What is a crypto wallet, really?

#A wallet holds keys, not coins

The single most important idea, and the one most newcomers have backwards: a wallet does not store your cryptocurrency. Your balance is an entry in the chain's shared ledger, the same ledger every node keeps. What the wallet stores is the private key, the secret that can produce a valid signature for your account. Since a transaction is only accepted if it carries your signature, holding the key is holding the power to spend. Move to a new wallet app and import the same key and your funds are "there" too, because they were never in the app to begin with.

This reframes security completely. There is nothing to steal inside the wallet software except the key, and anyone who obtains the key controls the funds instantly and irreversibly. "Not your keys, not your coins" is the whole subject in five words.

#The seed phrase

Managing raw keys by hand would be miserable, so wallets use a seed phrase: a list of ordinary words, usually twelve or twenty-four, that encodes one master secret. From that single seed the wallet can deterministically derive a whole tree of private keys, and therefore many addresses, all recoverable from the same words. This is why setting up a wallet begins with writing those words down.

ripple  cactus  observe  lens  fatigue  spoon
mirror  velvet  ordinary  hedge  summer  quantum

// This is the master secret. Anyone who reads it owns every
// account derived from it. It is written on paper, never typed
// into a website, and never photographed into the cloud.

The seed phrase is the wallet. Lose it and no support line can recover your funds, because there is no company in the loop. Leak it and the theft is total and immediate. Treat those words the way you would treat the deed to everything you own on-chain.

#What a wallet actually does

With the key in hand, the wallet does three jobs. It derives your address from the key so you can receive funds. It presents transactions for you to approve, ideally in a form you can read. And it signs the ones you approve, attaching the signature the network requires. That middle job, showing you what you are agreeing to, is where a wallet earns its keep and where attacks concentrate: a wallet that shows only an opaque hash invites you to approve things you cannot see, which is the whole basis of signature phishing.

#Custodial or not, hot or cold

Two choices define a wallet's risk profile. The first is custody. A custodial wallet, such as an account on an exchange, means a company holds the keys for you; you get password resets and support, but you are trusting them and their solvency. A non-custodial wallet means only you hold the keys: total control, and total responsibility, with no undo button.

The second is where the key lives. A hot wallet runs on an internet-connected device, which is convenient and constantly exposed to malicious sites. A cold wallet keeps the key on a device that never goes online, such as a hardware wallet, and signs transactions in isolation so a compromised computer cannot reach the key. A common and sensible pattern is a small hot wallet for daily use and a cold wallet for long-term holdings that rarely signs anything.