Security

Crypto wallet: what it is, hot and cold types, and how to use one safely

A complete beginner guide to crypto wallets, hot and cold storage, recovery phrases, safe transfers and common mistakes.

Carteira física e backup de recuperação representando segurança em carteiras cripto
Carteira física e backup de recuperação representando segurança em carteiras cripto

Overview

A crypto wallet is the tool used to access, receive, send and protect cryptoassets. It can be a mobile app, browser extension, desktop program, exchange account or physical device. For beginners, the most important idea is this: a wallet does not store coins like a physical wallet stores cash. The assets are recorded on the blockchain; the wallet manages the keys that let you move them.

That is why terms such as crypto wallet, cryptocurrency wallet, hot wallet, cold wallet, hardware wallet, private key and seed phrase are searched so often. They define who controls access to digital money.

What a crypto wallet is

A crypto wallet is software or hardware that manages cryptographic keys. The public address can be shared to receive funds. The private key or recovery phrase must stay secret because it authorizes transactions. Ethereum.org describes wallets as tools that let users access assets, sign transactions and interact with applications. Bitcoin.org stresses that security depends on good practices such as backups, updates and caution with online services.

Custodial and non-custodial wallets

In a custodial wallet, usually an exchange or platform controls the keys for you. You log in with an account, password and authentication. This is simpler, but you depend on the company's rules, withdrawals and security. In a non-custodial wallet, also called self-custody, you control the keys. That gives more autonomy and more responsibility. If you lose the recovery phrase or sign a malicious transaction, there may be no support team able to reverse the loss.

Hot wallet

A hot wallet is connected to the internet. It may be a mobile app, browser extension, web wallet or desktop wallet. It is convenient for smaller amounts, tests, DeFi, NFTs, payments and frequent use. The trade-off is exposure to phishing, malware, fake links, malicious extensions and risky token approvals.

Cold wallet

A cold wallet keeps keys offline. The best-known option for everyday users is a hardware wallet, a device designed to sign transactions without exposing the private key to the computer or phone. Cold storage can be a strong option for longer-term reserves, as long as the backup is protected and the device is bought from a trusted source.

Hot or cold: which one should you choose?

The useful question is not “what is the best crypto wallet?”, but “which wallet fits the use and value?”. A hot wallet may be enough for learning and small tests. A cold wallet usually makes more sense for meaningful long-term holdings. A prudent setup separates exchange use for buying and selling, hot wallet use for activity, and cold wallet use for reserves.

Seed phrase, private key and backup

The seed phrase, or recovery phrase, is the most sensitive backup. Anyone with it can access the funds. No legitimate support agent should ask for your phrase, private key, recovery QR code or authentication codes. Do not photograph it or store it in email, cloud notes or messaging apps. Write it offline and think about theft, fire, water, loss and inheritance.

How to use a crypto wallet

Download only from the official website or official app store. Create the wallet without sharing your screen. Write the recovery phrase offline. When possible, test recovery before sending meaningful value. Send a small test transaction first. Before larger transfers, check asset, network, address and fee. Stablecoins and tokens can exist on several networks, so the ticker alone is not enough.

DeFi, NFTs and dapps

Connecting a wallet to an application is not just “logging in”. You may be approving address access, signing a message or allowing a contract to move tokens. Read what the wallet shows before confirming. Avoid using your main wallet on unknown websites. Use a separate wallet for tests. For larger amounts, prefer signing with a hardware wallet and review permissions when needed.

Common wallet scams

Fake support agents ask for recovery phrases. Cloned websites imitate known wallets. Fake airdrops push users to connect wallets. Investment scams ask victims to send funds to fraudulent platforms. The FBI warns that cryptocurrency investment fraud often uses urgency, false relationships and promises of returns. If you suspect a scam, stop sending money and preserve transaction information.

Security checklist

1. Did I download from an official channel? 2. Do I know whether the wallet is custodial or non-custodial? 3. Is the seed phrase stored offline? 4. Have I avoided screenshots and cloud storage? 5. Is strong MFA active on my exchange and email? 6. Did I make a small test transfer? 7. Did I check network and address? 8. Did I separate daily-use and reserve wallets? 9. Do I avoid links received by message? 10. Do I have a recovery plan if my phone, computer or hardware wallet breaks?

Conclusion

A crypto wallet is the entry point for using crypto with autonomy. Hot wallets offer convenience. Cold wallets offer more isolation. Exchanges offer simplicity, but add third-party risk. For beginners, the best path is to start small, understand custody, separate use from reserves and treat the recovery phrase as the most sensitive part of the whole process.

Sources: Ethereum.org - wallets; Ethereum.org - wallet finder; Ethereum.org - security and scam prevention; Bitcoin.org - securing your wallet; CISA - multifactor authentication; FBI - cryptocurrency investment fraud. Reviewed on August 2, 2026.

A sound market reading combines data, context and clear risk limits.