In one sentence
A crypto wallet is software or hardware that manages keys or account authority and helps a user view, receive, and authorize activity on a crypto network.
The wallet usually does not hold coins like files in a folder. The network ledger records the assets; the wallet manages the credentials and interface used to control them.
The simple explanation
A public address is destination-like information that can be shared so someone can send assets. A private key is secret data used to authorize transactions. Many wallets derive a group of keys from a seed phrase or recovery phrase.
Anyone who obtains the needed private key or seed phrase may be able to move the associated assets. If the only recovery secret is lost, there may be no help desk capable of restoring access.
Ethereum's wallet guide describes a wallet as a tool for interacting with an account: it can show balances, send transactions, and connect to applications. The Bitcoin Developer Guide describes Bitcoin wallets at their core as collections of private keys. The networks differ, but both examples separate wallet tools from the ledger entries they control.
A familiar example
Think of a wallet as a key ring plus a dashboard.
The dashboard shows what the network associates with your addresses and prepares actions. The key ring supplies the secret authority needed to approve those actions. Changing wallet apps can be like changing the dashboard while retaining control through the same underlying keys.
The analogy has limits. Some “wallets” are really custodial accounts: a company controls the keys and gives the customer access through a username, password, and its own records. In that setup, the customer depends on the provider to honor withdrawals and remain operational.
How it works
- Key creation: A wallet creates or imports key material and derives public addresses or accounts.
- Viewing: It reads network data or a service’s index to display balances and history.
- Receiving: It presents an address or request that another user can use as a destination.
- Preparing: It constructs a proposed transfer or application interaction, including network and fee information.
- Signing: It uses the private-key authority to produce a digital signature. The secret key should not leave the protected signing environment.
- Broadcasting: It sends the signed transaction to the network or a relay service for validation and possible inclusion.
Wallets can be mobile apps, desktop software, browser extensions, browser-based services, dedicated hardware devices, or institutional custody systems. Those labels describe form factors, not guaranteed security levels. A hardware device can still approve a malicious request; a software wallet can be secure in one environment and compromised in another.
Custody changes who can act
With self-custody, the user controls the keys. This removes one custodian from the authorization path but makes the user responsible for device security, backups, transaction review, and recovery.
With third-party custody, an exchange or provider controls the keys or account authority. Recovery may be easier through the provider, but the user takes on counterparty, policy, access, insolvency, legal, and cybersecurity risks. Investor.gov’s crypto-asset alert explains that crypto platforms may combine trading, brokerage, lending, and custody functions while lacking protections familiar from registered financial firms.
Neither arrangement is universally safer. The risks are different.
What it is not
A wallet is not:
- a guarantee that the displayed token is genuine;
- proof that a transaction or smart contract is safe;
- automatic insurance or legal ownership documentation;
- a privacy shield for public blockchain activity;
- a way to reverse an accepted payment; or
- a reason to give anyone a private key or seed phrase.
Legitimate support should not need a seed phrase. Do not enter one into an unsolicited website, message, form, or “recovery” service. The FTC's crypto scam guide documents impersonation, fake support, payment, investment, and recovery scams that exploit urgency and confusion.
Why it matters
The word “wallet” can hide the most important control question: who can authorize movement?
Before relying on any setup, identify who holds the keys, what recovery actually restores, which network and assets it supports, what transaction details are shown before signing, what happens if the provider or device fails, and whether any legal or insurance protection truly applies.
Avoid treating convenience, brand recognition, open-source code, a hardware enclosure, or the phrase “non-custodial” as a complete security review.
Key terms
- Address: Public destination-like information used in network activity.
- Private key: Secret authorization data. Never share it.
- Seed phrase: Recovery words many wallets use to recreate keys. Never share them.
- Signature: Cryptographic proof that required authority approved particular data.
- Custody: Who controls the keys or account authority needed to move assets.
See the Crypto Recon glossary for related terms and common misconceptions.
What to learn next
Next, follow how a crypto transaction moves from a wallet to network confirmation. Understanding the lifecycle makes the wallet’s signing step much easier to evaluate.
Informational content only; not financial, legal, tax, or security advice. Never share a private key or seed phrase.