A crypto wallet does not hold coins the way a leather wallet holds bills. Your bitcoin and ether always stay on their blockchain. What a wallet holds is the private key that lets you move them, plus an interface to see balances and sign transactions. Once you understand this, the different types of crypto wallets become simple to compare: the real questions are who controls the key, and whether it ever touches a device connected to the internet.
This guide explains crypto wallets for beginners: custodial and self-custody wallets, hot and cold wallets, the main formats (apps, browser extensions, hardware wallets, cards, multisig) and which one fits which use.
What a crypto wallet actually does
Every account on a blockchain is controlled by a pair of keys. The public key, shortened into an address, is what you share to receive funds. The private key is the secret that signs transactions; whoever has it can spend the funds, and nobody can reverse a valid transaction.
Most wallets do not ask you to manage raw private keys. They generate a recovery phrase, usually 12 or 24 words from a standard list (BIP39), from which all your keys and addresses are derived. One phrase can restore many accounts on many blockchains in any compatible wallet. Some makers use other formats: Trezor’s recent devices default to a 20-word backup based on the SLIP39 standard, for example.
That phrase is the master key to your funds. Our guide to seed phrase security explains how to store it.
What happens when you send crypto
A transfer from a self-custody wallet follows the same pattern whatever the format:
- You enter the recipient’s address, the amount and the network in the wallet app.
- The app builds the transaction and estimates the network fee (gas on Ethereum, a fee rate on Bitcoin).
- The private key signs the transaction: in the app for a hot wallet, inside the device for a cold wallet, after you confirm the details on its screen.
- The signed transaction is broadcast to the network and included in a block. From then on it cannot be cancelled.
The key never needs to leave the wallet. That is why a legitimate wallet never asks you to send or type your recovery phrase to make a payment.
Custodial vs self-custody wallets
| Custodial wallet | Self-custody wallet | |
|---|---|---|
| Who holds the keys | The company (exchange, broker, app) | You |
| Login | Email, password, 2FA | Recovery phrase, PIN or device |
| If you forget access | The company can restore your account after checks | Only your backup can restore it |
| Main risk | Company failure, hack, frozen withdrawals | Losing the backup, phishing, your own mistakes |
| Typical examples | Account on an exchange or payment app | Mobile or browser wallets, hardware wallets |
With a custodial wallet, you hold a claim on a company, not the coins themselves. That is convenient and, with a licensed provider, regulated, but it carries the risk of the provider failing: when FTX collapsed in November 2022, customers could not withdraw, and its founder was later sentenced to 25 years in prison for fraud.
With self-custody, no company can freeze or lose your funds, but no help desk can recover them either. The trade-off is between counterparty risk and personal responsibility.
Hot vs cold wallets
A hot wallet keeps its keys on a device connected to the internet: a phone, a computer or a browser. It is free, quick to set up and practical for daily payments or DeFi, but malware or a malicious website can target it.
A cold wallet keeps the keys on a device that never exposes them online, usually a hardware wallet. The computer or phone prepares the transaction, but the signature happens inside the device, after you confirm it on its own screen. Cold storage is slower to use and costs money, but it protects larger amounts much better.
The main types of crypto wallets
Exchange and app accounts
Buying on an exchange gives you a custodial wallet by default. It is the easiest place to start and the natural place to trade, but long-term savings left there depend on the company’s solvency and security.
Mobile and desktop wallets
Apps such as Exodus, Trust Wallet or Phantom store keys on your phone or computer, protected by a password or biometrics. They suit small and medium amounts and everyday use. Download them only from the official site or store, as fake wallet apps are a common scam.
Browser extension wallets
Extensions such as MetaMask connect to decentralised applications. The main risk is not the extension itself but what you sign: a malicious site can ask for a token approval that lets it drain your balance later. Read every request and revoke approvals you no longer need.
Hardware wallets
Hardware wallets such as the Trezor Safe 3 or the Ledger Nano range generate keys inside a dedicated chip and show transaction details on their own screen. They work with a companion app (Trezor Suite, Ledger Wallet) and can also sign for browser wallets. Buy them new from the maker or an authorised reseller: Ledger warns that second-hand devices can be pre-configured by a seller who keeps a copy of the recovery phrase.
Card wallets
Some cold wallets take the form of an NFC card that you tap on your phone, such as Tangem. They are compact and simple, but have no screen, so you check addresses on your phone.
Multisig and smart-contract wallets
A multisignature wallet requires several keys (for example two out of three) to approve a transaction, which removes the single point of failure. Smart-contract wallets on Ethereum-compatible networks add features such as spending limits, recovery through trusted contacts or passkeys. They are powerful but more complex; mistakes in setup can lock funds.
Paper wallets
Printing a private key on paper was common in Bitcoin’s early years. Today it is generally discouraged because spending from a paper wallet requires importing the key into software, which exposes it.
Which wallet for which use?
| Your situation | A sensible choice |
|---|---|
| You buy small amounts and may sell soon | A licensed exchange account with strong 2FA |
| You pay or use DeFi with small sums | A reputable mobile or browser wallet |
| You hold savings for years | A hardware wallet, with the backup stored offline |
| You hold large amounts or share control | Multisig, possibly with several hardware wallets |
Many people combine them: an exchange to buy, a hot wallet with a small balance for daily use, and a cold wallet for savings. The project sites bitcoin.org and ethereum.org keep neutral lists of wallets compatible with their networks.
Wallets and regulation
Custodial wallets are regulated as financial services: in the EU, holding crypto on behalf of clients requires a MiCA authorisation for custody; in the US and the UK, custodial providers fall under the same registrations and licences as exchanges. Self-custody wallet software is generally not licensed, because the developer never holds your funds.
Regulation still reaches you when you move funds between the two. In the EU, the Transfer of Funds Regulation applies since 30 December 2024: when you send more than €1,000 from a licensed platform to your own wallet, or receive it from one, the platform must check that you control that address, for example by asking you to sign a message or make a small test transfer.
How to choose a crypto wallet
- Supported networks: make sure the wallet supports every blockchain you use, not only the token name.
- Track record and transparency: open-source code, independent audits and the way past incidents were handled.
- Backup method: a standard recovery phrase can be restored in other wallets; proprietary backups may tie you to one maker.
- Ease of use: a wallet you understand is safer than a sophisticated one you misuse.
- Costs: wallets are often free, but built-in swaps and purchases add fees or spreads. Hardware wallets have a purchase price.
Mistakes that cost people their crypto
- Typing a recovery phrase into a website, an app or a “support” chat. No legitimate service ever asks for it.
- Storing the phrase as a photo, in cloud notes or in an email.
- Installing a fake wallet found through a search ad.
- Approving an unknown signature request on a website.
- Sending tokens on a network the receiving wallet does not support.
Ready to move to cold storage? Follow our step-by-step guide on how to set up a hardware wallet.
