Crypto wallets explained: custodial vs self-custody

What does a crypto wallet actually hold?

The name is misleading. Your bitcoin or ether never sits inside the wallet app; it is recorded on the blockchain. The SEC's investor site explains that crypto wallets store private keys, not the assets themselves. A private key is a secret number that lets you sign transactions. Whoever holds it can move the funds.

ethereum.org makes the same point from the other side: wallet providers do not have custody of your funds; they give you a window onto your account and a way to sign. Lose the wallet app and you can restore access elsewhere, as long as you still have the keys or the recovery phrase.

NIST's blockchain overview spells out the stakes. Wallets store private keys, public keys and addresses. If a private key is lost, the assets it controls are effectively lost too. If it is stolen, the thief can sign transfers that cannot be undone. Learn more in our entry on the private key.

What is the difference between custodial and self-custody wallets?

Every wallet answers one question: who holds the private keys? The SEC's December 2025 investor bulletin on custody lays out the trade-off.

Neither is automatically safer. The SEC bulletin notes that with self-custody you may permanently lose access if your wallet is lost or hacked, and that with a third-party custodian you may lose access if it fails. Choose the risk you are better equipped to manage.

What are hot and cold wallets?

The second question is whether the keys touch the internet.

• Hot wallets are connected to the internet: phone apps, browser extensions, desktop apps and exchange accounts. The SEC notes they are convenient but exposed to cyberthreats.
• Cold wallets keep keys offline, typically on a physical device, but the SEC's examples even include a piece of paper. They are much harder to attack remotely but can be lost, damaged or stolen.

Hardware wallets are the most common cold option. ethereum.org lists hardware, mobile, browser, browser extension and desktop wallets as the main types. We compare them in detail in hardware vs software wallets, and the offline approach in cold storage.

How does a recovery phrase protect a wallet?

Most self-custody wallets show you a recovery phrase, also called a seed phrase, when you set them up. A widely used standard, BIP-39, turns the wallet's random seed into a list of ordinary words. It allows 12, 15, 18, 21 or 24 words, drawn from a fixed list of 2,048. Type the same words into a compatible wallet and it rebuilds the same keys.

So the phrase is both your backup and your biggest weak point. Our full guide to seed phrases covers storage in depth.

1. Write it down by hand when the wallet shows it. ethereum.org advises not storing it on a computer.

2. Check every word against the screen, in order and correctly spelled, before you send any funds to the wallet.

3. Store it offline, somewhere safe from fire, water and curious visitors.

4. Never share it. No real support team, exchange or regulator will ever ask for it.

What mistakes do beginners make with crypto wallets?

• Leaving everything on an exchange without thinking about it. That is a custodial choice with custodial risks, and the FTC notes crypto accounts are not FDIC-insured.
• Screenshotting the recovery phrase. Photos sync to the cloud and can be stolen. Treat the phrase like cash, not like a password.
• Sending on the wrong network. The same token can live on several blockchains; the receiving wallet must support the network you send on.
• Skipping a test transaction. Send a small amount first, confirm it arrives, then send the rest.
• Ignoring phishing. The SEC lists phishing as a key threat. Bookmark the real site and turn on two-factor authentication for custodial accounts.

Which type of wallet should a beginner start with?

There is no universal answer, and we do not recommend specific products. A practical way to decide is to match the wallet to the job:

• Small amounts you trade often: convenience matters, so a reputable custodial account or a hot wallet may fit, with the risks above in mind.
• Larger amounts you plan to hold: the SEC's bulletin and ethereum.org both describe offline storage as better protected from online attacks, provided you can manage the backups carefully.
• Any amount: check that a custodial platform is registered with the relevant regulator, as shown in how to check if a platform is registered.

Many people use both: a custodial account for buying and selling, and a self-custody wallet for long-term holdings.