On this page
Key takeaways
- A crypto wallet stores the keys that control your coins, not the coins themselves; the coins stay recorded on the blockchain.
- Custodial accounts trade control for convenience and account recovery, while self-custody gives you full control along with full responsibility for backups.
- There is no single best wallet: match the wallet to the amount, how often you transact and how confident you are managing a backup.
A crypto wallet does not hold coins. It holds the secret keys that prove you are allowed to move coins recorded on a blockchain. Once that clicks, the choice between exchanges, apps and hardware devices becomes a straightforward question of who holds the keys and how you back them up.
What a wallet really holds
Your crypto never actually sits on your phone. It lives as entries on a public blockchain. What your wallet holds are two linked pieces of information:
- A private key: a long secret number that signs transactions. Whoever has it can move the funds.
- A public key and the address made from it: the part you share so people can pay you.
Think of a mailbox on a busy street. Anyone who knows the address can drop letters in, but only the person with the key can open it and take things out. Your wallet app is the key ring, plus a window that shows what is in the mailbox.
The SEC's investor bulletin on custody puts it bluntly: a private key cannot be changed or replaced once created, and losing it means losing access to the assets it controls. That is why backups matter so much.
Custodial vs self-custody
The most important question about any wallet is simple: who controls the private keys?
With a custodial setup, such as an account on a crypto exchange, the company holds the keys. You log in with an email, password and two-factor code. If you forget your password, the company can help you back in.
With self-custody, you hold the keys yourself, usually backed up by a seed phrase. Nobody can freeze your account or block a withdrawal, but nobody can reset your access either.
| Feature | Custodial (exchange) | Self-custody |
|---|---|---|
| Who holds the keys | The company | You |
| Forgot your login | Account recovery with ID checks | Restore from your own backup, or lose access |
| Main risks | Hacks, company failure, frozen withdrawals, account takeover | Lost backups, stolen seed phrase, signing a malicious transaction |
| Good fit for | Small amounts, frequent buying and selling, new users | Larger or long-term holdings, using apps directly |
“Not your keys, not your coins,” explained fairly
You will hear this slogan often. It points to a real lesson: when exchanges such as FTX collapsed in 2022, customers' funds were stuck in bankruptcy proceedings because the company, not the customers, controlled them.
The other side matters too. Many people have lost crypto by misplacing a seed phrase or typing it into a fake website. For a beginner holding a modest amount, a well-known, regulated exchange with strong two-factor authentication can be a reasonable starting point while you learn.
A balanced approach: keep on an exchange only what you are actively using or could afford to lose, and move larger long-term holdings to self-custody once you are comfortable managing a backup.
Hot vs cold wallets
A hot wallet keeps its keys on a device connected to the internet, like a phone app or browser extension. It is convenient for everyday use, but it is exposed to malware and phishing.
A cold wallet keeps the keys offline, most commonly on a dedicated hardware wallet. It is less convenient but much harder to attack remotely.
The analogy: a hot wallet is the cash in your pocket, a cold wallet is the safe at home. Most people benefit from having both.
The main types of wallets
Mobile wallets
Apps on your phone. Easy to set up and handy for payments and scanning QR codes. Your phone's lock screen and the app's PIN are important layers of protection.
Browser extension wallets
Add-ons for a desktop browser that let you connect to websites such as DeFi apps. They are powerful and popular, which also makes them a favorite target for fake sites and malicious approval requests.
Desktop wallets
Programs installed on a computer. Their safety depends heavily on how clean and up to date that computer is.
Hardware wallets
Small dedicated devices that keep keys offline and ask you to confirm each transaction on their own screen. Even if your computer is compromised, an attacker cannot sign without the physical device and your approval. Compare models in our hardware wallet comparisons.
Newer designs: smart-contract, passkey and MPC wallets
Seed phrases are powerful but unforgiving, so the industry has been building alternatives.
Smart-contract wallets are accounts controlled by code instead of a single key. On Ethereum, standards such as ERC-4337 and the EIP-7702 feature added in 2025 let these wallets offer things like spending limits, batching several steps into one, letting an app pay your fees, and recovery through trusted devices or people. Some use passkeys, the same face or fingerprint sign-in your phone uses for websites, instead of a written phrase.
MPC wallets (multi-party computation) split signing power into separate pieces, for example one on your phone and one on the provider's server. No complete key ever sits in one place, so there is no single phrase to lose or steal.
How to choose a wallet for your situation
- Just starting, small amount: a reputable exchange account with app-based two-factor authentication, or a well-known mobile wallet.
- Using apps like DeFi or NFTs: a mobile or browser wallet holding only what you need for that activity.
- Saving for the long term: a hardware wallet with a carefully stored backup. See our seed storage comparisons.
- Worried about losing a written phrase: consider a smart-contract or MPC wallet, after reading how its recovery works.
Before you commit, ask yourself four quick questions:
- How much would it hurt to lose this? The more painful the loss, the more the extra effort of cold storage is worth it.
- How often will I move it? Frequent use favors a hot wallet; money you plan to leave alone for years suits cold storage.
- Which networks and tokens do I need? Not every wallet supports every blockchain, so check before you send anything.
- What is my recovery plan? Know exactly how you would get back in after a lost phone, a broken device or a forgotten password, and whether a family member could do it for you.
Whatever you pick, look for a wallet that supports the networks you need, is open about its security model, has a long track record, and is downloaded from the official source.
Wallet safety checklist
- Download apps only from the official website or app store listing, never from ads or links in messages.
- Buy hardware wallets directly from the maker or an authorized seller.
- Write down your backup offline and never share it. Our seed phrase guide shows how.
- Send a small test transaction before moving a large amount.
- Read every transaction and approval request before you confirm it.
- Keep your phone, computer and wallet software updated.
- Use separate wallets for everyday use and long-term savings.
- Remember that real support staff will never ask for your seed phrase. Learn the common tricks on our security and scams hub.
Where to go next
For most self-custody wallets, everything comes down to one backup: the seed phrase. Continue to lesson 6, the seed phrase guide, to learn how to write it down, store it and test it safely. After that, how to buy crypto safely puts it all into practice.
Frequently asked questions
Is a crypto exchange account a wallet?
It works like one from your point of view, but it is a custodial account: the exchange holds the private keys and you hold a login. That can be reasonable for small amounts, but you depend on the company's security, solvency and rules.
Do I need a hardware wallet?
Not necessarily on day one. Many people start with a reputable exchange or mobile wallet for small amounts and consider a hardware wallet once their holdings would be painful to lose.
What happens if my wallet app is deleted or my phone breaks?
With a standard self-custody wallet, your funds are safe on the blockchain and you can restore access on a new device with your recovery phrase. Without that backup or another recovery method, access is usually lost for good.
Can I use more than one wallet?
Yes, and many people do. A common setup is a small hot wallet for everyday use and a cold wallet or other well-backed-up wallet for long-term savings.
Sources
- Crypto Asset Custody Basics for Retail Investors – Investor Bulletin — U.S. Securities and Exchange Commission (Investor.gov)
- Ethereum wallets — ethereum.org
- Account abstraction — ethereum.org
- ERC-4337: Account Abstraction Using Alt Mempool — Ethereum Improvement Proposals
- What is an MPC wallet? — Zengo
- Crypto exchange FTX files for bankruptcy as wunderkind CEO exits — Reuters
Updated October 4, 2026 by The Crypto Guide editorial team. Educational content, not financial, legal or tax advice. Spot an error? Request a correction.