Crypto wallets explained

A crypto wallet holds your keys, not your coins. The coins live on the blockchain, and the wallet stores the secret that proves you are allowed to move them.

Get that one idea straight and almost every wallet decision becomes easier.

What a wallet actually does

ethereum.org defines a WalletThe app or device that holds your keys, not your coins. as “an app or device that lets you hold, send and receive ETH and other tokens, and sign in to apps.” The word “hold” is doing loose work there. What the wallet really holds is your Private keyThe secret that proves the coins are yours. .

When you send crypto, the wallet uses that key to sign the transaction. bitcoin.org explains that the signature proves ownership and stops anyone from altering the transaction after it is sent. The network checks the signature, not your name, your email or your face.

That is the trade. No bank can freeze your wallet, and no bank can rescue you if you lose the key.

Custodial vs self-custody

Every wallet falls into one of two camps, and this matters more than which brand you pick.

Custodial. A company holds the keys for you. This is what happens when you buy crypto on an exchange and leave it there. ethereum.org notes that exchanges link your wallet to “a username and password that you can recover in a traditional way.” Forget your password and you can reset it. The cost is trust: ethereum.org adds that “if the exchange has financial trouble, your funds would be at risk.” The CFPB has recorded consumers who could not access their funds because of “outright platform failures.”

Self-custody. You hold the keys. ethereum.org says “wallet providers don’t have custody of your funds” in this setup. Nobody can freeze or lose your coins on your behalf, and nobody can get them back if you lose your keys either.

bitcoin.org sums up the trade-off: “When a third party controls your keys, you rely entirely on their security and honesty.”

Hot wallets and cold storage

The second split is about whether your keys touch the internet.

Hot wallets are apps on your phone, computer or browser. They are free, quick to set up and convenient for small amounts and everyday use. Because they live on internet-connected devices, they are more exposed to malware and phishing.

Cold storage keeps keys offline. bitcoin.org calls an offline wallet “the highest level of security for savings.” A hardware wallet is the most common version: a small device that signs transactions without ever exposing the key. ethereum.org says that with a hardware wallet “your private key never touches the internet and stays completely local on your device.” bitcoin.org adds that “no software can be installed on them,” which makes them hard to attack from a compromised computer.

A sensible split for many people: a hot wallet for small amounts you are actively using, Cold storageKeys kept on a device that never touches the internet. for anything you would be upset to lose.

Your seed phrase is the whole wallet

When you set up a self-custody wallet, it shows you a list of words. That list is your Seed phraseThe master key to your wallet. Never share it. Never type it into a website. . ethereum.org says wallets “will often give you a seed phrase that you must write down somewhere safe,” and that “this is the only way you’ll be able to recover your wallet.”

Anyone who has those words has your crypto. Not a copy of it: the actual coins, on any device, anywhere in the world.

• Write it on paper or metal. ethereum.org: “Don’t store it on a computer. Write it down and keep it safe.”
• Never photograph it. Cloud photo backups are exactly where thieves look.
• Never type it into a website. A real wallet only asks for it when you are restoring on your own device.
• Store it where fire, flood and roommates are not.

Common ways people lose wallets

Most losses are not clever hacks. They are ordinary mistakes and old scams wearing new clothes.

• Fake support. ethereum.org notes that real staff “will never communicate with you through private, unofficial channels.” The helpful stranger in your DMs is not support.
• Phishing links. “Never open a link or attachment from email addresses you don’t recognize,” per ethereum.org.
• Wrong addresses. Always check that the address “exactly matches the desired recipient’s address,” as ethereum.org puts it. Payments are final: the FTC says crypto payments “typically are not reversible.”
• Unlimited approvals. When an app asks to spend your tokens, ethereum.org advises: “do not allow unlimited spend limits.” Review and revoke old approvals you no longer use.
• No backup. bitcoin.org says a stored backup “can protect you against computer failures and many human mistakes.” Lost keys mean coins that stay on the ledger forever, untouchable.

How to choose your first wallet

Keep it boring. Pick a wallet that supports the network you actually use (Bitcoin, Ethereum or both), is widely used and well reviewed, and is downloaded from the official site or app store link. Fake wallet apps exist, so check the publisher name.

Then do a dry run before you put real money in:

1. Install the wallet and write down the seed phrase on paper.
2. Delete the app, reinstall it and restore from your written phrase.
3. Send a tiny amount in, then send it back out.

If you can do all three calmly, you understand your wallet well enough to use it.

What to do next

Now you know where crypto is kept and who holds the keys. The next step is getting some in the first place.

• Continue to How to buy crypto, step 5 of the course.
• Read Seed phrase security for a deeper checklist on storing your recovery words.
• Bookmark How to spot crypto scams before anyone slides into your DMs.