A crypto wallet is software, hardware or a service that stores the private keys controlling blockchain assets and uses them to sign transactions. Despite the name, a wallet does not hold coins or tokens: the assets are recorded on the blockchain itself, and the wallet holds the cryptographic authority to move them. Across crypto & blockchain systems, whoever controls the keys controls the funds.
Within wallets and custody, the crypto wallet is the umbrella concept. Every other arrangement, from a hardware wallet to a custodial exchange account, answers the same two questions in different ways: where the keys live and who can use them.
How a crypto wallet controls assets on a blockchain
A crypto wallet works by managing a key pair: a secret private key and a public key mathematically derived from it. Bitcoin and Ethereum both use elliptic-curve cryptography on the secp256k1 curve, and a private key there is a 256-bit number. The public key, usually hashed and encoded, becomes the wallet address that others use to send funds.
To spend, the wallet builds a transaction, signs it with the private key and broadcasts it to the network. Nodes verify the digital signature against the public key without ever seeing the secret. A valid signature is the only proof of ownership the network accepts, so a lost key means permanently inaccessible funds, and a stolen key means funds can be moved by the thief.
Modern wallets rarely store isolated keys. They are hierarchical deterministic (HD) wallets that generate an entire tree of keys from a single seed. The seed is usually shown to the user as a seed phrase of 12 or 24 words under the BIP-39 standard, while BIP-32 defines the key derivation and BIP-44 defines standard derivation paths per blockchain and account.
The following table lists the main components that a wallet manages and the role each plays.
| Component | What it is | Who may see it |
|---|---|---|
| Seed phrase | 12 or 24 words encoding the master secret | Nobody but the owner |
| Private key | 256-bit secret that signs transactions | Nobody but the owner |
| Public key | Value derived from the private key | Safe to share |
| Wallet address | Hashed, encoded form of the public key | Shared to receive funds |
| Derivation path | Rule selecting a key in the HD tree | Not secret, but needed for recovery |
Types of crypto wallets
Crypto wallets are classified along two independent axes: custody, meaning who holds the keys, and connectivity, meaning whether the keys touch an internet-connected device. A third axis, the signing model, distinguishes single-key wallets from multisig, MPC and smart contract designs.
The table below compares the most common wallet types along these axes.
| Wallet type | Who holds the keys | Connectivity | Typical use |
|---|---|---|---|
| Custodial wallet | Exchange or custodian | Online, managed by provider | Trading and convenience |
| Software wallet | User, on a phone or browser | Hot | Everyday payments and dApps |
| Hardware wallet | User, on a dedicated device | Cold signing, online use | Long-term holdings |
| Paper wallet | User, printed on paper | Cold | Legacy archival storage |
| Multisig wallet | Several key holders | Hot or cold | Treasuries and shared funds |
| MPC wallet | Key shares split among parties | Usually online | Institutions and consumer apps |
| Smart contract wallet | Rules coded in a contract | Online | Recovery, limits and batching |
A hot wallet keeps keys on a networked device and is convenient but exposed to malware and phishing. A cold wallet keeps keys offline and signs transactions in isolation, which sharply reduces remote attack surface at the cost of speed and convenience. Most experienced users combine both: a small hot balance for spending and a larger cold reserve.
Custodial and self-custody wallets compared
The decisive difference between wallet models is custody. In a custodial wallet, a company holds the keys and the user holds a claim against that company. In self-custody, the user holds the keys directly and no third party can freeze, recover or move the funds.
Each model shifts risk rather than eliminating it, as the comparison below shows.
| Aspect | Custodial wallet | Self-custody wallet |
|---|---|---|
| Key control | Provider | User |
| Account recovery | Possible through provider support | Only with the seed phrase or recovery setup |
| Main risk | Provider insolvency, hack or freeze | Lost seed, theft or user error |
| Identity checks | KYC usually required | Not required by the wallet itself |
| Access to dApps | Limited to provider features | Direct access to smart contracts |
| Regulatory status | Provider is typically a licensed service | User acts on own responsibility |
Regulation follows this line. In the European Union, MiCA treats custody of crypto assets on behalf of clients as a licensed crypto-asset service, while software that only helps users manage their own keys generally falls outside that category. Similar distinctions exist in other jurisdictions, although the details differ and continue to evolve.
Choosing and setting up a crypto wallet
The right crypto wallet depends on the value at stake, the frequency of use and the blockchains involved. Wallets are not universal: an Ethereum-compatible wallet such as MetaMask handles EVM networks, while Bitcoin requires a wallet that supports its address formats and transaction model.
The decision table below summarizes typical choices without favoring any provider.
| Situation | Common choice | Reason |
|---|---|---|
| Small amounts, frequent use | Mobile or browser software wallet | Fast signing, low setup effort |
| Large long-term holdings | Hardware wallet with offline seed backup | Keys never touch a networked computer |
| Shared organizational funds | Multisig, for example 2-of-3 | No single person can move funds |
| Beginner who wants recovery | Custodial or smart contract wallet | Lost credentials do not mean lost funds |
| Active DeFi use | Software wallet linked to a hardware signer | dApp access with cold signing |
Setup discipline matters more than the brand. Write the seed phrase offline, store it in at least two secure locations, never photograph it or type it into a website, and test recovery with a small amount before depositing significant value. An optional BIP-39 passphrase adds a further secret that protects against someone who finds the written seed.
Risks and common mistakes
Most wallet losses come from human and operational errors, not from breaking cryptography. Blockchain transactions are irreversible by design, so a mistake usually cannot be undone by any support desk.
- Seed phrase exposure: entering the seed into a fake support form or a phishing site gives an attacker full control.
- Unlimited token approvals: signing an approval lets a contract spend tokens later; malicious approvals feed wallet drainers.
- Address poisoning: attackers send dust from look-alike addresses so a victim copies the wrong one from history.
- Wrong network: sending tokens on a chain the recipient does not support can strand them.
- Single point of failure: one seed copy in one place can be lost to fire, flood or forgetfulness.
- Blind signing: approving a transaction without reading what it does on the device screen.
Good habits address these directly: verify the full address on a trusted screen, review and revoke old approvals, prefer devices that display human-readable transaction details, and treat any request for a seed phrase as a scam without exception.
The simple explanation
A crypto wallet is less like a purse and more like a key ring. The money itself sits in a huge public ledger that everyone can read. The wallet holds the secret key that lets you, and only you, sign an instruction such as “move this amount to that account”.
The seed phrase is a master copy of that key ring written as a list of words. Anyone who has those words can rebuild your wallet anywhere and take everything. If you lose them and your device breaks, nobody can help you get back in. That is why protecting the seed phrase matters more than anything else about a wallet.
How it is used in practice
A small design studio receives part of its client payments in a dollar-backed stablecoin on an Ethereum layer 2 network. The owner wants payments to arrive quickly but does not want one stolen laptop to empty the business account.
The studio sets up two wallets. A browser software wallet on the bookkeeper’s computer receives invoices and holds a working balance of roughly one month of expenses. Larger reserves move weekly to a 2-of-3 multisig wallet whose signers are two hardware wallets held by the owner and a partner, plus a third hardware wallet stored in a safe deposit box. Each seed phrase is written on a metal plate and kept in a separate location.
When the bookkeeper’s laptop is later infected with clipboard-swapping malware, the attacker can reach only the small working balance, and the bookkeeper notices the altered address on the hardware screen before signing. The reserves stay untouched, because moving them requires two independent devices that the malware never reaches.