What is a crypto wallet?

People say “get a wallet” on day one, but the word is misleading. A crypto wallet does not store coins the way a leather wallet stores cash. It stores the keys that prove you own coins recorded on a public ledger. Once that clicks, most of the scary popups start making sense.

If you just bought crypto on an exchange, see How to buy your first crypto first. This guide explains what changes when you withdraw to something you control yourself.

Think of the blockchain as a giant spreadsheet everyone can read. Your row says how many bitcoin or ether you own. The private key is the password that lets you change your row — send coins to someone else.

A wallet’s job is to:

Part	What it is	Analogy
Private key	Secret proof of ownership	The PIN that moves money out
Public address	A string others send to	Your account number on the ledger
Wallet app	Software that holds keys and builds transactions	The banking app on your phone

The coins never sit inside the app. They stay on the chain. Lose the keys and nobody — not the wallet company, not “support,” not the blockchain — can give you a password reset.

When crypto sits on a regulated exchange, they hold the keys. You have a login and a balance on their books — convenient, familiar, fine for small learning amounts.

When you withdraw to a wallet you set up, you hold the keys. More control, more responsibility.

	Exchange balance	Your own wallet
Who holds the keys?	The exchange	You
If you forget your password	Support may help	Only your seed phrase can recover access
If the platform fails	Your balance is at risk	Your keys still work — if you backed them up
Good for	First purchases, tiny experiments	Amounts you’d regret losing

Neither is “wrong.” Beginners usually start on an exchange, learn the buttons, then move meaningful holdings to self-custody when ready. For the physical-device version of self-custody, see How hardware wallets work.

Hot wallet — keys live on an internet-connected phone or computer (MetaMask, Rabby, Coinbase Wallet app, etc.). Easy to use with DeFi sites. More exposed to malware and phishing because the device is online.

Cold wallet — keys live offline, usually on a small hardware device you plug in only when sending. Harder to use day to day. Much harder for remote hackers to reach.

For pocket-change experiments, a reputable hot wallet on your phone is enough. For savings you’d actually miss, cold storage is the usual upgrade path.

When you create your own wallet, the app shows a seed phrase (also called a recovery phrase): usually 12 or 24 ordinary words in a specific order.

That phrase is your wallet. Anyone who has those words can recreate your keys on any device and spend everything. There is no “undo” and no company to call.

Do:

• Write it on paper (or metal) and store copies in separate safe places
• Set up the wallet yourself so you are the first person to see the words

Never:

• Screenshot it or save it in cloud notes
• Type it into a website, form, or “support” chat
• Share it with anyone — real support will never ask

If you lose the phrase and lose access to the device, the funds are gone permanently. Treat the words like the only copy of a house deed.

1. Buy a small amount on a regulated exchange (first purchase guide).
2. Stay on the exchange until you understand deposit, buy, and withdraw.
3. Create a wallet app from the official site or app store — never from a link in a DM.
4. Back up the seed phrase offline before moving real money in.
5. Withdraw a test amount from the exchange to your new address. Double-check every character.
6. Upgrade to hardware when the balance justifies it (hardware wallet guide).

Later, when you connect that wallet to a DeFi site, you will see “Connect wallet” and “Approve” popups. Those are separate ideas — What is a dApp? for connecting, Token approvals for permissions.