The short answer
Your crypto lives on the blockchain, not in an app. A wallet is the thing that stores the keys which let you move it. Lose the keys and the balance still exists, permanently, with no way to reach it.
Every wallet is defined by two questions: who holds the keys, and is it connected to the internet. Everything else, phone or laptop or small metal device, is a detail hanging off those two answers.
Why "wallet" is a bad name
A leather wallet contains your money. A crypto wallet contains no currency at all. The coins are entries on a public ledger, and the wallet holds the secret that lets you sign a new entry moving them.
A keyring is the better picture. Emptying your keyring does not empty your house, and losing it does not move the furniture. It just means nobody can get in, including you. That is exactly what losing a crypto wallet does.
This matters practically, not just semantically. It explains why you can restore a wallet onto a new phone and find your balance intact, why a broken device is not a catastrophe but a lost recovery phrase is, and why two different apps can show the same funds.
The two questions that define every wallet
Any wallet, however it is marketed, is just a position on these two axes.
Question one: who holds the keys?
This decides who can move your money, and who you are trusting.
- Custodial
- A company holds the keys. You have an account with them, much like online banking. They can freeze it, lose it, or fail.
- Self-custody
- You hold the keys. Nobody can freeze your funds, and nobody can help you if you lose your backup.
Exchanges vs wallets covers this distinction in full, including how each model fails.
Question two: is it online?
This decides how exposed the keys are to remote attack.
- Hot
- Keys sit on an internet-connected device. Convenient, and reachable by anything that compromises that device.
- Cold
- Keys stay on something not connected to the internet. Awkward to use, and far harder to reach remotely.
Cold does not mean invulnerable. It moves the risk from remote attackers to physical loss, damage and your own backup discipline.
The combination is what matters
A custodial account is somebody else's hot wallet with your name on it. A hardware device is cold self-custody. A phone app is hot self-custody. Those are genuinely different risk profiles, and knowing which one you are using tells you what you actually need to worry about.
The forms a wallet takes
Five shapes cover nearly everything, plus backup media. No products are named here; the point is the category and what it trades away.
An account on a trading platform
- What it is
- Where most people start. You sign in with an email and password, and the company holds the keys.
- Good at
- Buying, selling, and recovering your access if you forget a password. The familiar parts of banking carry over.
- Bad at
- Independence. You cannot move funds if they suspend withdrawals, and their failure is your loss.
- How it fails
- Account takeover, the company collapsing or freezing accounts, or the platform itself being compromised.
A phone app
- What it is
- An app that generates and stores keys on your phone. It shows a recovery phrase at setup, which is the real wallet.
- Good at
- Everyday use. Small amounts, frequent transactions, paying for things.
- Bad at
- Holding meaningful savings. The keys live on a device that goes everywhere and runs everything else.
- How it fails
- A lost or stolen phone with no backup of the phrase, a fraudulent app, device malware, or approving something malicious by tapping through it.
A desktop program
- What it is
- The same idea on a computer. Keys stored locally, usually with more detailed controls than a phone app.
- Good at
- Visibility and control. Larger screens make it easier to read what you are actually approving.
- Bad at
- Being safer than the computer it sits on, which for most people is the machine they browse and download with.
- How it fails
- Malware and keyloggers, a drive failure with no backup, or a counterfeit download.
A browser extension
- What it is
- A wallet inside your browser, built so websites can request signatures from it.
- Good at
- Interacting with websites that need a wallet, which is why people install one in the first place.
- Bad at
- Caution. It is designed to say yes to websites quickly, and it lives where the risky links are.
- How it fails
- Counterfeit extensions, a convincing site asking you to sign something you did not read, and permissions you granted once and forgot.
A dedicated hardware device
- What it is
- A small purpose-built device that keeps keys inside itself. It signs transactions internally, so the keys never reach the connected computer.
- Good at
- Holding amounts you would be upset to lose, over long periods, with few transactions.
- Bad at
- Convenience, and forgiving carelessness. It also costs money, and it is only as safe as where you bought it from.
- How it fails
- A tampered device from an unofficial seller, a recovery phrase stored badly, physical loss with no backup, or the owner being talked into approving a transfer anyway.
Written or stamped backups
- What it is
- Not really a wallet. It is the recovery phrase recorded on paper or stamped into metal, which can restore the wallet onto any compatible app or device.
- Good at
- Surviving. No battery, no software, nothing to update or go obsolete.
- Bad at
- Everything else. It cannot be used directly, and anyone who reads it owns the funds.
- How it fails
- Fire, water, fading ink, being thrown out by someone tidying up, being found, or being photographed.
The backup is the wallet
Every self-custody option above comes down to the recovery phrase. The device is replaceable. The phrase is not, and nobody legitimate will ever ask you for it, in any form, for any reason.
How to store one, what is safe to share, and how the request to hand it over actually arrives are covered in private keys and seed phrases.
Matching a wallet to your situation
There is no best wallet, and anyone claiming otherwise is usually selling one. There is only a reasonable fit between four things about your situation and what a wallet type trades away.
- How much is at stake. The amount you would be distressed to lose is the amount that does not belong on a device you carry everywhere.
- How often you need to touch it. Frequent access pushes toward hot. Rarely touched holdings have no reason to sit anywhere exposed.
- How much complexity you will actually tolerate. A security setup you find annoying is a setup you will shortcut within a month. An honest answer here beats an ambitious one.
- Who else might need access. If something happened to you tomorrow, could anyone reach these funds? For self-custody the answer is usually no, and that is worth deciding deliberately rather than by accident.
The split most experienced people use
Not advice about amounts, and not a recommendation to hold crypto at all. It is simply the pattern that keeps showing up, and it follows directly from the four questions above.
| Purpose | Typical choice | Reasoning |
|---|---|---|
| Spending and small transactions | Hot wallet, small balance | Convenience matters and the loss would be survivable |
| Buying and selling | A platform account, briefly | Used for the transaction, not as storage |
| Longer-term holdings | Cold self-custody | Rarely touched, so the inconvenience costs little |
| Recovery | Phrase stored offline, more than one location | Protects against fire and theft at a single place |
Scroll the table sideways to see every column.
Mistakes that cost people the most
These are the recurring ones, and all of them are avoidable.
- Treating a platform account as a wallet. If a company can reset your password, they can move your funds. That is fine as long as you know it.
- Never testing the backup. A recovery phrase you have never restored from is a theory. Test it with a small amount before trusting it with more.
- Storing the phrase digitally. A photo, a screenshot, a notes app or an email to yourself converts a cold backup into a hot one.
- Buying hardware second-hand or from a marketplace seller. A tampered device can be set up with a phrase the seller already knows.
- Approving without reading. Most self-custody losses are not broken cryptography. They are people clicking approve on something they did not understand.
- Using one wallet for everything. It forces a single compromise between convenience and safety, and guarantees the wrong one for half your funds.
What no wallet protects you from
Worth being blunt, because wallet marketing can imply otherwise.
- Your own approval. If you authorize a transaction, every wallet carries it out. Being deceived is not a technical failure the wallet can catch.
- Sending to the wrong address. There is no recall. Transfers are final.
- Price falling. A wallet secures access, not value.
- Scams. No wallet can tell whether the person you are talking to is lying. See red flags.
- Losing the recovery phrase. No support line, no reset, no exception.