What Is a Crypto Wallet and How Does It Work?

A crypto wallet is a tool, usually an app or a small device, that stores the secret keys which prove you own your cryptocurrency and lets you send, receive and check your balance. So what is a crypto wallet, really? It is closer to a keychain than a purse: your coins never sit inside it. They live on the blockchain, and the wallet holds the keys that let you move them.

That one idea explains almost everything else about wallets. It is why losing your recovery phrase can mean losing your crypto forever, why a hacked phone can be emptied in seconds, and why “not your keys, not your coins” is such a common saying.

This guide covers how keys and addresses work, custodial vs non-custodial wallets, hot vs cold storage, what actually happens when you send and receive, how to set up your first wallet step by step, and the mistakes that cost beginners the most money.

What Is a Crypto Wallet? Keys, Not Coins

Every blockchain, whether Bitcoin, Ethereum or Solana, is a public ledger that records which address controls which funds. To move funds from an address, you need to prove you control it. You do that with a private key, and a wallet is simply software or hardware that creates, stores and uses private keys for you.

Think of the blockchain as a wall of glass mailboxes in a public square. Anyone can see how much is in each box and drop money in through the slot. Only the person with the key can open a box and take money out. Your wallet is your keyring for those boxes.

Most wallets also do a few practical jobs on top: they show your balances by reading the blockchain, build and sign transactions, estimate fees, and connect to apps. But the core job is always key management. If you understand who holds the keys, you understand the wallet’s risks.

Private Keys, Public Keys and Wallet Addresses

Three linked pieces of data make a wallet work. Each one is derived from the one before it, and the math only runs one way.

1. Private key: a randomly generated 256-bit number, the master secret. Whoever has it can spend the funds. It must never be shared.
2. Public key: calculated from the private key using elliptic curve cryptography (Bitcoin and Ethereum both use a curve called secp256k1). It can be shared, but you rarely see it directly.
3. Address: a shorter, hashed version of the public key that you give to people so they can pay you.

Going forward is easy: a computer derives the address from a private key instantly. Going backward, from an address to its private key, is practically impossible with any computer that exists today. That asymmetry is what keeps your funds safe even though your address and balance are public.

What is a crypto wallet address?

A wallet address is the public identifier you share to receive funds, a bit like an account number or an email address. It is safe to share; it cannot be used to take money from you. Formats differ by blockchain:

• Ethereum and EVM networks (Arbitrum, Base, Polygon and others): 42 characters starting with 0x, such as 0x71C7656EC7ab88b098defB751B7401B5f6d8976F.
• Bitcoin: modern addresses start with bc1 (SegWit and Taproot); older ones start with 1 or 3.
• Solana: 32 to 44 letters and numbers with no fixed prefix.

Many wallets also support readable names, such as an Ethereum Name Service name like “alice.eth”, that point to an address. A single wallet app can hold many addresses across many networks.

Seed phrases: one backup for every key

Modern wallets do not make you back up each private key separately. Instead they generate a seed phrase (also called a recovery phrase), usually 12 or 24 words taken from a standard list of 2,048 words defined in a specification called BIP-39. Every private key and address in the wallet is derived from that phrase, so writing it down once backs up everything, including addresses you create later.

Our dedicated guide to seed phrases, 12 vs 24 words and safe storage covers backup methods in detail.

Custodial vs Non-Custodial Wallets

The most important question about any wallet is: who holds the private keys?

Custodial wallets

With a custodial wallet, a company such as a crypto exchange holds the keys and keeps an internal record of what you own. You log in with an email, password and two-factor authentication. If you forget your password, support can help you back in.

The downside is counterparty risk. You are trusting the company to stay solvent, secure and honest, and to let you withdraw when you want. When the exchange FTX collapsed in November 2022, customers’ withdrawals were frozen, and creditors waited more than two years for repayments that were based on November 2022 prices. Crypto held on an exchange is generally not covered by FDIC deposit insurance in the US or SIPC protection the way cash or securities at a bank or broker can be.

Non-custodial (self-custody) wallets

With a non-custodial wallet, you generate and hold the keys yourself, usually via the seed phrase. No company can freeze your funds or lose them in a bankruptcy. But there is no “forgot password” button either. If you lose the seed phrase and your device, the funds are gone, and if someone steals the phrase, they can take everything.

Neither option is automatically right. Many people keep a small trading balance on a reputable exchange and move longer-term holdings to self-custody. Our comparison of a crypto wallet vs an exchange helps you decide where each part of your money belongs.

Hot vs Cold Wallets and Every Wallet Type Compared

The second big split is whether the keys are on a device connected to the internet.

• Hot wallets keep keys on an internet-connected device: phone apps, browser extensions and desktop programs. They are free and convenient for daily use, but malware, phishing sites and a stolen unlocked phone can all reach them.
• Cold wallets keep keys offline. The most common type is a hardware wallet, a small device that stores the keys and signs transactions internally, so the key never touches your computer. You approve each transaction by pressing buttons on the device itself.

A useful rule: hot for spending money, cold for savings. Our full breakdown of hot wallet vs cold wallet includes threat models and a worked example of splitting your holdings, and the guide to hardware vs software wallets helps you pick a specific device type.

Types of crypto wallets compared

“Paper wallets”, where a single key is printed on paper, were popular years ago but are now generally discouraged: they are hard to use safely and easy to damage or expose when you finally spend from them.

How Sending and Receiving Crypto Works

Receiving

To receive, you open your wallet, choose the asset and network, and copy your address or show its QR code. The sender pays the network fee. Your wallet does not need to be online to receive; the funds arrive on the blockchain and appear whenever your wallet next checks.

Sending

Sending involves a few steps that happen in seconds:

1. You enter the recipient’s address, the amount and the network.
2. The wallet builds a transaction and shows you the estimated network fee.
3. When you confirm, the wallet signs the transaction with your private key. The signature proves you authorized it without revealing the key.
4. The signed transaction is broadcast to the network, where miners or validators include it in a block.
5. After one or more confirmations, the transfer is final. Blockchain transactions cannot be reversed or charged back.

How to Set Up a Crypto Wallet for Beginners

Here is a step-by-step setup for a free, non-custodial mobile or browser wallet. The same principles apply to a hardware wallet, which adds a device to the process.

1. Choose a reputable wallet that supports your coins. Check which blockchains it supports. Ethereum.org and Bitcoin.org both publish wallet directories with criteria such as open-source code and self-custody.
2. Download it only from the official source. Type the maker’s web address yourself or use the official app store listing, and check the developer name. Fake wallet apps and sponsored search ads that point to lookalike sites are common.
3. Create a new wallet. Never use a seed phrase that came pre-printed in a box or was given to you by anyone else.
4. Write down the seed phrase on paper, in order, with the word numbers. Do not screenshot it, email it, save it in notes or store it in cloud photos.
5. Confirm the phrase when the wallet asks you to re-enter words. This catches spelling mistakes.
6. Set a strong PIN or password and turn on fingerprint or face login if offered. This protects the app on your device; it is not a substitute for the seed phrase.
7. Receive a small test amount and then practice sending part of it back out.
8. Test your backup while the balance is still small: delete the wallet or use a second device, restore from your written phrase and confirm the same address appears.

Backing up and protecting your wallet

Your backup plan matters more than which wallet you choose. A good plan protects against three different problems: losing access (fire, flood, a forgotten hiding place), theft (someone finding or copying the phrase) and your own absence (family being unable to access funds if something happens to you).

• Keep at least two copies of the seed phrase in separate secure places, such as a home safe and a safe deposit box.
• Consider a metal backup for larger amounts. Stamped or engraved steel plates survive fire and water damage that would destroy paper.
• Add a passphrase if you understand it. Many wallets support an optional extra word (sometimes called the “25th word”). It adds protection if your phrase is found, but if you forget it, the funds are unrecoverable.
• Plan for inheritance. Leave clear instructions on where the backup is and how to use it, without writing the phrase itself into a will, which can become a public document in some places.
• Keep devices updated and avoid installing unknown apps or browser extensions on the device that holds your hot wallet.

Common Crypto Wallet Mistakes

• Storing the seed phrase digitally. Screenshots and cloud notes are a common source of theft when an email or cloud account is compromised.
• Typing the seed phrase into a website. Fake “wallet validation” pages, fake support chats and fake airdrop sites exist purely to harvest phrases. See our guide to common crypto scams.
• Sending on the wrong network. An Ethereum address looks identical on Ethereum mainnet, Arbitrum and Base. If you send USDC on Base to an exchange that only accepts it on Ethereum, recovery may be slow, expensive or impossible.
• Copying addresses from your transaction history. In “address poisoning” attacks, scammers send tiny transactions from addresses that share the first and last characters of ones you use, hoping you copy the wrong one later. Use your address book and check more than the first and last few characters.
• Signing transactions you do not understand. Approving a token “allowance” or a “permit” signature can give a contract the right to move your tokens. Read what your wallet shows before you confirm.
• Never testing recovery. Many people discover a missing or misspelled word only when they actually need the backup.
• Buying a hardware wallet secondhand or from an unofficial reseller, which risks a tampered device.

Is a Crypto Wallet Necessary?

It depends on how you hold crypto. If you buy on an exchange, you already have a custodial wallet, and that may be enough for small amounts you trade often. If you invest through a spot bitcoin or ether ETF in a brokerage account, you do not need a crypto wallet at all, because you own fund shares rather than coins.

You do need your own non-custodial wallet if you want to use DeFi apps, hold NFTs, receive crypto directly from other people, or remove the risk of an exchange failing. As your holdings grow, the case for self-custody, and eventually for a cold wallet, gets stronger. Before you buy, our crypto guides hub explains the basics of each major coin.

Bottom Line

A crypto wallet stores keys, not coins, and whoever holds the keys controls the funds. Decide first whether you want a company to hold them (custodial) or to hold them yourself (non-custodial), then whether they should live online (hot) or offline (cold). Whatever you choose, write your seed phrase on paper, never share it, test your backup with a small amount and send a test transaction before every large transfer.

Sources

• Ethereum.org – Ethereum wallets
• Ethereum.org – Ethereum accounts
• Bitcoin.org – Securing your wallet
• Bitcoin.org – Choose your wallet
• Bitcoin Improvement Proposals – BIP-39: Mnemonic code for generating deterministic keys
• Federal Trade Commission – ReportFraud.ftc.gov
• SEC Investor.gov – Crypto Assets