Crypto Gloss

Wallet

A cryptocurrency wallet is software, hardware, or a service that helps a person or organization view and use blockchain accounts. Depending on its design, it may manage signing keys, connect to a separate signer, or provide an interface to a smart-contract account. The word “wallet” describes several different tools, so it helps to ask who controls the credentials and how transactions are authorized.

What a Wallet Does

A wallet can display addresses and balances, prepare transactions, and help authorize them. With a conventional externally owned account (EOA), the wallet uses a private key to sign a transaction before it is broadcast to the network. A wallet may also connect to a hardware device that signs without exposing its key to the connected computer.

On a public blockchain, balances and token ownership are recorded by the network or by smart contracts; they are not files stored inside a wallet app. A custodial service may also show balances from its own internal records, so an exchange account is not always the same thing as a self-custodied on-chain wallet.

Wallets Have Several Different Types

Wallet labels describe different aspects of a setup. They are not always mutually exclusive categories.

Hot and Cold

A hot wallet uses a device or signing process connected to the internet. That can make regular transactions convenient, while increasing exposure to compromised devices, malicious software, phishing, or deceptive transaction requests. Cold storage keeps signing keys offline or separates signing from the networked device. A hardware wallet can support that setup, but the device alone does not remove every risk.

Custodial and Self-Custodial

With a custodial service, another organization controls the signing credentials and grants access through its own account system. The service can apply its rules, pause withdrawals, or become unavailable. With a self-custodial wallet, the user controls the credentials or signing process and takes responsibility for keeping access and recovery methods safe. This shifts control and responsibility; it does not make one arrangement risk-free.

Software, Hardware, and Smart-Contract Wallets

Software wallets run on phones, computers, or in browsers. Hardware wallets use a dedicated device to protect or use signing keys. These describe how a wallet is implemented. On networks such as Ethereum, a smart-contract account can instead enforce rules in code, such as requiring multiple approvals. A wallet app can provide an interface to that account even though the contract account itself does not have a private key in the way an EOA does.

Accounts, Keys, and Recovery

For an EOA, a private key is secret data used to create transaction signatures. A public address can be shared to receive assets, but it does not let someone derive the private key. A smart-contract account may use code and one or more authorized signers, so the simple “one account equals one private key” description does not fit every wallet.

Some wallets use a recovery phrase to create or restore a deterministic set of keys. BIP-39 is one standard for turning computer-generated entropy into a mnemonic and then into a seed; the seed can be used with BIP-32 or similar methods to generate keys. Not every wallet uses BIP-39, and a phrase only restores the expected accounts when the wallet’s standards, network, derivation path, and any extra passphrase are compatible.

Losing a phone or hardware device does not necessarily mean losing access if a tested recovery method exists. Losing the recovery credentials, or exposing them to another person, can have the opposite result. Never enter a recovery phrase or private key into a website, message, or support chat to “verify” a wallet.

Security and Common Misconceptions

  • A hardware wallet can reduce some risks by keeping keys away from a general-purpose device, but it cannot make a malicious transaction safe. Read the transaction details shown by the signer and verify the destination before approving.
  • A wallet address is public, but a recovery phrase or private key is not. Treat anyone requesting those secrets as a serious warning sign.
  • “Offline” describes the key’s exposure during storage or signing; it does not guarantee safe backups, trustworthy software, or correct transaction details.
  • Using a self-custodial wallet avoids relying on a custodian to authorize transactions, while making recovery and device security the user’s responsibility. A custodial account has different operational and counterparty risks.

There is no single wallet type that fits every user or use case. The useful questions are which networks and account models it supports, who controls signing, how backups work, what transaction information is displayed, and what happens if a device or service is lost.

Social Media Sentiment

An August 24, 2026 discussion in r/ethereum shows one narrow snapshot of wallet-security concerns: participants debated reports of a possible issue with a hardware wallet’s transaction-preview assurances, asked for clearer evidence and communication, and discussed update guidance. The thread records reactions to claims; it does not independently establish the issue’s scope or represent wallet users generally.

Last updated: 2026-10

Related Terms

See Also

Sources