How do wallets and private keys work, and what are best practices for key security?

A private key signs transactions; the public address is derived from it. Best practices: - Never log or transmit private keys - Prefer hardware wallets for high value - Use secure key storage and encryption - Implement phishing-resistant UX For apps, design clear signing prompts and avoid confusing approvals that users can’t understand.