What is a crypto wallet?
A crypto wallet is an app or device that lets you view, receive and send cryptocurrency. The name is a little misleading. Your coins are not stored inside the wallet. They are records on a blockchain, and the wallet holds the secret keys that prove you are allowed to move them.
So when people ask what is a crypto wallet, the best short answer is this: it is a key manager. It creates and stores your keys, shows your balance by reading the blockchain, and signs transactions when you want to send funds. Ethereum's official documentation describes a wallet as an app or device that lets you hold, send and receive ETH and other tokens, and sign in to apps.
You may also hear the terms cryptocurrency wallet, bitcoin wallet or private crypto wallet. They mean the same idea. A bitcoin wallet simply works with the Bitcoin network, while many other wallets support several blockchains at once.
Whoever controls the private keys controls the crypto. The wallet is only the tool that holds and uses those keys.
Wallets exist because blockchains have no accounts with usernames and passwords. There is no help desk that resets access. Control comes from cryptography, which is powerful but also puts responsibility on the person holding the keys.
How wallets work (public key, private key, address)
A wallet is built around a pair of cryptographic keys. The two keys are mathematically linked, but you cannot work out the private key from the public one. This is what makes it safe to share one and keep the other secret.
- Private key: a long secret number that proves ownership and signs transactions. Anyone who has it can spend the funds.
- Public key: derived from the private key. It can be shared and is used to verify your signatures.
- Address: a shorter string derived from the public key. It works like an account number that others send funds to, and it is safe to share.
When you send crypto, your wallet builds a transaction and signs it with your private key. The network checks the signature against your public key. If it is valid, the transaction is added to the blockchain. The private key itself never leaves the wallet or gets broadcast.
Seed phrases and recovery
Most modern wallets do not make you manage each private key by hand. They generate one master secret and turn it into a list of words called a Seed Phrase (Mnemonic Phrase). From that single phrase, the wallet can rebuild all of its keys and addresses. The common standard, BIP-39, defines phrases of 12, 15, 18, 21 or 24 words, and wallets most often use 12 or 24.
This is why a lost phone does not have to mean lost funds. If you saved the phrase safely, you can restore the same wallet in new software. It also means that anyone who finds the phrase can take everything, so the phrase must be treated like the keys themselves.
Someone installs a wallet app and writes down 12 words. Later the phone breaks. They install the app on a new phone, enter the 12 words, and the same addresses and balances appear again, because the funds were always on the blockchain.
Types: hot vs cold, software vs hardware vs paper
Wallets are grouped in two overlapping ways. The first is whether the keys are connected to the internet. The second is the form the wallet takes.
Hot vs cold
A hot wallet keeps keys on a device that is online, such as a phone or a computer. It is convenient for frequent use but exposed to malware and phishing. A cold wallet keeps keys offline. It is harder to use quickly but much harder to attack remotely.
Software, hardware and paper
A Software Wallet is an app for your phone, desktop or browser. Most are hot wallets. They are free to install, easy to use and the usual starting point for beginners.
A hardware wallet is a small dedicated device that stores keys and signs transactions inside it, so the keys are not exposed to your computer. It is generally treated as cold storage. It costs money and must be bought from a trustworthy source.
A Paper Wallet is a key or seed phrase printed or written on paper. It is offline, but it is easy to lose, damage or generate unsafely, so many security guides now treat it as outdated for most people.
| Type | Connected online? | Main trade-off |
|---|---|---|
| Software wallet (app) | Usually yes (hot) | Convenient, but exposed to malware and phishing |
| Hardware wallet | Mostly offline (cold) | Strong protection, but costs money and needs care |
| Paper wallet | No (cold) | Offline, but fragile and easy to create unsafely |
| Exchange or custodial account | Yes (hot) | Easy recovery, but a third party holds the keys |
Multisignature wallets
A Multisig Wallet needs more than one key to approve a transaction, for example two out of three. This protects against a single stolen or lost key. It is used by teams, organisations and some careful individuals, but it adds setup work and complexity.
Custodial vs non-custodial wallets
Another important difference is who holds the private keys. This decides who can access the funds and who is responsible if something goes wrong.
With a Custodial Wallet, a company holds the keys for you. This is how an account on a centralized exchange works. You log in with a username and password, and the company manages the keys behind the scenes. Password resets and account recovery are possible, but you rely on the company to stay solvent, secure and honest.
With a Non-Custodial Wallet, you hold the keys yourself, usually through a seed phrase. No company can freeze your funds or reset your access, and there is no one to call if you lose the phrase. Ethereum's documentation notes that wallet providers do not have custody of your funds and that you are responsible for keeping your keys safe.
| Point | Custodial | Non-custodial |
|---|---|---|
| Who holds the keys | A company | You |
| Access recovery | Possible through the provider | Only with your seed phrase |
| Main risk | Provider failure, hack or freeze | Your own loss, theft or error |
| Ease for beginners | Usually easier | Needs more learning |
Neither model is right for everyone. Many people use both: a custodial account for trading and a self-held wallet for funds they do not plan to move often. The phrase "not your keys, not your coins" is a popular way of describing the trade-off.
In Türkiye, Law No. 7518, enacted on 2 July 2024, brought crypto asset service providers under the capital markets framework overseen by the Capital Markets Board (CMB, or SPK). A provider that appears on the CMB list of entities operating in the crypto asset market is not thereby licensed or authorized. Check the CMB's official pages and a qualified adviser, and note that this page does not cover how the rules treat self-held wallets.
How to choose a wallet
There is no single best wallet, because the right choice depends on what you hold, how often you move it and how comfortable you are with managing your own security. These questions can help.
- How much and how often? Small amounts used often suit a hot wallet. Larger amounts held for a long time are often kept offline.
- Who holds the keys? Decide whether you want a custodial or non-custodial setup, and understand what that means for recovery.
- Which coins and networks? Check that the wallet supports the specific blockchains and tokens you plan to use.
- Reputation and openness. Look at how long the product has existed, whether its code is open to review, and whether there have been security incidents.
- Backup and recovery. Make sure you understand exactly how the wallet is backed up and restored before you add funds.
- Support and updates. Active maintenance matters, because outdated software can contain known flaws.
Before trusting a wallet with real money, many people test it with a very small transfer. They send a small amount, check that it arrives, then restore the wallet from the seed phrase on another device to confirm the backup works. Always download wallet software from the official website or app store listing, and double-check the publisher name.
Security best practices (seed phrase, 2FA)
Wallet security mostly comes down to protecting the keys and the recovery phrase. The following habits are widely recommended, including in the Bitcoin.org and Ethereum.org guidance.
- Write your seed phrase on paper or another offline medium, and never type it into a website, chat or photo gallery.
- Keep more than one backup in separate secure places, so a fire or flood does not destroy the only copy.
- Use a long, unique password and a PIN on every wallet app and device, and keep your operating system and wallet software updated.
- Turn on 2FA (Two-Factor Authentication) for exchange and custodial accounts, preferably with an authenticator app or a security key instead of SMS.
- Keep only small amounts in hot wallets, and consider offline storage for savings you do not plan to touch soon.
- Verify addresses carefully before sending, and test a small amount first when the transfer is large.
Two-factor authentication helps protect accounts that sit with a company. It does not protect a self-held wallet in the same way, because the keys themselves are the final authority. For those wallets, the seed phrase and the device are what you must protect.
No genuine wallet provider, exchange or support agent will ever ask for your seed phrase or private key. Anyone who does is attempting theft. Fake support accounts, fake wallet apps and phishing links are common ways people lose funds, and blockchain transactions cannot normally be reversed.
It is also worth planning for the long term. If something happens to you, trusted people may need a safe way to find your recovery information. Without any plan, funds in a self-held wallet can become permanently inaccessible.
Common mistakes
Most losses involve human error rather than broken cryptography. These are the mistakes that come up most often.
- Storing the seed phrase digitally. Screenshots, cloud notes and emails can be reached by malware or by anyone who breaks into the account.
- Sharing the phrase with a stranger. Scammers pose as support staff or as people offering help to recover access.
- Using fake or look-alike apps. Counterfeit wallet apps and sites copy real ones to capture keys. Always use the official source.
- Sending to the wrong address or network. Funds sent to a wrong address, or on a network the receiver does not support, are often impossible to recover.
- Never testing the backup. A phrase that was written down wrongly is only discovered when it is too late.
- Keeping everything in one place. Putting all funds in a single hot wallet or a single exchange account concentrates the risk.
- Ignoring updates and warnings. Old software and skipped security prompts leave known weaknesses open.
A final point on expectations: wallets protect access, not value. A wallet does not guard against price changes, and nothing here is financial, tax or legal advice. For questions about taxes or regulation where you live, consult a qualified professional or the official authority.
Frequently asked questions
What is a crypto wallet and how does it work?
A crypto wallet is an app or device that stores the private keys you need to access and send cryptocurrency. The coins stay on the blockchain. The wallet uses your keys to read your balance and to sign transactions. The network accepts a transaction only if the signature matches your public key, and the private key is never shared.
Do I need a crypto wallet?
It depends on how you use crypto. If you only hold coins in an account on an exchange, that company keeps the keys for you, so you may not have a separate wallet. If you want to hold crypto yourself, use decentralized apps or move funds off a platform, you need a wallet that you control. Each approach has its own risks.
What is the difference between a hot and a cold wallet?
A hot wallet keeps its keys on a device connected to the internet, such as a phone app or a desktop program. A cold wallet keeps them offline, for example on a hardware device or on paper. Hot wallets are more convenient for frequent use. Cold wallets are harder to attack remotely, but they are less convenient and still need careful backup.
Are crypto wallets safe?
Wallets can be very secure, but safety depends on how they are used. Strong cryptography protects the keys, yet most losses come from phishing, malware, fake apps and mishandled seed phrases. Keeping the recovery phrase offline, using official software, enabling two-factor authentication on accounts and limiting hot wallet balances all lower the risk. No wallet removes risk completely.
Related terms
- Seed Phrase (Mnemonic Phrase)
- Non-Custodial Wallet
- Custodial Wallet
- Software Wallet
- Paper Wallet
- Multisig Wallet
- 2FA (Two-Factor Authentication)
Sources
- Ethereum wallets ethereum.org
- BIP-39: Mnemonic code for generating deterministic keys Bitcoin Improvement Proposals (GitHub)
- Secure your wallet Bitcoin.org
- Tuerkiye Introduces New Crypto Asset Regulations: A Landmark Development in Digital Finance CMS Law
This glossary entry is for general information and education only. It is not investment, tax or legal advice. Crypto assets are high-risk; check official sources before you act.