A crypto wallet is a tool for managing the authority to interact with blockchain assets. It commonly creates or stores keys, displays balances, and helps sign transactions. The assets themselves are represented by network records, not coin files inside the app. Understanding that distinction explains both the power and the responsibility of wallet ownership.
A wallet is where the question of who can move your assets is settled. Read this before you move anything of significance, because most wallet losses are permanent and no support desk can reverse them.
- Why a wallet holds keys rather than coins.
- What custodial and self-custody actually change for you.
- How wallet losses really happen, which is rarely by hacking.
- What to verify before trusting a wallet with a real amount.
What is a crypto wallet actually storing?
A conventional wallet stores cash and cards. A crypto wallet usually manages keys and software information needed to interact with a ledger. If the wallet app disappears but the appropriate recovery material remains secure, a compatible recovery process may restore access to the same onchain assets.
Compatibility matters. Different networks, derivation paths, account types, and wallet designs can use different recovery methods. Do not assume any random wallet app can safely recover every account. A legitimate recovery process should be researched through the wallet provider’s verified documentation before secrets are entered anywhere.
An address is not a private key
An address can be shared so another person can send an asset, although sharing can also connect your identity with public activity. A private key authorizes spending and should not be disclosed. The two pieces of information may both look like long strings, but they have very different purposes.
A recovery phrase can control multiple accounts derived from it. Anyone who obtains it may be able to recreate the wallet elsewhere without your device password. That is why a website asking for the phrase to synchronize, verify, or fix a balance is dangerous. Reading a public balance never requires permission to spend it.
The relationship between them is one-directional, which is the point. A private key can produce its address, and an address cannot produce the key. This is why sharing an address to receive funds is safe, and why any request for the key or the phrase behind it is a request for complete control. No legitimate process ever needs both.
Who can move your assets?
| Model | Who holds the keys | Recovery if you lose access | Main risks |
|---|---|---|---|
| Exchange account | The provider. | Identity-based account recovery is usually possible. | Platform failure, freeze, regional restriction, account takeover. |
| Self-custody hot wallet | You, on a connected device. | Only your seed backup. | Malware, phishing, approving a bad transaction, device loss. |
| Self-custody hardware wallet | You, on an offline device. | Only your seed backup. | Lost or stolen backup, tampered device, misreading a prompt. |
Exchange custody and self-custody
With an exchange account, the operator typically manages keys and keeps an internal record of what it owes customers. You access the service through its authentication system. Account recovery may involve identity review, and withdrawals can be restricted by policy, security controls, or operational conditions.
With self-custody, you hold the relevant authorization material or participate in a specific wallet recovery design. You gain direct responsibility for backups and signing decisions. The absence of a central password-reset desk can be a benefit in some circumstances and a serious burden in others. Compare responsibilities rather than assuming one model removes all risk.
Hot wallets and hardware wallets
A hot wallet on a phone or browser is convenient for interaction but operates in a more exposed environment. Malicious extensions, compromised websites, device malware, or misleading prompts can endanger the user. Keep software current and understand the permissions granted to connected applications.
A hardware wallet aims to keep private keys isolated while allowing a person to confirm transaction details on the device. It does not make every transaction safe: a user can still approve a malicious contract or the wrong destination. Verify information on the trusted device display when supported, and obtain setup instructions through the genuine manufacturer’s channels.
Choosing between them is less about which is stronger and more about what you are protecting against. A hot wallet is exposed to whatever reaches your device: malware, a malicious extension, a convincing page. A hardware wallet removes most of that and introduces the risk that you lose the device and the backup together. Neither eliminates the risk of authorising something you did not read.
Backups should survive a real failure
Think through loss of the phone, damage to the device, theft, fire, and loss of access to a credential provider. Your backup should address realistic failure modes without creating unnecessary copies that are easy to steal. A photo of a phrase synchronized to several cloud accounts can expand exposure rather than provide a careful backup.
Do not disclose recovery material to test whether it works. Follow the wallet’s own safe verification method and understand any passphrase or additional recovery factor. A passphrase can create a different wallet, so losing it may be as consequential as losing the base phrase. Record the design privately and accurately.
Backups fail in ways that sound too ordinary to plan for. Paper fades, gets damp, or is thrown out during a move. A single location can be affected by one event. A phrase written quickly can contain a transcription error nobody notices for years. Testing a restore, storing more than one copy in separate places, and using durable material address the failures that actually happen.
Networks, tokens, and receiving assets
A wallet may display several networks with visually similar addresses. That does not mean a platform supports deposits on all of them. Match the sending network, receiving network, asset, and any required memo or tag. The same ticker can appear on different chains with different underlying contracts.
Before an external transfer, read both sides’ current instructions. A small test can help verify a route if you independently choose to proceed, but fees and minimums apply and the test does not guarantee every later transaction. Never choose a network only because its displayed fee is lower.
How wallet losses usually happen
- The seed phrase was typed into a website or sent to someone posing as support.
- The backup was never written down, or was written down with an error nobody noticed for years.
- A single copy of the backup was lost, destroyed, or thrown away by someone else.
- A malicious transaction or token approval was signed without reading it.
- Wallet software was installed from a search advertisement rather than the official source.
Approvals and message signatures
Some token interactions require a spending approval before the actual transaction. An allowance can remain after the immediate swap and may permit more spending than expected. Review the spender, amount, and contract instead of approving every request as a routine preliminary step.
A message signature can also have consequences. Some signatures authenticate a session, while others authorize orders or permissions that can be acted on later. Disconnecting a website from a wallet interface does not necessarily revoke existing onchain allowances. Use verified tools and documentation to understand and manage those permissions.
Approvals are worth revisiting periodically because they persist. A permission granted to an application you used once, years ago, remains in force until it is changed, and it can be used by whoever controls that contract now rather than whoever controlled it then. Reviewing and revoking old approvals is routine maintenance, not an advanced technique.
A worked example: receiving and then sending
A fictional learner receives an asset on a supported network. The wallet displays the confirmed balance after fetching network data. To send part of it later, the wallet constructs a transaction and may require the network’s native asset for fees, even if the asset being sent is a different token.
The learner checks the destination, asset, amount, network, and fee before signing. After broadcasting, they inspect the transaction status and the recipient’s requirements. If the wallet display is stale, they consult the appropriate explorer without entering a recovery phrase. A display issue and a missing onchain asset are different problems.
What to do when access or security is in doubt
If an app fails but recovery material remains private, consult the genuine provider’s recovery guidance from a clean, trusted environment. Do not reinstall from a link sent by a stranger. Preserve the existing setup until you understand the replacement process and any account-specific requirements.
If a phrase or private key may have been exposed, treat it as a compromised authorization secret. Changing an app password alone does not invalidate the copied key. Seek verified guidance for the specific wallet and situation, stop interacting with suspected scammers, and avoid paying recovery agents who promise guaranteed results.
If you suspect a compromise, speed matters more than certainty. Assume the worst, create a new wallet from a newly generated phrase on a device you trust, and move assets to the new addresses. A seed phrase cannot be changed; the only remedy is to stop using the wallet it controls. Investigating first and moving later has cost many people the window in which moving was still possible.
Key terms to keep handy
- Private key
- Secret information used to authorize actions for a blockchain account or spending condition.
- Public address
- A shareable identifier used for receiving assets or locating account activity.
- Recovery phrase
- A sequence of words used by many wallets to derive keys; it must remain secret.
- Hot wallet
- A wallet whose signing environment is connected to the internet.
- Hardware wallet
- A dedicated device intended to isolate signing keys from a general-purpose computer.
- Allowance
- A contract’s permission to spend a token up to a specified amount or under specified conditions.
Follow the moment custody changes
The Coinbase sell & withdraw guide covers selling and withdrawing, which is where custody visibly changes hands. Read it and identify the exact screen at which the provider stops being responsible and a network address becomes the destination.
That screen is where most expensive mistakes are made: wrong network, wrong address, missing memo. Knowing in advance what it asks for is worth more than any general advice about wallet brands.
Sources and further reading
Frequently asked questions
Are my coins inside the hardware wallet?
The device generally protects keys used to authorize blockchain actions. The network records the assets. Losing a device and losing the complete recovery capability are therefore different events, depending on the wallet design.
Can I share my wallet address?
An address is intended for receiving and public lookup, but sharing it can expose transaction history or link activity to your identity. Share thoughtfully and never confuse an address with a private key or recovery phrase.
Will changing my wallet password fix a leaked phrase?
No. An app password often protects local access, while the phrase can recreate keys elsewhere. If the phrase is compromised, the underlying authorization may remain exposed despite a new local password.
Does disconnecting a dApp revoke approvals?
Not necessarily. A local connection and an onchain spending allowance are separate. Review the actual permissions through verified wallet guidance and appropriate network tools rather than assuming a disconnect clears every authorization.
Can an exchange recover a self-custody wallet?
An exchange can investigate its own customer accounts, but generally cannot recreate keys for an unrelated self-custody wallet. Recovery depends on the wallet’s backup or recovery design, not the exchange’s identity-verification system.
How do I choose a wallet?
Start with the network and activity you need, then assess custody, recovery, device compatibility, signing clarity, and the provider’s verified documentation. A feature list or promotional ranking does not establish that a wallet is appropriate for your circumstances.
Crypto can lose substantial value, and transfers may be irreversible. This guide is educational, not financial, legal, or tax advice. Exchange access and features depend on your location.
Independent educational writing. How we research and correct our guides.