What a crypto wallet actually is

A crypto wallet does not hold your crypto. The coins only ever exist as entries on a public ledger, and they never leave it. What a wallet holds is a private key — a secret number that proves you are allowed to move whatever is recorded against a particular address.

That distinction sounds academic and it is the single most useful thing to understand, because almost every piece of advice in crypto follows from it directly.

Whoever has the key controls the funds. That is the entire security model. There is no account, no password reset, no support desk, and no legal owner recorded anywhere. The ledger does not know who you are; it only checks whether a transaction was signed by the right key. Which is why a stolen key is not like a stolen password — there is nothing to change afterwards, and no one to appeal to.

A seed phrase is your keys, written in a form a human can copy. The twelve or twenty-four words are not a password protecting the wallet. They are the wallet, encoded into words drawn from a standard list of 2,048. Anyone who reads them can rebuild your wallet on any device, anywhere, without your phone, your PIN, or your permission. And because the same standard is used across the industry, those words usually work in a competitor's software too — which is a genuine protection against any one company disappearing, and simultaneously the reason the words are so dangerous to leave lying around.

One phrase, many addresses. Modern wallets generate an effectively unlimited series of addresses from that single seed, following a numbered path. This is why your wallet can show you a fresh receiving address each time without needing a new backup, and it is also why a restored wallet sometimes appears empty when it is not: restored with different path settings, the software generates a different series of addresses and finds nothing at them. The funds are exactly where they always were. The wallet is looking in the wrong place.

Hot and cold describe one thing: whether the key ever touches an internet-connected machine. A phone or browser wallet is hot — convenient, fine for spending amounts, and exposed to everything else running on that device. A hardware wallet is cold: the key is generated on a small dedicated device and never leaves it, transactions are sent to the device to be signed, and only the signature comes back. That removes the most common theft route, malware on a general-purpose computer, and replaces it with a different job — keeping a recovery phrase safe for years, in a house that may one day flood, burn, or be moved out of in a hurry.

Custodial wallets are not wallets in this sense at all. If a company can reset your access, they hold the key and you hold a claim against them. That is not a criticism — a claim against a solvent, regulated company is a perfectly reasonable thing to own, and it comes with recourse that self-custody structurally cannot offer. It is simply a different asset from the one people think they are buying, and the difference is invisible right up until the company freezes withdrawals. What "not your keys, not your coins" actually means takes that apart properly.

What the device is, and is not, protecting you from. A hardware wallet protects the key from your computer. It does not protect you from approving a malicious transaction — if you confirm it on the device, the device will sign it, because that is its job. It does not protect you from losing the recovery phrase. And it does not make the phrase safe to type into a website. The screen on the device exists so you can verify what you are signing against something the malware on your laptop cannot rewrite; using it without reading that screen throws away most of what you paid for.

The realistic failure modes, in the order they actually happen. Losing the backup. Storing the backup where someone else finds it. Approving something you did not read. Typing the phrase into a convincing fake. Notice that only one of those is a technology problem, which is roughly the ratio in practice — the tooling is mature, and the losses are overwhelmingly procedural.

Two rules that cover most of it. The recovery phrase goes on paper or metal, never in a photo, a password manager note, a cloud drive, or an email to yourself — and never gets typed into anything that is not the wallet device itself, restoring the wallet. No legitimate service will ever ask for it: not an exchange, not a support agent, not a wallet maker, not a recovery service, and not us. Our methodology page says exactly what we will and will not do, and that constraint is permanent.