Cryptocurrency Wallet Basics
Understand how cryptocurrency wallets work, the difference between custody and self-custody, and why protecting wallet credentials is so important.
Educational information only · No investment advice
What is a cryptocurrency wallet?
A cryptocurrency wallet is a tool or system used to manage the cryptographic information associated with digital assets and to authorize certain blockchain transactions.
A wallet does not normally contain physical cryptocurrency. Digital assets are recorded on their respective blockchain networks, while a wallet manages the credentials needed to interact with those assets.
Wallets can be provided through software, dedicated hardware, mobile applications, browser applications, or custodial services.
Why are wallets important?
Blockchain transactions generally require authorization. Wallet software can help users create and authorize those transactions using cryptographic credentials.
The security of those credentials is therefore an important part of protecting access to digital assets.
Custodial wallets
In a custodial arrangement, a third-party service generally manages the private keys or other credentials associated with the user's digital assets.
This can make certain account-management tasks simpler because the service handles some technical responsibilities.
However, users should understand the service's terms, security procedures, withdrawal policies, account requirements, and other applicable conditions.
Self-custody wallets
With self-custody, the user generally maintains direct control over the credentials needed to authorize transactions.
This can provide greater direct control, but it also places greater responsibility on the user to protect those credentials.
Losing the relevant credentials may result in losing access to digital assets.
Custody comparison
Custodial
A third-party service manages relevant credentials.
The provider may offer account recovery and other service features, subject to its policies.
Self-Custody
The user generally controls the credentials directly.
The user is responsible for securely managing and protecting those credentials.
What is a private key?
A private key is sensitive cryptographic information that can be used to authorize certain transactions associated with a blockchain address or wallet.
Private keys should be treated as highly sensitive information.
Do not provide a private key to an online stranger, supposed support agent, investment adviser, website, social-media account, or unsolicited caller.
Anyone who obtains a private key may potentially be able to control assets associated with it.
What is a recovery phrase?
Some cryptocurrency wallets use a sequence of words commonly called a recovery phrase, seed phrase, or backup phrase.
Depending on the wallet system, the phrase can be used to restore access to wallet credentials.
Because of this, a recovery phrase should be treated as extremely sensitive information.
Never enter a recovery phrase into an unfamiliar website or give it to someone who contacts you unexpectedly.
A legitimate support interaction should not require you to disclose your recovery phrase simply to "verify" your wallet.
Software wallets
Software wallets are applications or programs that provide wallet functionality through devices such as computers, smartphones, or web browsers.
They can be convenient for accessing digital assets, but their security depends partly on the security of the device, operating system, application, credentials, and surrounding environment.
Hardware wallets
Hardware wallets are dedicated physical devices designed to manage certain cryptographic credentials.
They can provide an additional security boundary by keeping sensitive operations within a dedicated device.
Hardware wallets are not automatically risk-free. Users still need to protect recovery information, verify transactions, obtain devices from trustworthy sources, and follow the manufacturer's security instructions.
Mobile wallets
Mobile wallets provide wallet functionality through a smartphone or mobile device.
Because smartphones can be lost, stolen, compromised, or replaced, users should understand how the particular wallet handles backup and recovery.
Browser wallets
Browser-based wallets can allow users to interact with blockchain applications through a web browser.
Users should be careful when connecting wallets to websites and should verify the website address before approving requests.
Wallet addresses
A wallet can generate or manage addresses used to receive digital assets.
Address formats differ between blockchain networks and asset types.
Sending an asset to an incompatible address or using the wrong network can cause a transaction to fail or potentially result in loss of access to the transferred assets.
Always verify the network
Some digital assets can be transferred using more than one blockchain network or network standard.
A receiving service may support only specific networks.
Before initiating a transaction, carefully verify the supported asset, network, destination address, and any applicable instructions.
Transaction approvals
Some blockchain applications ask users to approve transactions or other actions through their wallet.
Users should understand what they are authorizing before approving a request.
Be especially cautious when a website unexpectedly asks for permissions, signatures, or transfers that you do not understand.
Common wallet security risks
- Phishing websites
- Fake wallet applications
- Fake customer-support accounts
- Malware and compromised devices
- Fake recovery or verification pages
- Sharing private keys
- Sharing recovery phrases
- Approving unfamiliar transactions
- Sending assets to an incorrect address
- Using an unsupported blockchain network
How to recognize a fake support request
Cryptocurrency users may receive messages from people claiming to work for a wallet provider, exchange, blockchain project, or technical-support department.
Warning signs can include requests for passwords, recovery phrases, private keys, authentication codes, remote computer access, or urgent transfers.
If you receive an unexpected support message, independently locate the organization's official website rather than relying on links or phone numbers provided in the message.
Basic wallet safety checklist
Protect credentials
Keep passwords, private keys, recovery phrases and authentication information private.
Verify websites
Check website addresses carefully before entering credentials or connecting a wallet.
Verify transactions
Carefully review addresses, assets, networks and transaction details before authorization.
Beware of urgency
Unexpected requests demanding immediate action should be treated with caution.
What happens if a wallet device is lost?
The effect of losing a device depends on how the particular wallet is designed and whether appropriate backup or recovery information is available.
In some systems, a wallet can be restored on another device using recovery credentials.
In other situations, losing access to the required credentials can result in permanent loss of access.
What happens if someone gets your recovery phrase?
A recovery phrase can potentially provide access to the wallet it represents.
If someone obtains a recovery phrase, they may be able to restore the associated wallet and control its assets, depending on the wallet design.
Treat an exposed recovery phrase as a serious security incident and follow the appropriate wallet provider's security guidance.
Choosing a wallet
There is no single wallet type that is appropriate for every person or situation.
When researching a wallet, consider factors such as custody, security features, supported networks, recovery procedures, device compatibility, reputation, and the provider's documentation.
Verify current information directly with the relevant provider before relying on specific features or requirements.
Wallets and investment decisions
Choosing or learning about a wallet is separate from deciding whether to purchase, sell, or hold a digital asset.
This guide is intended to explain general wallet technology and security concepts.
CryptoClarity Learning does not provide individualized recommendations about digital assets or investment products.
Continue learning
Cryptocurrency Basics
Review cryptocurrency, blockchain, transactions and network-fee fundamentals.
Read crypto basics →Blockchain
Understand blocks, nodes, consensus and distributed ledger technology.
Read blockchain guide →Security
Learn how to identify common cryptocurrency scams and protect sensitive information.
Read security guide →This guide is provided for general educational and informational purposes only. It is not individualized investment, financial, legal, or tax advice.
Digital assets and cryptocurrency wallets involve technical, operational, security and financial risks. Loss of credentials may result in loss of access to assets.
CryptoClarity Learning does not provide trading signals, price predictions, profit guarantees, or recommendations to buy, sell, hold, or trade a particular digital asset.
Request educational information
Submit a general question about cryptocurrency wallets, blockchain technology, or digital-asset security.