A crypto wallet is software or a device that stores the keys that control your crypto. The coins stay on the blockchain; the wallet proves they are yours and lets you send and receive them. Hot wallets are online and convenient, cold wallets keep keys offline, and your recovery phrase is the backup that restores access.
If you are about to buy your first crypto, you need somewhere to receive it. That place is a crypto wallet. This guide explains what a wallet is, how it works, the main types and how to keep one safe, in plain English. If digital money is new to you, start with what cryptocurrency is and how it works.
A wallet also matters when you buy. When you buy crypto on Coinmama, crypto is delivered to the wallet address you provide, so it helps to set up a wallet first. The later sections show how to receive crypto safely.
What is a crypto wallet?
A crypto wallet is software or a physical device that stores the keys you need to use your crypto. It does not store the coins themselves. Your coins are recorded on a blockchain, a shared public record of transactions. The wallet holds the keys that prove the coins are yours and let you spend them.
Ethereum.org describes a wallet as a tool for interacting with your account: it shows you your assets and gives you ways to manage them, while the assets stay on the network.
A helpful picture is a keychain rather than a purse. The coins sit in a huge, transparent vault (the blockchain) that anyone can look into, but only the right key can move them. Whoever holds the key controls the crypto. That is why most of this guide is about keeping keys safe.
So when someone says they moved bitcoin to their wallet, nothing travelled to their phone. The blockchain recorded that the coins now belong to an address whose keys they hold.
How does a crypto wallet work?
A crypto wallet works a lot like an online banking app: it shows your balance and lets you send and receive. The comparison is not perfect, but it helps:
- The blockchain is like the bank’s ledger. It records every transaction to and from every address.
- Your wallet address is like your account number. You share it so people can send you money. Knowing it does not let anyone take money out.
- Your wallet is like the banking app. It reads your balance from the ledger and lets you make payments.
- Your private key is like your login and password in one. Anyone who has it can move your funds.
When you send crypto, your wallet uses your private key to sign (approve) the transaction and passes it to the network. The network checks the signature and records the transfer. Nothing is copied from one wallet to another: only the record on the blockchain changes. After a number of confirmations, the transfer is treated as settled.
Two differences from a bank matter a lot. First, with a self-custody wallet there is no bank behind you. If you lose your private key or recovery phrase, nobody can reset it for you. Second, a crypto payment generally cannot be reversed. Bitcoin.org notes that a bitcoin transaction can only be refunded by the person who received it.
What are public keys, private keys and recovery phrases?
They are the three ideas behind almost everything a wallet does. In a December 2025 investor bulletin, the U.S. Securities and Exchange Commission (SEC) compares a private key to a password and a public key to an email address.
- Public key and address. Your public key is created from your private key. Your wallet address is a shorter code derived from the public key. On Ethereum, for example, the address is taken from a hash (a kind of digital fingerprint) of the public key. The address is what you share to receive crypto. It is safe to share, and it is not the same thing as the public key.
- Private key. The secret that authorizes spending. The SEC notes that a private key cannot be changed once it is created, and that losing it means losing access to the crypto for good. You cannot work out a private key from a public key or an address. Never share it.
- Recovery phrase (seed phrase). A list of words, usually 12 or 24, that most wallets show you during setup. It can recreate your private keys, so it is the master backup of the whole wallet. Anyone who has it can take your funds.
In everyday use you rarely see your private keys, because the wallet manages them for you. What you must protect is the recovery phrase. Ethereum.org’s advice is short: do not store it on a computer; write it down and keep it safe. For more detail, read public keys vs private keys and the glossary entry on the seed phrase.
What types of crypto wallets are there?
Crypto wallets come as software (mobile, desktop and browser-extension wallets) or as hardware devices and paper. They are usually grouped into hot wallets, which are online, and cold wallets, which keep the keys offline.
| Feature | Hot wallet | Cold wallet |
|---|---|---|
| Where the keys are kept | On a phone, computer or browser connected to the internet | On a device or on paper that stays offline |
| Common forms | Mobile, desktop and browser-extension wallets | Hardware wallets and paper wallets |
| Cost | Often free to download | Hardware devices usually cost money |
| Convenience | High: you approve payments on your phone or computer | Lower: you need the device to approve each payment |
| Main risks | Malware, phishing and fake wallet software | Loss, damage, theft or a tampered device |
| Often used for | Smaller amounts you move often | Larger amounts you plan to hold |
A hot wallet is convenient, but the SEC notes that being online also exposes it to cyberthreats. Bitcoin.org adds that losing or damaging the phone a mobile wallet runs on can lead to a loss of funds, which is why the backup matters.
A cold wallet, such as a hardware wallet, keeps the keys offline and asks you to confirm each payment on the device itself. Bitcoin.org calls hardware wallets one of the most secure ways to store funds, but warns that losing the device without a backup can make the funds unrecoverable. Paper wallets are also offline, but they are easy to lose or damage.
Many people use both: a hot wallet for small, everyday amounts and cold storage for savings. Bitcoin.org gives similar advice. For a full side-by-side comparison, read hot wallet vs cold wallet.
What is the difference between custodial and non-custodial wallets?
The difference is who holds the private keys. With a non-custodial wallet, you hold them. With a custodial service, a company holds them for you. This is a separate question from hot or cold: the SEC points out that hot and cold options exist for both.
| Feature | Non-custodial (self-custody) | Custodial (third-party custody) |
|---|---|---|
| Who holds the keys | You | A company, such as some crypto exchanges and custody providers |
| How you get access | Your recovery phrase or keys | A username, password and the company’s rules |
| If you lose your backup or login | Usually no one can recover it for you | The company may help you regain access |
| Main risk | Losing, damaging or exposing your keys or phrase | The company being hacked, shutting down or going bankrupt |
| Your responsibility | Full: backups and security are up to you | You rely on the company’s security and policies |
A popular crypto saying sums it up: “not your keys, not your coins.” If someone else holds the keys, you rely on them to give you access when you ask. Ethereum.org makes the same point: when an exchange links your crypto to a username and password, you are trusting it with custody of your funds. That is not automatically bad. It is a trade-off between convenience and control.
If you are thinking about a custodial service, the SEC suggests asking how it uses customers’ crypto. Some custodians use deposited crypto for their own purposes, such as lending, which is sometimes called rehypothecation. Some also hold customers’ assets together (commingled) instead of separately. Read the terms before you deposit. The glossary explains the non-custodial wallet in more detail.
Which crypto wallet should a beginner choose?
There is no single right wallet for everyone, and this guide does not recommend a brand. Choose based on the coins you need, how much you will keep and how much responsibility you want. These questions help:
- Which coins and networks do you need? A wallet can only receive the coins and networks it supports. Check this before you buy.
- How much will you hold, and for how long? Small amounts you move often suit a mobile wallet. Savings you rarely touch put more weight on security.
- Are you ready to look after a recovery phrase? With self-custody, nobody can reset it for you.
- Is the wallet well established? Look for regular updates, clear information about who makes it and a visible security record. Download it only from the maker’s official website or an official app store.
- Is a hardware device in your budget? The SEC notes that cold-wallet devices typically cost money, while hot wallets may be free at first. Sending crypto from either usually costs a network fee.
For specific cases, see how to open an Ethereum wallet, the complete guide to MetaMask, a popular browser-extension wallet, and how to add money to a Bitcoin wallet.
How do I set up a crypto wallet?
Most software wallets follow the same five steps, although the screens vary from wallet to wallet.
- Download it from the official source. Use the maker’s official website or your device’s official app store. Never use a link someone sends you or a sponsored search ad.
- Create a new wallet. The wallet generates your keys for you. Never use a recovery phrase that someone gives you or that comes pre-printed in a box.
- Write down your recovery phrase. Write the words on paper, in order, and check the spelling. Do not take a screenshot or save the words in cloud notes, email or chat.
- Confirm the phrase and lock the wallet. Most wallets ask you to re-enter some of the words, then let you set a PIN, password or fingerprint lock.
- Find your receive address. Look for Receive. The wallet shows an address, and usually a QR code, for each coin it supports.
Store the written phrase somewhere safe and private, away from fire and water. Some people keep a second copy in another secure place.
Why must the address match the coin and the network?
Because each blockchain keeps its own records and uses its own addresses. Send bitcoin only to a Bitcoin address and ether only to an Ethereum address. If the coin, the address and the network do not match, the funds may be lost.
Some tokens exist on more than one network. USDC, a stablecoin, is issued on many blockchains, including Ethereum, Solana and Base (as of September 2026). Always choose the same network in the service you send from and in the wallet you receive to. If your wallet does not support the network used, the funds can be hard or impossible to recover.
Check the whole address before you send. Bitcoin.org advises verifying the entire address and using a saved address book rather than copying an address from your transaction history. Scammers sometimes send tiny payments from look-alike addresses, hoping you will copy theirs by mistake. This is called address poisoning.
How do I receive crypto I buy?
You give the seller your wallet’s receiving address for the right coin and network, then wait for the network to confirm the transfer. Step by step:
- Open your wallet and choose the coin. Select Receive for the coin you are buying.
- Check the network. Make sure it matches the network the seller will send on.
- Copy the address. Use the copy button or the QR code instead of typing it by hand.
- Paste it and compare. Paste the address into the order form, then check the first and last several characters against your wallet.
- Confirm the order and wait. The crypto arrives once the network confirms the transfer. Waiting times vary; see blockchain delays and confirmations.
- Check your balance. Your wallet shows the crypto once the transfer is recorded on the blockchain.
Moving crypto from your wallet to another address later works the other way round. See how to send bitcoin to a wallet.
How do I keep my crypto wallet safe?
Keep your recovery phrase offline, check every address and treat unexpected requests as a warning sign. These habits work for any wallet:
- Keep the recovery phrase offline. Never type it into a website, a form or a message.
- Never share your phrase or private keys. Bitcoin.org says no legitimate person, business or support team will ever ask for them. Learn how to spot people pretending to be Coinmama staff.
- Use strong passwords and multi-factor authentication. The SEC recommends both for all your online crypto accounts. Protect the email account behind them in the same way.
- Keep your software up to date. Bitcoin.org notes that new versions bring important security fixes.
- Keep only spending money in a hot wallet. Bitcoin.org suggests small amounts on a phone or computer and the rest somewhere safer.
- Watch out for phishing. Use bookmarks for the sites you trust, and do not click wallet links in unexpected emails, messages or ads. See phishing attacks.
- Buy hardware wallets from the maker or an authorized reseller. Bitcoin.org warns that counterfeit devices are sold on third-party marketplaces, sometimes with a recovery phrase the scammer already knows.
- Keep your holdings private. The SEC advises against telling people how much crypto you hold. Blockchain records are public, so anyone who knows your address can see its balance.
For more everyday habits, see how to protect yourself from fraud and is Bitcoin safe to buy?
What are the most common crypto wallet mistakes?
Most wallet losses start with a small slip. These are the ones to watch for:
- No backup of the recovery phrase. If the device is lost and there is no backup, there is usually no way back in. See what happens if you lose your private keys.
- Storing the phrase digitally. Photos, notes and cloud files can leak through hacked accounts or malware.
- Using the wrong coin, network or address. Transactions generally cannot be reversed, so check before you confirm.
- Giving keys to helpful strangers. Genuine help never needs your recovery phrase or private key.
- Assuming an account balance means self-custody. If a company holds the keys, you rely on it for access.
- Sending a large amount without a test. When you use a new address, some people send a small amount first. Each transfer usually costs a network fee.
Frequently asked questions
Sources
- U.S. SEC, Investor.gov: Crypto Asset Custody Basics for Retail Investors (Investor Bulletin, December 2025) (checked September 2026)
- Ethereum.org: Ethereum wallets (checked September 2026)
- Ethereum.org: Ethereum accounts (checked September 2026)
- Bitcoin.org: Choose your Bitcoin wallet (checked September 2026)
- Bitcoin.org: Securing your wallet (checked September 2026)
- Bitcoin.org: Some things you need to know (checked September 2026)
- Bitcoin.org: Avoid Scams (checked September 2026)
- Bitcoin Improvement Proposal 39 (BIP 39): Mnemonic code for generating deterministic keys (checked September 2026)
- Circle Developer Docs: USDC contract addresses (checked September 2026)
