A “wallet” in crypto does not hold cryptocurrency — the cryptocurrency is on the blockchain. The wallet holds the private keys that prove ownership. Choosing a wallet is choosing your security model. The two main decisions: custodial vs self-custody, and hot vs cold.
Custodial vs self-custody
Custodial means a third party (exchange, payment app, hosted wallet) holds the private keys for you. You log in with email/password; they sign transactions on your behalf. Examples: Coinbase, Binance, Cash App, Robinhood.
- Pro: Easy. Forgot password? You can reset. Lost device? You can log in from another.
- Con: You do not actually own the crypto — you have a claim against the custodian. If the custodian fails (FTX, Celsius, Mt. Gox), your claim may not be honoured.
Self-custody means you hold the private keys yourself. Examples: MetaMask, Phantom, Rabby, Ledger, Trezor.
- Pro: No counterparty risk. The blockchain only honours signatures from your private key — period.
- Con: You are responsible for security. Lose your seed phrase, lose your funds. No customer service can recover them.
For amounts above ~$1,000, self-custody is generally recommended. For small balances used actively (trading, on-ramps), custodial is fine.
Hot vs cold
Hot wallets are connected to the internet. Browser extensions (MetaMask, Phantom) and mobile apps (Trust, Rabby) are hot. They are convenient for daily use but vulnerable to malware, phishing, and bad signing.
Cold wallets are not connected to the internet. Hardware wallets (Ledger, Trezor, GridPlus) sign transactions on a separate device. You connect briefly to broadcast the signed transaction, then disconnect. Even if your computer is compromised, the private key never leaves the hardware device.
For amounts above ~$5,000, a hardware wallet is generally recommended. For amounts above ~$100,000, hardware + multi-signature is recommended.
The seed phrase
Every self-custody wallet starts by generating a 12 or 24-word seed phrase. This phrase encodes your private keys. Anyone with the seed phrase can recreate your wallet on any compatible device.
Rules:
- Write it down on paper or engrave on metal. Do not store digitally.
- Store in at least two physically separate locations.
- Never photograph, type into any website, or share via any digital channel.
- Test recovery before depositing serious funds — wipe the wallet, restore from seed, verify funds visible.
Common scams
- “Wallet support” DMs. No legitimate wallet provider DMs you. Anyone in your DMs asking for your seed phrase is a scammer.
- Fake browser extensions. Install MetaMask only from metamask.io. Check the URL carefully.
- Approve-all-spending phishing. Some malicious smart contracts ask you to “approve unlimited” spending on a token. Always limit approvals to the amount needed; review token approvals at revoke.cash periodically.
- Address-poisoning. Attackers send a tiny transaction from an address that visually mimics one you commonly send to, hoping you’ll copy the wrong address from your transaction history later.
Recommended setups
Beginner (under $1k): Custodial exchange (Coinbase, Kraken). Enable 2FA. Use a unique strong password.
Active user ($1k–10k): Self-custody hot wallet (MetaMask + Phantom for multi-chain). Move long-term holdings to a hardware wallet.
Serious holder (above $10k): Hardware wallet (Ledger Nano X or Trezor Safe 5). Multi-sig for amounts above $100k.