This article is general education about technology, not financial, tax or legal advice, and it does not recommend buying any asset. Crypto assets are volatile and you can lose everything you put in. Rules differ by country.
People talk about "storing crypto in a wallet", but a crypto wallet does not store coins the way a leather wallet stores cash. It stores keys. Whoever controls the keys controls the funds, which is why wallet choices matter so much. We compared a US state banking regulator's consumer page (Connecticut Department of Banking), an educational academy (NonFungible.com), a hardware-wallet maker's guide (D'CENT, a vendor with products to sell) and the Bitcoin.org FAQ.
Key takeaways
- A wallet holds keys. The public address receives funds; the private key authorises spending and must stay secret.
- Custodial wallets are simple but depend on a provider; non-custodial (self-custody) wallets give control and full responsibility.
- Hot wallets are convenient and more exposed; cold wallets are safer from online attacks but can be lost or damaged.
- Never share your recovery phrase with anyone, ever.
Keys, Addresses and Seed Phrases
The Connecticut Department of Banking explains it simply: a public key works like an account number that you can share to receive funds, while a private key proves ownership and grants access. Wallets usually generate a backup word sequence (a seed or recovery phrase) that can restore access if you lose the device. NonFungible.com adds that one seed phrase can generate many addresses, so if it is compromised, every address derived from it is at risk.
Custodial vs Non-Custodial
| Custodial | Non-custodial (self-custody) | |
|---|---|---|
| Who holds the keys | A third party, often an exchange | You |
| Ease of use | Beginner-friendly; password resets possible | More to learn |
| Main risk | Provider hacks, failure or freezes | You lose the keys or phrase and nobody can recover them |
| Control | Limited | Full |
The Connecticut regulator notes beginners may prefer custodial options, while experienced users may prefer non-custodial control. If you use an exchange, research it thoroughly first; see how to buy crypto safely.
Hot vs Cold
- Hot wallets are connected to the internet: mobile apps, desktop software, browser extensions. They are fast and convenient for frequent use but more exposed to hacking, phishing, malware and tricks such as clipboard address swapping (NonFungible.com).
- Cold wallets stay offline, usually as hardware devices. They are hard to hack remotely because transfers need physical confirmation, but they must be bought, can be lost, damaged or stolen and still need care when connected to sign transactions.
- Paper wallets (keys printed offline) resist online attacks but are easy to mess up and hard to use, per the D'CENT guide.
A useful analogy from the Connecticut page: hot wallets are like checking accounts for everyday spending and cold wallets are like savings for larger holdings.
How to Choose
- How often will you transact? Frequent use favours a hot wallet.
- How much will you hold? Larger amounts justify cold storage and extra effort.
- How much responsibility can you handle? Self-custody means you are your own bank, with no help desk.
NonFungible.com sums up the trade-off: easy-to-use options tend to be less secure, and highly secure options tend to be harder to use.
Security Habits That Matter
- Never share your private key or recovery phrase. Bitcoin.org says legitimate services never ask for it.
- Store the phrase offline, exactly as provided, in a secure place. Consider more than one secure location so a single fire or theft does not wipe you out.
- Use strong, unique passwords and app-based two-factor authentication on exchange accounts; see our password manager guide and 2FA guide.
- Download wallet software only from official sources and keep it updated. Fake wallet apps are common.
- Double-check addresses before sending; transactions are generally irreversible. Many people send a small test transaction first.
- Be wary of vendor promises. The D'CENT article claims users' assets are "guaranteed" safe, but no wallet can guarantee that.
- Match storage to need: keep spending money accessible and larger holdings in cold storage.
The Biggest Mistakes
- Entering a recovery phrase on a website or giving it to "support". This is a scam.
- Keeping everything on an exchange you have not vetted.
- Storing the phrase as a screenshot or in cloud notes.
- Skipping a backup, then losing the device.
Learn how scammers target wallets in crypto scams and how to avoid them, and start with the basics in what is Bitcoin.
Building Wallet Features?
If you are building a product that touches wallets or payments, security design is critical. Node-devs builds secure web applications and integrations and can help you choose between custodial and non-custodial approaches.
References and further reading
This guide was compiled from the sources below. We compared them, kept the points they agree on and wrote the article in our own words. Check the originals for more detail.
- Cryptocurrency digital wallets (Connecticut Department of Banking)
- Wallet type and usage (NonFungible.com Academy)
- The ultimate guide to crypto wallets (D'CENT)
- Bitcoin FAQ (Bitcoin.org)
