Definition: A tool, application, or device that helps a person interact with blockchain accounts. Depending on its design, a wallet may display public records, prepare transactions, manage keys, and request signatures. The assets remain recorded on the blockchain rather than sitting inside the wallet.
Sample sentence: The wallet displayed the account balance by reading blockchain data and used the account's credentials to authorize a transaction.
Definition: A public identifier used to locate an account or destination on a blockchain. An address may be shared when appropriate, but sharing it can expose transaction history and does not prove who controls it.
Sample sentence: The organization published a public address so observers could inspect activity without receiving authority to move the assets.
Definition: The secret part of a cryptographic key pair used to create digital signatures and authorize actions associated with an account. A private key must not be shared.
Sample sentence: The private key remained secret while the network verified the signature created with it.
Definition: A sequence of words that some wallets use to generate or restore a set of keys. It is also called a recovery phrase or mnemonic phrase. Anyone who obtains it may be able to recreate the wallet's keys and control its accounts.
Sample sentence: The learner understood that a seed phrase was a powerful recovery secret, not an ordinary password or a course exercise.
Definition: A cryptographic result created with a private key to approve specific data, such as a transaction or message. A properly designed system can verify the signature without revealing the private key.
Sample sentence: The wallet asked the user to review the transaction details before creating a signature.
Definition: A process used to establish confidence that a person, device, or account has the authority or identity it claims. Proving control of a blockchain key does not automatically prove a person's legal identity.
Sample sentence: The application used a wallet signature for authentication, but the signature proved control of the key rather than the user's full identity.
A physical wallet may hold cash, identification, and cards. That familiar image creates a misleading idea when applied to blockchain technology. A blockchain wallet does not normally contain coins or tokens as objects inside a file or device.
The blockchain network maintains the account records. A wallet reads those records and provides tools for interacting with them. Depending on the wallet, a person may use it to:
The wallet is therefore closer to a control panel and key manager than a container of assets. If one compatible wallet application stops working, the blockchain record does not disappear. A person who still has the required credentials may be able to access the same account through another compatible tool.
The opposite is also important. Possessing a wallet application without the required credentials does not create control over an account. The interface and the authority are related, but they are not the same.
A public address is used to identify an account or destination on a particular blockchain. Someone may provide an address to receive a transfer, and a blockchain explorer may display the history associated with that address.
An address is not the same thing as a private key. On networks such as Ethereum and BNB Smart Chain, account addresses are created from public-key information through cryptographic steps. The precise format differs among networks, so an address should always be considered together with the intended network.
Public does not mean harmless in every context. An address may reveal balances, transfers, timing, and connections with other addresses. If a person publicly connects an address with a name, business, location, or profile, observers may be able to study a larger pattern of activity. Blockchain addresses are often described as pseudonymous because the public record shows the address while the human identity may require outside evidence.
For that reason, a learner should understand two separate rules:
A private key is a large secret number used in public-key cryptography. Software normally handles it behind the scenes. The private key is mathematically connected with a public key, but the system is designed so that a person cannot practically calculate the private key from the public information.
The private key's central role is authorization. When a wallet signs a properly formed transaction, the signature allows the network to verify that the request came from someone with the corresponding private key and that the signed data was not changed after signing.
The private key should not be transmitted with the transaction. A properly designed signature process proves possession of signing authority without publishing the secret itself.
This design creates both power and risk. A network may accept a valid signature even when the human owner was deceived, pressured, careless, or unaware of what the interface displayed. Cryptography can verify that a key signed particular data. It cannot determine whether the person exercised good judgment.
People sometimes see the word sign and think only of confirming a login. In Web3, a signature may authorize a transfer, approve a smart contract, accept terms, connect an account, or prove control of an address. The meaning depends on the exact data being signed.
I encourage learners to treat every signature request as an action that requires review. Ask:
A signature can be technically valid while the request is harmful. Later lessons will examine transactions and scams in more detail. The rule for this lesson is simple: never sign information that you do not understand.
Managing a separate backup for every private key would be difficult. Many modern wallets use a deterministic process in which one starting secret can generate a connected set of keys. A seed phrase presents recovery information as an ordered list of words that a person can record more accurately than a long string of numbers and letters.
Under the widely used BIP-39 specification, a wallet-generated mnemonic may contain 12, 15, 18, 21, or 24 words. The phrase is converted into a seed, and another process may derive many keys from that seed. This technical distinction explains why the phrase can restore more than one account.
Not every wallet uses BIP-39 or any seed phrase. Wallet designs, recovery methods, and compatibility rules vary. A person should never assume that a phrase works with every wallet or that a password can replace it.
A seed phrase is extremely sensitive because it may provide access to every account derived from it. It should never be:
This lesson will not display an example seed phrase. A string of ordinary words can look harmless even though a real phrase may function as a master recovery secret.
These secrets are sometimes confused:
The recovery process depends on the custody arrangement and wallet design, which Lesson 13 will examine. A custodial service may offer password recovery because the service controls the underlying keys. A self-custody wallet may have no company capable of restoring access after the recovery information is lost.
Different roles do not change the safety rule. None of these secrets belongs in a course response, message to a stranger, or unverified website.
Imagine a locked mailbox. The street address can be shared so people know where to deliver mail. The key should remain private because it opens the box.
This analogy helps distinguish a public address from a private credential. It also has limits. A blockchain address may reveal a lasting public history. A private key does not physically open a container; it creates mathematical signatures. A seed phrase may restore many keys rather than one lock. A blockchain network checks cryptographic rules rather than relying on a postal employee.
Use the analogy to begin understanding, then return to the precise concepts.
The Prison Professors community treasury provides a useful applied example. The community published a BNB Smart Chain address so observers could inspect activity through BscScan. A blockchain explorer can read the public ledger and display information connected with the address.
The explorer does not hold the assets, and the public address does not contain them. The blockchain records the account state. A wallet or signing system manages the credentials used to authorize actions.
The public record may show that an address received or sent assets. It does not prove by itself which human being controls the private credentials, whether a transfer followed an outside agreement, or how those credentials are protected. Those conclusions require additional evidence.
The case demonstrates a balanced use of public and private information:
We will continue using this case when discussing custody, transactions, smart contracts, and security. The purpose is education, not promotion of the PP token or any digital asset.
A valid signature can show that someone controlled a particular private key when signing the data. It does not automatically prove that the signer is a named person, owns an outside asset, had legal authority, acted voluntarily, or deserved access to a service.
This boundary connects Lesson 12 with Lesson 11. A token may be controlled by an address, and an address may be controlled through a key. Outside evidence is still needed to connect the key with a person, organization, agreement, or legal right.
Responsible systems combine cryptography with policies, identity checks when appropriate, recovery procedures, access controls, and human accountability. Technology can verify a signature without answering every question about the signer.
The scenario builds on the public Prison Professors community case discussed in Lesson 9. It does not reproduce the real treasury address, balance, or credentials.
A community publishes a BNB Smart Chain treasury address on its official information page. Supporters can enter that public address into BscScan and inspect the ledger history. A message then appears in a public chat:
Message received: “I work with the wallet provider. To confirm that the treasury belongs to your organization, send me the seed phrase and the latest authentication code. I will compare them with BscScan and place a verified label on the address.”
The request contains several false or dangerous ideas.
Reasoned response: The community should not reply with any credential or code. It should preserve the message if reporting is appropriate, use only established support channels, and verify any claim independently. Observers can continue checking the public address through the explorer. The private credentials must remain private.
Estimated time: 20–25 minutes
Materials: Separate paper and a pencil.
Create three headings on separate paper:
Place each hypothetical item under the best heading. Some items may require a short explanation.
Then write a short explanation for each question:
Conclude with four or five sentences describing the personal rules you would use to protect digital credentials.
Important limitation of the exercise: Every item is hypothetical. Do not copy, invent, request, or disclose a real credential, code, account number, or wallet address.
A. A container that physically holds coins and tokens away from the blockchain
B. A tool that helps a person view blockchain records, manage credentials, and authorize actions
C. A guarantee that every transaction can be reversed
D. A public list of every user's private keys
A. The name of a blockchain network
B. A public transaction identifier
C. A private key
D. A publicly designated receiving address
A. That the signed data was authorized with the corresponding private key and was not altered after signing
B. That the signer made a wise financial decision
C. That the signer owns every asset connected with the address
D. That the signer disclosed the private key to the network
The practical responsibility is to separate information that supports public verification from information that grants private authority.
Write one coherent journal entry of approximately 300–400 words. Do not submit a disconnected list of answers. Use the prompts below to organize a beginning, middle, and conclusion:
Your response should demonstrate your reasoning. Do not create, copy, request, or include any real password, private key, seed phrase, authentication code, account number, wallet address, transaction information, or other sensitive credential.
Write your response on separate paper or in an approved institutional messaging system. Include your name or approved Profile identifier, Lesson 12: Wallets, Addresses, Keys, and Seed Phrases, and the date you completed the entry.
Use one of the established Prison Professors Profile methods, subject to your facility's rules:
Keep a copy when circumstances permit. Never include passwords, private keys, seed phrases, authentication codes, account numbers, real wallet addresses, transaction details, or other sensitive credentials.
