What Is a
Crypto Wallet?
A crypto wallet doesn't actually hold your crypto — it holds the private keys that prove the crypto on a blockchain is yours. That distinction is the entire reason hot/cold, custodial/self-custody, and hardware/software wallets matter.
The one-paragraph answer
A crypto wallet is software or hardware that stores your private keys — the cryptographic credentials that authorise spending crypto on a blockchain. The crypto itself never leaves the blockchain. The wallet just holds the keys, and anyone with the keys has full control of the funds. The two important axes when picking one: (1) hot (internet-connected, convenient, more exposed to attacks) vs cold (offline, secure, less convenient); and (2) custodial (a company like Coinbase holds your keys for you, like a bank) vs self-custody (you hold your own keys, with no one to call if you lose them). Most active crypto users hold some funds in both.
How crypto wallets actually work — the mechanics
Every cryptocurrency address is a pair of cryptographic keys — a public key (the address others can send funds to) and a private key (the credential that authorises spending). When you 'have' Bitcoin or Ethereum, what you actually have is the private key to an address that the blockchain records as holding those coins. Anyone with that private key can move the coins; lose it and the coins are stuck at that address forever. There's no central authority that can reset, recover, or undo transactions.
Modern wallets generate a master 'seed' — a 12 or 24-word recovery phrase from a standardised wordlist (BIP-39) — from which an unlimited number of address-key pairs are mathematically derived. The seed phrase alone is sufficient to reconstruct the entire wallet on any compatible device. This is the single most important secret in self-custody crypto. Anyone with your seed phrase has total control over every address derived from it.
The six categories of crypto wallet
How to choose: a decision tree
Pick the wallet that matches what you're actually doing:
- Just trying crypto with small amounts you can afford to lose. A reputable custodial exchange (Coinbase, Kraken, Gemini in the US; Binance, Crypto.com, Kraken in AU/UK; Wealthsimple Crypto, Bitbuy, Kraken in Canada). Easiest fiat-to-crypto path. Accept the counterparty risk for the convenience.
- Long-term holding of meaningful amounts. Hardware wallet — Ledger Nano S Plus or Trezor Model One are the most common entry points. Buy directly from the manufacturer's website, never from Amazon or eBay. Back up the recovery phrase on paper or metal in two physical locations.
- Active DeFi or NFT user on Ethereum / L2s. MetaMask browser extension as the day-to-day signer, paired with a Ledger or Trezor for high-value approvals. Frame extension is a privacy-focused alternative.
- Solana DeFi / NFT user. Phantom is the de facto standard; Backpack and Solflare are alternatives.
- Multi-chain mobile usage. Trust Wallet or Coinbase Wallet (the self-custody product, distinct from the Coinbase exchange). Rainbow on iOS is good for Ethereum-focused users.
- Corporate treasury or large estates. Multi-sig — Gnosis Safe for Ethereum, Casa or Unchained Capital for Bitcoin. Distributes keys across multiple devices or people so no single compromise drains the wallet.
The most common ways people lose crypto from wallets
- Lost or destroyed recovery phrase. By far the most common cause. House fires, lost paper, deceased holder with no estate plan. ~20% of all Bitcoin in existence is estimated to be permanently lost to forgotten keys (Chainalysis 2020 estimate).
- Phishing. Fake MetaMask popups, fake wallet-connect prompts, fake airdrops that ask you to sign a malicious transaction. The signed transaction approves a contract that drains your wallet. Verify URLs, never sign anything you don't fully understand.
- Seed-phrase compromise. Storing the phrase in a cloud note, screenshot, password manager that gets breached. Every legitimate wallet displays the phrase only at setup — any site or person asking you to enter it later is a scam.
- Custodial exchange failure. FTX (Nov 2022), Celsius (Jul 2022), BlockFi, Voyager, QuadrigaCX. If you don't hold the keys, you're an unsecured creditor when the exchange fails.
- Address-poisoning. Scammer sends you tiny 'dust' transactions from a lookalike address. Later you copy the wrong address from your transaction history and send funds to the scammer instead of your intended recipient. Always verify the full address character-by-character.
Related Richify content
❓ Frequently Asked Questions
What is a crypto wallet in simple terms?
A crypto wallet is a piece of software (or a physical device) that stores your private keys — the cryptographic passwords that let you spend and move crypto on a blockchain. The crypto itself never leaves the blockchain; the wallet just holds the keys that prove you're authorised to move it. Think of it like a keyring rather than a piggy bank — losing the wallet means losing access to the funds even though the funds technically still exist on the blockchain. This is why backing up your wallet's recovery phrase (the 12-24 English words) is critical.
What's the difference between a hot wallet and a cold wallet?
A hot wallet is connected to the internet — phone apps (MetaMask, Phantom, Trust Wallet, Coinbase Wallet), browser extensions, or any web-based wallet. Convenient for daily use but exposed to phishing, malware, and exchange hacks. A cold wallet is air-gapped — usually a hardware device (Ledger, Trezor, Coldcard) or a paper wallet with keys never typed into an internet-connected machine. Much more secure but inconvenient for active trading. The standard advice: keep small amounts you actively spend in a hot wallet, keep long-term holdings ('cold storage') in a cold wallet.
What's the difference between custodial and self-custody wallets?
Custodial wallets are controlled by a third party (Coinbase, Binance, Kraken, Crypto.com, Robinhood Crypto) — they hold your keys on your behalf. Convenient, often FDIC-insured for the USD portion only, and easy to use. But if the exchange goes bankrupt (FTX, Celsius, BlockFi, Voyager), you're an unsecured creditor and may lose everything. Self-custody wallets (MetaMask, Phantom, Ledger, Trezor) put YOU in control of the private keys. Higher responsibility — lose the recovery phrase, lose the funds, with no recourse. The crypto-native phrase 'not your keys, not your coins' refers exactly to this distinction. Most active crypto users keep some in both: custodial for fiat on/off-ramps, self-custody for actual holdings.
What is a hardware wallet?
A hardware wallet is a small physical device — usually USB-shaped — that stores your private keys offline. The most popular brands are Ledger (Nano S Plus around $79, Nano X around $149), Trezor (Model One around $69, Model T around $219), and Coldcard (Mk4 around $148, Bitcoin-only). When you want to send crypto, the device signs the transaction internally without ever exposing the keys to your computer. Even if your laptop is fully compromised by malware, the attacker can't extract your keys because they're never on the laptop. Hardware wallets are the standard for storing anything more than 'spending money' worth of crypto. Always buy directly from the manufacturer — supply-chain attacks via second-hand devices have happened.
What is a recovery phrase (seed phrase) and why does it matter?
A recovery phrase is a list of 12 or 24 English words (from a standardised 2,048-word BIP-39 wordlist) that mathematically encodes your private keys. Anyone with the phrase has full control over the wallet — there is NO 'forgot password, send reset email' option in self-custody crypto. The standard backup procedure: write the phrase down on paper or metal (never digital — screenshots, photos, cloud notes are all attackable), store it in at least two physical locations, and never type it into any website (every legitimate wallet displays the phrase only at setup; any site asking you to enter it is a scam). Some users use a metal seed-storage device (Cryptosteel, Billfodl) for fire and water resistance.
Which crypto wallet should I use?
It depends on what you're doing. (1) Just buying and holding small amounts of BTC/ETH for the long term: a reputable custodial exchange like Coinbase, Kraken, or Gemini is simplest, accepting the counterparty risk. (2) Storing meaningful amounts long-term: hardware wallet (Ledger Nano S Plus or Trezor Model One are the most common entry-level picks). (3) Active DeFi or NFT use on Ethereum: MetaMask browser extension paired with a hardware wallet for high-value operations. (4) Solana NFT or DeFi: Phantom. (5) Multi-chain mobile: Trust Wallet or Coinbase Wallet (different from the Coinbase exchange — Coinbase Wallet is self-custody). Always download wallets from official sources — fake MetaMask extensions are a perennial scam vector.
How are crypto wallets taxed?
Crypto wallets themselves aren't taxed — transactions are. In most jurisdictions, every disposal of crypto (selling for fiat, swapping for another crypto, spending on goods, gifting outside immediate family) is a taxable event triggering capital gains or income tax. US: short-term gains taxed at ordinary income rates, long-term (held >1 year) at 0/15/20% LTCG rates. UK: 18% basic-rate / 24% higher-rate CGT post-30-Oct-2024 Budget, with £3,000 Annual Exempt Amount. Australia: marginal rate with 50% CGT discount for assets held over 12 months as individual. Canada: 50% inclusion rate (only half of gains taxable). India: flat 30% on gains under Section 115BBH, no loss offset. Moving crypto between your own wallets is NOT a taxable event in any of these jurisdictions — only disposals are.
Are crypto wallets safe?
The cryptography is robust — no one has ever brute-forced a properly-generated 12-word seed phrase. The risk is almost entirely user-side: lost recovery phrases, phishing scams that trick you into signing malicious transactions, fake wallet apps that steal your keys, and supply-chain attacks on hardware wallets bought from third parties. Common protections: hardware wallet for amounts you can't afford to lose, recovery-phrase backed up offline in two physical locations, transaction-approval confirmations always read on the hardware device's screen (not just the computer's), and never share the seed phrase with anyone — not customer support, not friends, not yourself in a screenshot. The crypto-native principle: any 'admin' or 'support' asking for your seed is a scammer 100% of the time.
Track your crypto in Richify
Free on iOS and Android. Manual-entry by design — you never share your wallet credentials with us, and your crypto stays in YOUR wallet. We just help you track and tax-plan around it.
Get Richify — Free