What Is a Crypto Wallet?

How Crypto Wallets Store Keys and Control Funds

Every cryptocurrency holding on a blockchain is controlled by a pair of cryptographic keys: a public key (your address, safe to share — it's where others send funds) and a private key (a secret number that mathematically proves ownership and authorizes transactions). The wallet's only job is to generate and securely store the private key, then use it to sign outgoing transactions. When you "send crypto," you're really broadcasting a transaction signed with your private key to the network — and the network verifies that signature before crediting the recipient.

A hot wallet keeps the private key accessible on an internet-connected device: a browser extension like MetaMask, a mobile app, or custody held by a centralized exchange. Hot wallets are convenient — you can transact instantly — but the key's exposure to the internet creates attack surface. Phishing attacks, malicious browser extensions, and exchange insolvency (not your keys, not your coins) are real risks. A cold wallet (most commonly a hardware wallet from manufacturers like Ledger or Trezor) stores the private key on a dedicated offline device. When you sign a transaction, it's composed online but the signing step happens on the hardware device — the private key never touches the internet. This dramatically reduces attack surface for most common threat vectors.

A frequent source of confusion is equating "having a wallet" with "owning the crypto." If you hold funds on a centralized exchange, you do not control the private keys — the exchange does. You have an IOU from the exchange, not self-custody of the asset. The phrase "not your keys, not your coins" reflects what several high-profile exchange failures have demonstrated in practice: when the exchange goes bankrupt, customer funds can be frozen or lost entirely. Self-custody eliminates counterparty risk but places the full responsibility for key security on the owner.

Key Points

• A wallet stores private keys, not coins. Cryptocurrency balances exist on the blockchain; the wallet is the tool that proves you control them.
• Hot wallets (software, exchange accounts) are convenient but expose keys to online threats — use them for working capital, not long-term holdings.
• Cold wallets (hardware devices) keep the private key offline. The signing operation happens on-device, so the key never touches an internet-connected computer.
• Your seed phrase (12 or 24 words) is a backup of your private key. Losing it with no backup means permanent loss of funds — store it offline, in multiple secure locations, never digitally.

Learn More

Choosing the right wallet and securing it properly is the foundation of cryptocurrency safety. See Security and Scams for a complete guide to crypto wallet security, common attack vectors, and how to protect your holdings from phishing, SIM swaps, and social engineering.

Related answers: How Does Bitcoin Work? · What Is a Blockchain? · Browse all questions

Related Questions

What is the difference between a hot wallet and a cold wallet?

A hot wallet is any wallet where private keys are accessible on an internet-connected device — software wallets, browser extensions, and exchange custodial accounts all qualify. Hot wallets are convenient for frequent use but expose keys to online threats. A cold wallet (hardware wallet) stores private keys entirely offline on a dedicated device; transaction signing happens on-device and the key never touches the internet. Cold storage is the standard recommendation for holdings you don't need to access frequently.

What happens if I lose my private key?

If you lose your private key and have no backup of your seed phrase, you permanently lose access to all funds controlled by that key. There is no password reset, no customer support, and no way to recover a lost key. This is why secure offline backup of the seed phrase — written on paper or engraved on metal, kept in multiple safe locations, never stored digitally — is the single most important step in self-custody.