Crypto glossary
Key management
Key management is the set of practices for generating, storing, using, backing up and retiring the private keys that control crypto assets.
In crypto, whoever holds the private keys controls the funds, so key management is security itself. It covers the whole life cycle: generating keys with good randomness on a trusted device, storing them in hardware wallets, secure elements or HSMs, deciding who can sign and under what conditions, keeping backups, rotating keys after staff changes or suspected exposure, and destroying old material safely.
For individuals, it means a hardware wallet, a well-kept seed phrase backup and perhaps a passphrase or multisig. For companies, exchanges and funds, it becomes a formal discipline with key ceremonies, segregation of duties, MPC or multisig schemes, approval policies, audit trails and incident plans. Regulators and auditors increasingly review these controls, and custody frameworks in many jurisdictions require them.
Most of the largest thefts in crypto history came from weak key management rather than broken cryptography. The 2022 Ronin bridge hack, where attackers obtained five of nine validator keys, is a standard example. More controls also add complexity: every extra backup or signer is another thing to lose or protect.
Example
A crypto fund generates its treasury keys in a recorded ceremony, splits signing among three executives with a 2-of-3 policy and stores sealed backups in two bank vaults.