A private key is a very large random number. Signing a transaction with it proves control of the matching public-key and therefore the crypto-address derived from it, without ever revealing the key.
There is no recovery mechanism. No issuer can reset it, no court can restore it, and anyone who copies it can drain the address instantly and irreversibly. This is the defining difference between crypto custody and a bank account.
Practical rules: never type a key or seed-phrase into a website, never store it in a photo, note app, or password manager sync you do not control, and assume any key that has touched an internet-connected machine may be compromised.
Related: seed-phrase, public-key, hardware-wallet, wallet-drainer