Public/private key = username/password, but you can’t lose the password.

This description is good enough for 99% of use cases.