A crypto wallet is a piece of software, a hardware device or a service that manages the cryptographic keys controlling funds on a blockchain. It generates and stores a private key, derives the matching public key and addresses from it, shows the balance recorded for those addresses, and signs transactions so the network accepts them. Individuals, exchanges, businesses and smart-contract applications all rely on wallets to hold and move digital assets.
The name is slightly misleading. A crypto wallet does not contain coins the way a leather wallet contains banknotes: balances live on the shared ledger of a blockchain, and the wallet holds only the authority to spend them. The broad split is between wallets where a provider keeps the keys and wallets where the user does, a distinction covered in Custodial vs. Non-Custodial Wallets.
Crypto wallet in plain terms
Think of a row of glass deposit boxes in a public square. Anyone can walk past and see what is inside each box, and each box has a number painted on it so people can drop things in. Only someone holding the right key can open a box and take something out.
A crypto wallet is the key ring, not the box. The boxes are the blockchain, the painted numbers are addresses, and the key is the private key. Lose the key ring and the contents stay visible forever but cannot be moved. Hand a copy of the key to a stranger and they can empty the box without asking. Most of what matters about wallets comes down to where that key is kept and who else can reach it.
How a crypto wallet works
When a wallet is created it produces a large random number, the private key. Mathematical one-way functions turn this into a public key and then into one or more wallet addresses, which the owner can share to receive funds. To send funds, the wallet builds a transaction and attaches a digital signature made with the private key; network nodes check the signature against the public key without ever seeing the private key itself.
Most modern wallets are hierarchical deterministic (HD) wallets, following standards set out in Bitcoin's Bitcoin Improvement Proposal (BIP) process: BIP-32 describes how many keys can be derived from one master secret, and BIP-39 describes how that secret is written as a list of words, the seed phrase (also called a mnemonic phrase). Backing up those 12 or 24 words backs up every address the wallet will ever create.
How a wallet tracks balances depends on the chain. On Bitcoin, the wallet scans for unspent transaction outputs (UTXOs) it can spend and adds them up. On Ethereum, each address is an externally owned account (EOA) whose balance is stored directly in the chain's state.
Custodial and non-custodial wallets
The first question to ask of any wallet is who holds the private key.
- Custodial wallets. A custodial wallet is run by a provider such as a centralized exchange (CEX), which holds the keys and records each customer's balance in its own books. Users get password resets and customer support but depend on the provider staying solvent and honest.
- Non-custodial wallets. A non-custodial wallet keeps the keys with the user, who alone can sign. Regulators often call these unhosted wallets, and transfers to them raise questions under the Travel Rule.
- Shared-control wallets. A multi-sig wallet requires several keys to approve a payment, and a multi-party computation (MPC) wallet splits one key into shares held by different parties. Both are common in institutional crypto custody.
The slogan "Not your keys, not your coins" sums up the argument for self-custody, which gained force after exchange failures left customers unable to withdraw.
Forms a wallet can take
Wallets are also grouped by where the key lives and whether it touches the internet. A hot wallet keeps keys on an internet-connected device or server, which makes it convenient for frequent payments and exposes it to hacking. A cold wallet keeps keys offline, on a dedicated hardware device or even paper. Software wallets run as mobile apps, desktop programs or browser extensions; hardware wallets are small devices that sign transactions internally so the key never reaches the computer. The trade-offs between these four forms are set out in Hot, Cold, Hardware and Software Wallets.
A further category is the Web3 wallet, built to connect to decentralized applications rather than only send and receive coins. Newer designs replace the single private key with smart-contract logic, as in ERC-4337 account abstraction, allowing features such as spending limits and social recovery. Crypto wallets differ from a general digital wallet such as a card-based mobile payment app, which stores payment credentials rather than blockchain keys.
Security and recovery
Because blockchain transactions cannot normally be reversed, wallet security is mostly about protecting the key and its backup. Common risks include malware that copies seed phrases, fake wallet apps, phishing pages that ask users to "verify" their recovery words, and approval prompts that grant a malicious contract the right to move tokens. Physical loss matters too: a seed phrase stored in one place can be destroyed or found.
Practical safeguards include writing the seed phrase offline and storing copies in separate places, keeping most funds in cold storage, checking the receiving address on a hardware device's screen before signing, and using multi-signature or MPC setups for larger holdings. Custodial users rely instead on the provider's controls, account multi-factor authentication and, where it applies, regulatory oversight of the custodian.