Web3 Survival Manual 01 | What's the difference between private key/mnemonic words and wallet passwords?
If you forget your wallet password, you won't necessarily lose your coins; once the mnemonic words are leaked, it's really dangerous. Author: Tyler Tyler usually answers questions to some friends who are new to Web3, and has also encountered all kinds of problems. For example, some people ask, “Can I recover my wallet if I mistakenly deleted/forgot my password?”; there are also people who keep screenshots of mnemonic words in an album and think it doesn't matter if you don't send them to others; there are also people who haven't been able to tell the difference between a trading platform account and a wallet they've downloaded themselves. These questions seem basic, but in reality, many people who have used wallets for a few years don't necessarily really understand them. Therefore, I'm planning to launch a new “Web3 Survival Handbook” series to try not to use dark words, and focus on issues that seem small but are actually really important to help everyone understand and use Web3 step by step. This article is the first part of the “Web3 Survival Handbook”. Let's start with the most important things: private keys, mnemonics, and wallet passwords. What's the difference? 1. Remember one sentence: There are actually no coins in the wallet. Many people think that their BTC, USDT, ETH, or other tokens “exist in the wallet.” Strictly speaking, however, the assets are not in the wallet app, but are recorded on the blockchain. In other words, the wallet you use, whether it's MetaMask, OKX, SafePal, TP, or imToken, is more like a set of tools to help you keep your keys, rather than a safe for storing assets: the blockchain records how many assets an address has, and where those assets have been transferred; the wallet is responsible for helping you keep the “key” to this address and help you complete the transfer of assets to and from this address; for example, when you transfer, exchange tokens, or authorize an on-chain application, the wallet will call The private key stored internally signs this operation, which is equivalent to proving to the blockchain that the person controlling this address actually agreed to perform this operation. Therefore, the wallet app is not a safe with coins; rather, it is more like a box containing keys — what is really valuable is the key (private key) inside rather than the box itself. This also explains two things that many people don't understand: even if the original wallet app goes out of business, is removed, or accidentally deleted, as long as you back up the correct private key, you can download another wallet, re-import the private key and restore it, because currently the industry is based on the same set of technical standards, and the import logic of each wallet is interoperable. If you put the same key in a different box, the lock can still be opened; if the private key is taken by someone else, even if the phone is still in your hands and the wallet app is not deleted, others can still transfer your assets — because others can import this key into their own wallet However, blockchain only recognizes the key, and who doesn't recognize the key; 2. What is the difference between private keys, mnemonic words, and wallet passwords? Since private keys are so important, what are mnemonic words? In fact, mnemonic words appeared mainly to make it easier for ordinary people to back up their wallets. Because the private key is a string of characters randomly generated by the system, and it is long and messy, manual backup is easy to miscopy, and it is almost impossible for ordinary people to directly remember it. Therefore, the industry has adopted a common set of standards to “convert” all private keys into mnemonic words composed of 12 or 24 English words. In other words, the private key and the mnemonic are essentially the same key, only in a different format. Extend it a bit: theoretically speaking, a set of mnemonic words can derive multiple private keys. For ease of understanding, you can think of a private key as a specific key, and mnemonic words are more like a total backup of a keychain (I also talked about why mnemonics are usually generated from a fixed set of cryptographic assets, and the basic logic behind them; interested friends can take a look again). Most mainstream wallets now allow users to back up mnemonic words when created, and ordinary users are rarely directly required to copy a long list of private keys. However, you can't tell anyone, whether it's the private key or the mnemonic phrase. Under normal circumstances, neither wallet customer service, project party, or trading platform staff will ask you to send him your private key/mnemonic phrase. Anyone who asks you to provide a private key on the grounds of “verifying the wallet,” “removing risk control,” “receiving airdrops,” or “helping to recover assets” can basically be handled directly as a fraud. So what's the wallet password? The wallet password, that is, the PIN code or unlock password set when the app is opened, is only used to unlock the app itself. Similar to a mobile phone screen lock, it's not the same thing as a private key or mnemonic. Everyone can remember one...








