Wallets in depth

In short

A friend of mine once kept his house key under the flowerpot and called it security. You have probably heard a crypto wallet described as a place where coins live, and that is not quite right. A wallet holds the keys that let you move coins recorded on a public ledger. Whoever controls those keys controls the coins, so settle who holds yours. A hot wallet stays connected to the internet and is easy to use, while a cold wallet keeps the keys offline and is harder for a hacker to reach. Write your recovery phrase on paper, store it away from the device, and never type it into a website. Send a small test amount before any large one.

The whole of it

What it is

I once watched an old farmer explain a safe deposit box to his grandson. He said the bank does not hold your jewels, it holds the box, and you hold the key. A crypto wallet works a lot like that key, with one big difference. There is no bank to call if you lose it.

Your coins are not stored inside any device. They are entries on a shared ledger called a blockchain, which thousands of computers keep in step with each other. What you own is the right to move those entries, and that right comes from a secret number called a private key. Think of it as a very long password that only you should know.

From the private key, the software makes a public key, and from that, an address. An address is like an email address that people can use to send you coins. You can hand it out freely. The private key you never hand out. Not to a friend, not to a support agent, not to anyone.

Wallets come in a few kinds. A custodial wallet is one where an exchange holds the keys for you, much like a bank. A self custody wallet is one where you hold the keys yourself. Within self custody, a hot wallet runs on a phone or computer that touches the internet, and a cold wallet is a small device or a paper record kept offline. Each kind trades ease for control. No kind is right for everyone.

How it works

If you are holding a wallet app on your phone, here is what happens behind the screen. You pick an amount and an address, and the app builds a message saying move this much from my address to that one. Your private key signs that message. A signature is a mathematical stamp that proves the message came from the key holder, without revealing the key itself. The network checks the stamp, and if it is good, the move goes onto the ledger.

Most wallets start by giving you a recovery phrase, often twelve or twenty four plain words. This phrase is a human friendly copy of your master key. Anyone who has the words can rebuild your wallet on another device and take everything in it. That is why the words matter more than the phone. Lose the phone and you can recover. Lose the words and the phone together, and the coins are gone for good.

A hardware wallet is a small device built to sign messages without ever exposing the key to your computer. The key stays inside. Your computer sends the draft transaction in, the device signs it, and only the signed result comes out, so even a laptop full of bad software never sees the key. You still confirm each move by pressing a button on the device, which is a fine habit to keep.

Every move on a blockchain costs a fee, paid to the people who run the network. The size of that fee depends on the network and on how busy it is. Moves are also final. There is no undo and no chargeback. If you send to a wrong address, no clerk can pull it back. I have seen careful people lose money in one second of haste. Slow down.

The numbers, and where to find yours

Wallets themselves are often free to download, but using them is not free. Network fees change from hour to hour, so any fee I quoted here would be stale before you read it. Your wallet app shows the fee before you confirm, and that figure is the one to trust. A hardware wallet has a one time purchase price that varies by maker, so check the maker's own site.

Taxes are the other number worth knowing. In the United States, the IRS treats digital assets as property, and it says so in its Digital Assets guidance on irs.gov. Moving coins between two wallets you own is a different matter from selling or spending them, and the IRS page explains the difference. The IRS has also put a question about digital asset activity near the top of Form 1040, but the wording and placement of that question can change from one tax year to the next. Check the instructions for the tax year you are filing to see exactly how it reads. The date on the IRS page tells you how fresh it is.

Your own records are your best friend here. Keep a note of each wallet address you control, the date of each move, and the amounts. It takes a few minutes now and saves hours later.

A worked example

Let me tell you about a woman named Dana. She is a nurse, careful by nature, and she bought a small amount of a coin through an exchange. For a while she left it there, which meant the exchange held the keys. One evening she read about how exchanges can freeze accounts, and she decided she would like to hold her own keys.

She bought a hardware wallet from the maker's own website, not from a stranger online. When it arrived, she checked that the box was sealed. She set it up, and the device showed her twenty four words. She wrote them on paper, slowly, checking each one twice. She did not photograph them. She did not save them in her notes app. She put the paper in a fireproof box at home, and she wrote a second copy for a safe place at her sister's house.

Now came the test. Her exchange balance was 400 dollars worth of coin. She did not move it all. She copied her new wallet address, checked the first four and last four characters against the device screen, and sent a test amount of 20 dollars worth. The exchange charged a withdrawal fee, which was shown on screen before she confirmed. The 20 dollars arrived in a few minutes.

She checked the math on what remained. Her balance was 400 dollars worth, she sent 20 dollars worth, and so 400 minus 20 left 380 dollars worth still on the exchange, before any fee and before any price change. Once she saw the test land safely, she moved the remaining 380 dollars worth the same way, again checking the address on the device screen.

Dana did not feel like a genius. She felt like someone who had locked her own front door. That is a fine feeling. Notice that she never typed her recovery phrase anywhere, and that is the whole trick.

Where it goes wrong

You have probably seen a message that says your wallet has a problem and asks for your twelve words to fix it. That is a scam, every time. No real wallet maker, exchange, or helper will ask for your phrase. The moment someone does, you know who they are.

Fake apps are another trap. Scammers copy the look of a real wallet and put it in an app store or a search ad. Always get the app from the maker's official site, and type the web address yourself instead of clicking a link. Clipboard tricks matter too. Some bad software swaps the address you copied with one of the thief's. That is why Dana checked the address on the device screen.

Loss is the quiet danger. A paper phrase can burn, flood, or get thrown out by a tidy relative. A phrase kept only in a photo can be stolen along with your cloud account. Keep copies in more than one safe spot, and tell one trusted person where to look if something happens to you. Without that, your family may never find what you built.

Last, there is the plain mistake of sending to the wrong network or wrong address. Many coins live on more than one network, and an address that works on one may not work on another. Read the labels. Test first.

Questions to answer before you leave this page

Who holds the keys to the coins you own right now, you or a company? Where is your recovery phrase written, and could a fire, a flood, or a nosy houseguest find it? Do you have a second copy somewhere separate, and does one person you trust know how to find it? Have you ever sent a small test amount before a large one, and will you do so next time? Do you keep a simple record of your addresses, dates, and amounts for tax time? When did you last check the IRS Digital Assets page on irs.gov for anything that affects you? And if a stranger asked for your twelve words tomorrow, what would you say?