What a wallet actually is
A crypto wallet does not store coins the way a leather wallet stores cash. The coins exist as entries on a blockchain. What a wallet holds is the secret material, the private keys, that lets you authorize moving those entries to someone else. Whoever can produce a valid signature from the right key controls the funds.
That single fact drives every category below. Wallets differ mainly in two questions: is the key kept on a device connected to the internet, and who holds the key, you or a company? Everything else is detail.
Nothing here is financial advice. Cryptocurrency prices are volatile, and people can lose all of what they put in, whether through price moves, mistakes or theft.
Axis one: hot versus cold
Hot wallets keep keys on a device that is online, such as a phone app, a browser extension or a desktop program. They are convenient for frequent use and for interacting with applications. The trade-off is exposure: malware, a compromised browser or a stolen unlocked phone can put keys at risk.
Cold wallets keep keys on something that is not normally connected to the internet. Common forms are dedicated signing devices, covered in the article on hardware wallets, and, less commonly, keys written on paper or metal and never typed into an online machine. Cold storage is harder to attack remotely but less handy for everyday spending, and physical loss or damage becomes the main risk.
The line is not perfectly sharp. A hardware device is plugged into a computer to sign, but the key itself is meant to stay inside the device. People often describe the arrangement as “cold” for that reason, though the details matter.
Axis two: custodial versus self-custody
Custodial wallets are accounts at a company, typically an exchange. The company holds the keys and you hold a claim on it, shown as a balance in an app. You log in with a password and perhaps two-factor authentication, and the provider can often help you recover access if you forget credentials.
Self-custody wallets put the keys in your hands. You are responsible for backing up the seed phrase and protecting it. Nobody can freeze your account, but nobody can reset it either. If the backup is lost and the device fails, the funds are generally unrecoverable.
A common shorthand in the community is that if you do not control the keys, you hold a promise rather than the coins. That is a simplification, because regulated custodians can be well run, but it points to the real issue: custodial holdings depend on the provider’s honesty, solvency and security. That exposure is called counterparty risk, and it has a long record of costly failures.
How the combinations look
| Type | Who holds the keys | Typical strength | Typical weakness |
|---|---|---|---|
| Exchange account | The company | Easy, recoverable access | Counterparty risk, account freezes |
| Mobile or browser wallet | You | Convenient, direct control | Exposed to malware and phishing |
| Hardware wallet | You | Keys kept off the internet | Cost, physical loss, setup mistakes |
| Multisignature wallet | Several parties or devices | No single point of failure | More complexity to set up and maintain |
| Paper or metal backup | You | No electronic attack surface | Fire, theft, damage, human error |
Many experienced users combine several of these rather than choosing one. For example, a small amount might sit in a phone wallet for everyday use, with a larger amount kept in a device that rarely touches the internet. This is an illustration of how people think about risk, not a recommendation.
Seed phrases and recovery
Most self-custody wallets generate a seed phrase, typically twelve or twenty-four words, that can rebuild all the keys. This is why the seed phrase is treated as the central security object: anyone who sees it can take the funds, and anyone who loses the only copy may lose access forever. Good practice generally involves writing it down offline, never photographing it or storing it in cloud notes, and never typing it into a website or sharing it with support staff. A genuine wallet provider does not ask for it.
The attacks each type tends to face
Hot wallets are most exposed to wallet phishing, fake apps, malicious browser extensions and approvals signed without reading them. Custodial accounts face account takeover, provider hacks and, in the worst cases, outright insolvency. Cold storage faces physical risks and user error during setup or recovery. No category is immune, which is why security incidents show up regularly in the crypto news cycle and sometimes become price events of their own.
Scams deserve a separate mention. Impersonators posing as support staff, fake giveaways and cloned websites target every wallet type, and the common thread is a request for a seed phrase or an unexpected approval. Readers who want the broader picture can look at how crypto scams usually work.
Matching the wallet to the situation
There is no single best wallet, only trade-offs that depend on the amount, the technical comfort of the holder and how often funds move. Some questions that help:
- How much would losing this balance hurt, and does that justify extra setup effort?
- Am I comfortable being solely responsible for a backup, possibly for years?
- Do I need to move funds often, or mainly hold them?
- What happens to these funds if I am incapacitated, and does anyone else know how to find the backup?
Anyone who trades actively usually needs some balance on trading platforms, because moving funds on and off takes time and fees. That choice brings counterparty exposure with it, which is one reason people often limit what they leave there.
Practical habits that apply everywhere
- Test with a small transfer before sending a large amount to a new address.
- Verify addresses carefully; clipboard-swapping malware exists.
- Keep software updated and download wallets only from the official source.
- Use strong, unique passwords and a hardware or app-based second factor rather than SMS where possible.
- Keep records for your own tax reporting, since rules vary by country and nothing here is tax or legal advice.
The central lesson is that a wallet is a way of managing keys, and the more control you take, the more responsibility comes with it. Weighing convenience against that responsibility, honestly and for your own circumstances, is what the whole topic comes down to.