Lesson Objective
A wallet is a key manager
A crypto wallet is software, hardware or an institutional system that manages the cryptographic credentials used to interact with a blockchain. The network's ledger records the assets and balances. The wallet helps the user view that information and authorize changes.
This is why deleting a wallet application does not necessarily destroy the assets: if valid recovery material exists, a compatible wallet may recreate access. The opposite is also true — having the application without the required credentials may not provide control.
A Useful Analogy
The elements of a wallet
Address: A public identifier used to receive assets and locate activity on a blockchain. One wallet may manage many addresses.
Public key: Cryptographic information from which an address may be derived, depending on the network. It supports verification of signatures.
Private key: Secret information used to create valid transaction signatures. Anyone with sufficient access to it may be able to control the associated assets.
Recovery phrase: A standardized sequence of words that can recreate a group of wallet keys in compatible software or hardware.
Wallet interface: The screen or application through which a user views balances, selects networks and prepares transactions.
Network connection: A service or node that supplies blockchain data and broadcasts signed transactions. Incorrect information can mislead the interface even when keys remain secure.
Custodial and self-custodial wallets
| Feature | Custodial arrangement | Self-custodial arrangement |
|---|---|---|
| Control | A provider controls the signing infrastructure and records the customer's entitlement. | The user or organization controls the wallet credentials and signs transactions. |
| Access | Usually through an account, password and authentication process. | Through possession of the device, key, recovery phrase or required signing combination. |
| Recovery | The provider may restore account access after identity verification. | Recovery depends on valid backups and the wallet design; no help desk may be able to restore lost keys. |
| Primary dependency | Provider security, solvency, governance, withdrawal policies and legal arrangements. | User security, backup quality, device integrity, transaction accuracy and succession planning. |
| Typical use | Exchange trading, simplified onboarding or institutionally managed custody. | Direct blockchain use, personal control, DeFi interaction or organizational multisignature arrangements. |
Hot and cold describe connectivity — not quality
A hot wallet uses keys on a device or system connected to the internet. It is convenient for frequent activity but is exposed to online threats affecting the device, application, browser or account.
Cold storage aims to keep signing keys offline when they are not needed. A hardware wallet is a common tool, but "hardware" and "cold" are not perfect synonyms: a device may be connected during signing, and an institutional cold-storage process may use several offline systems and approvals.
| Consideration | Hot wallet | Cold-oriented arrangement |
|---|---|---|
| Convenience | Faster access for routine transactions and applications. | More deliberate process; less convenient for frequent activity. |
| Online exposure | Greater exposure to malware, phishing and malicious interfaces. | Reduced key exposure when implemented correctly, but backups and transaction verification remain critical. |
| Best fit | Limited working balances and regular use. | Longer-term or higher-value holdings where slower access is acceptable. |
How a wallet sends a transaction
Prepare the instruction.
The user selects the network, asset, destination, amount and fee settings, or requests a smart-contract action.
Review what will be authorized.
The wallet displays the transaction details. Some contract interactions are difficult to translate into plain language, which increases risk.
Sign with the private key.
The wallet creates a cryptographic signature. A properly designed hardware wallet performs this step inside the device without exposing the key to the connected computer.
Broadcast the signed transaction.
The wallet or connected service sends the instruction to the blockchain network.
Wait for network confirmation.
Validators or miners process the transaction according to the network's rules. The wallet then displays the resulting status.
Signing Is Authorization
Wallet types you may encounter
Mobile wallet: Convenient software on a phone. Security depends on the application, device, backup and user behavior.
Browser-extension wallet: Connects easily to web applications but shares an environment with websites and other extensions.
Desktop wallet: Runs on a computer and may offer broader features; malware and backup risks remain.
Hardware wallet: A dedicated signing device intended to isolate keys. It still requires verified setup, careful screen review and secure recovery material.
Multisignature wallet: Requires a defined combination of signatures. It can reduce single-person risk but adds setup, coordination and recovery complexity.
Smart-contract wallet: Uses programmable account logic for features such as multiple approvers, limits or account recovery. Contract and governance risks must be understood.
Paper wallet: A printed key or code. It avoids online storage but can be lost, copied, damaged or used incorrectly and is generally unsuitable for inexperienced users.
One wallet can support many assets and networks
A wallet interface may display assets on several blockchains, but each network has its own rules, addresses, fees and transaction history. Similar-looking addresses do not prove that an exchange or recipient supports the selected network.
Tokens can also share a network while using different contract addresses. A wallet may display a fraudulent token with the same name or symbol as a legitimate one. Verify the network and token contract through trusted sources rather than relying only on branding.
Choosing a wallet
Start with the use case and amount at risk, not with a product recommendation.
Control: Who holds the keys, and who can freeze, recover or approve transactions?
Compatibility: Does it support the exact networks, assets and applications required?
Security model: Where are keys generated and stored, and how are transactions displayed and signed?
Recovery: What backup restores access, and has the process been understood and tested safely?
Software integrity: Is the developer identifiable, is the source or security review credible, and how are updates delivered?
Privacy: What data does the wallet or network provider collect, retain or associate with addresses?
Governance: Can the software, smart contract or service be upgraded, blocked or discontinued?
Support and succession: Can the intended owner or organization recover access after device loss, incapacity or staff turnover?
Cost: Consider purchase price, service fees, network fees, spreads and the operational cost of secure administration.
Avoid False Certainty
A safe setup sequence
Obtain the wallet application or device from a verified source and inspect packaging or publisher information.
Create the wallet privately on a trusted, updated device; do not use recovery words supplied by another person.
Record the recovery phrase accurately and keep it offline in a secure location.
Verify the backup using the wallet's trusted procedure without exposing it to websites or messages.
Set a strong local PIN or password and enable appropriate device security.
Confirm the receiving address on the trusted wallet or hardware display.
Send a small test transaction on the correct network and verify receipt.
Document the wallet's purpose, supported networks, custody model and recovery plan.
Common wallet mistakes
Believing the wallet application itself contains the assets.
Storing the recovery phrase in ordinary photos, email or cloud notes.
Entering recovery words into a fake support or wallet-verification website.
Sending an asset over a network the recipient does not support.
Trusting a token name without verifying its contract address.
Signing an approval without understanding its authority or duration.
Keeping all assets in one wallet used for unfamiliar applications.
Creating a complicated backup that cannot be recovered when needed.
Wallets for organizations
An organizational wallet should be governed as a financial and technology system, not as one employee's personal application.
Use documented ownership, purpose and authorized-user records.
Separate transaction preparation, approval, signing and accounting review where practical.
Use limits, allowlists, multiple approvals or multisignature arrangements appropriate to the exposure.
Control device procurement, software updates, key ceremonies and backup access.
Maintain continuity procedures for staff changes, incapacity and emergencies.
Reconcile wallet activity with blockchain records, custodian statements and the general ledger.
Accounting Perspective
Key takeaways
Crypto assets are recorded on a blockchain; wallets manage the credentials used to control them.
Custodial and self-custodial wallets assign control, recovery and counterparty risk differently.
Hot and cold describe connectivity and key exposure, not an automatic safety rating.
A transaction signature is an authorization and can grant permissions beyond a simple transfer.
Wallet selection should begin with purpose, value at risk, compatibility, recovery and operator capability.
A secure wallet that cannot be correctly recovered or operated is not a workable solution.
Quick knowledge check
If assets are not inside a wallet, where are they recorded?
What responsibility changes when moving from custodial to self-custodial control?
Why is a hardware wallet not automatically risk-free?
What should be verified before signing and broadcasting a transaction?
Glossary
Sources and further reading
Editorial note: This lesson was independently written for Fichtner Digital and synthesizes the cited sources in original language. It does not reproduce substantial passages from them. Facts and links last reviewed 22 July 2026.
Educational purposes only. Not financial advice. Wallets, custodians, devices and recovery methods can fail or be compromised, and blockchain transactions may be irreversible. No product is recommended or guaranteed safe. This material does not constitute investment, legal, cybersecurity, accounting or tax advice.