Private key or 2-factor authentication?

What’s the deal with “Private Keys”?