2. You can chose a string of 256 bits yourself. If you do that you can be sure its private.