Loading article...
From hot wallets to cold storage, this guide breaks down the different types of crypto wallets and helps you choose the right one based on your security.
A crypto wallet does not hold coins the way a leather wallet holds cash. Coins and tokens stay on the blockchain. The wallet holds your private keys and lets you sign transactions, prove ownership, and connect to apps. If you plan to hold crypto, use DeFi, collect NFTs, or join a DAO, you need a wallet that matches how you will actually use the chain.
This guide explains how wallets work, who each type fits, and how to pick a setup you can keep secure over time. It covers custodial vs non-custodial control, hot vs cold connectivity, specific products you can verify today, and a simple two-wallet pattern most people use.
A wallet is an interface that creates and manages private keys. A private key is a random large number that proves you control an address on the blockchain. You sign a transaction with the private key, the network checks the signature with your public key, and the transaction updates balances on chain.
Most modern wallets are hierarchical deterministic (HD) wallets. One master seed generates a tree of keys under standards BIP-32 and BIP-44. That seed is shown to you as a secret recovery phrase, also called a seed phrase, under BIP-39. The phrase is 12, 15, 18, 21, or 24 words taken from a fixed list of 2048 words. 12 words encode 128 bits of entropy plus a 4-bit checksum. 24 words encode 256 bits plus an 8-bit checksum. The checksum lets wallets reject a mistyped or misordered phrase. With the same phrase and the same derivation path (for example m/44'/60'/0'/0/0 for Ethereum), any compatible wallet can restore all your accounts.
Source you can check: BIP-39 standard and wordlists on https://github.com/bitcoin/bips/blob/master/bip-0039.mediawiki and Ledger Academy on HD wallets and seed phrases at https://www.ledger.com/academy/bip-39-the-low-key-guardian-of-your-crypto-freedom and https://www.ledger.com/academy/basic-basics/2-how-to-own-crypto/what-is-a-crypto-wallet
If you only buy once and never interact with apps, needs are different from someone who signs three DeFi transactions a day. Decide first how often you will sign, how much value you will store, and whether you need to connect to dApps.
When you create a wallet, the device or app generates random entropy and turns it into a seed phrase. Hardware signers like Ledger and Trezor do this on the device, offline. Ledger's Secure Element uses a true random number generator on chip. Trezor Safe devices generate entropy on device and show the backup on the device screen. 2. **Key storage.
The wallet stores the private keys in software or in a secure chip. MetaMask, Phantom, Trust Wallet, and other hot wallets keep keys on the same phone or computer that browses the web. Hardware signers keep keys in an isolated Secure Element chip that never exposes the key to the computer. 3. **Address derivation.
The wallet derives addresses for each network from the same seed. One seed can control Bitcoin, Ethereum, Solana, and others, each under its own path. 4. **Signing.
To send funds or approve a token, you create a transaction on the computer or phone, the wallet shows the details for review, and you approve. With a hardware signer the approve step and the signing happen on the device itself. The signed transaction then goes back to the computer to be broadcast. The key itself does not touch the internet. 5. **Recovery.
If the device is lost, you restore by entering the same 12, 20, or 24 words in order into a compatible wallet. Ledger devices use 24 words (BIP-39). Trezor Safe 3, Safe 5, and Safe 7 default to a 20-word single-share backup (SLIP-39) since June 2024, with 12-word and 24-word BIP-39 still available as an option in Trezor Suite. No company can reset it for you if you use non-custodial wallets. If you use a custodial wallet, recovery is through email, password reset, and identity checks with the provider.
Every wallet asks you to choose on two axes. Those choices decide security and convenience.
Custodial wallet.
A company holds the private keys. You log in with an email and password, similar to a bank. Examples are the default wallets on centralized exchanges such as Coinbase, Kraken, or Binance. The provider signs transactions on its servers.
Pros:
Cons:
You hold the keys and the seed phrase. No third party can move funds without your signature. Examples are MetaMask, Phantom, Trust Wallet, Rabby, Ledger, and Trezor.
Pros:
Cons:
For anyone who wants to use Web3 apps directly, a non-custodial wallet is required. Custodial accounts are convenient for buying and selling, but they do not let you sign dApp transactions with your own keys.
Hot wallet (software, always online).
Keys live on an internet-connected device.
Types you will see:
Best for small daily balances, trying new apps, claiming, swapping, and NFT mints. You open the app, connect, sign, and you are done.
Risk: always online means malware, phishing sites, clipboard hijackers, and fake app stores can target the key. Screens on phones and laptops can be tampered with to show one transaction while signing another.Cold wallet (offline key storage).
Keys are generated and kept offline, and signing happens offline.
Types you will see:
Best for the bulk of holdings you do not touch often. You connect with USB or Bluetooth only to sign, and keys never leave the device.
Risk: physical loss, damage, or theft of the device or paper, plus buying counterfeits.
Verified hardware details you can check today:
A shared wallet that needs M of N keys to sign, for example 2 of 3 or 3 of 5. Common for DAOs and team treasuries. Tooling includes Safe (formerly Gnosis Safe) on EVM chains at https://safe.global and https://app.safe.global. Safe is a smart contract wallet, assets live in the contract, and each approval is an on-chain signature until the threshold is met. Setup is chain-specific and on-chain approvals are visible.
The private key is split into shares that never combine in one place. Shares sign together off-chain, which is chain-agnostic and hides governance details off-chain. Used by many custodians and institutions in 2026 for treasury and payment flows. Standard retail wallets do not use MPC by default.
For individuals, hardware signers or well-managed multisig are the practical cold-storage choices today. MPC matters more for teams and companies handling high volume across chains.
| Wallet type | Connectivity | Who holds key | Security level | Cost | Best for |
|---|---|---|---|---|---|
| Custodial exchange wallet | Hot | Company | Medium, depends on provider | Free to create, fees per trade | Beginners buying or trading often |
| Browser extension (MetaMask, Rabby) | Hot | You | Moderate | Free | EVM DeFi, daily dApp use |
| Mobile app (Trust Wallet, Phantom, Rainbow) | Hot | You | Moderate | Free | Everyday sends, mobile DeFi and NFTs on supported chains |
| Desktop app (Exodus) | Hot | You | Moderate | Free | Desktop portfolio with built-in swap |
| Hardware signer (Ledger, Trezor) | Cold | You, offline chip | High | $59 to $399 device | Long-term savings, large balances |
| Paper wallet | Cold | You, paper | High if stored well, poor if damaged | Free | Legacy cold storage, rarely used today |
| Multisig (Safe) | Varies | Shared control | High for teams | Network fees per approval | Team treasury, requires multiple signers |
| MPC | Hot with distributed shares | Distributed | High for institutions | Enterprise pricing | High-frequency treasury, chain-agnostic needs |
| Feature | Custodial | Non-custodial | |||
| --- | --- | --- | |||
| Ownership of keys | Third party | You | |||
| Account recovery | Password reset and support | 12, 20, or 24-word phrase only | |||
| Censorship risk | Provider can freeze or limit | No third party can freeze | |||
| Ease of use | Familiar login | More steps, you verify details | |||
| DApp access | Limited, through provider | Direct to any supported app |
Custodial
Pros: easy onboarding, familiar recovery, less chance to mistype a seed. Cons: third-party risk, possible freezes, KYC linkage, provider as target.Hot non-custodial
Pros: free, fast, broad dApp support, works on phone or browser. Cons: key exposed to internet, phishing risk, you manage every backup.Cold hardware signer
Pros: keys offline, certified secure chip, secure screen, works with hot interfaces via USB, Bluetooth, or NFC. Clear Signing can show human-readable intent on device when the dApp provides ERC-7730 descriptors. Cons: upfront cost, physical device to keep safe, a bit slower per transaction.Paper
Pros: offline and free. Cons: fragile, hard to use, no app connectivity, easy to create insecurely if you generate the key while online.
Note on Clear Signing: Ledger introduced Clear Signing to replace blind signing. It turns raw calldata into readable details on the secure screen using the ERC-7730 standard. In May 2026 governance of ERC-7730 moved to the Ethereum Foundation's One Trillion Dollar Security Initiative, with tooling at https://clearsigning.org and docs at https://developers.ledger.com/docs/clear-signing/overview and https://www.ledger.com/academy/topics/ledgersolutions/what-is-clear-signing. It works best inside Ledger Wallet where Ledger controls parsing. Outside Ledger Wallet it depends on dApps publishing correct ERC-7730 descriptors. Treat it as one layer among others, not a guarantee.
Step 1: How much will sit in the wallet and how often will you sign?- Under a few hundred dollars and testing apps? A hot wallet is enough to learn.
Step 2: Which chains and assets must work on day one?- Ethereum and EVM chains including Base, Polygon, Arbitrum, Optimism, BNB Chain: MetaMask and Rabby cover the most apps.
Step 3: Self-custody and recovery.- Do you want a password reset path? That points to custodial.
Step 4: Device and workflow fit.- Mobile-first: Trust Wallet, Phantom, Rainbow.
Step 5: Verify security properties before you fund.- Does the device use a certified Secure Element and a secure screen that cannot be spoofed by the computer? Check chip: Ledger Nano S Plus, Flex, Stax, Nano Gen5 are EAL6+; Nano X is EAL5+. Trezor Safe 3, 5, 7 are EAL6+.
Work through the checklist and you will see two or three options that clearly fit. Ignore products that do not meet the chain and recovery needs, even if they advertise more features.
Use two wallets with clear roles.
This pattern balances convenience and loss limits. Phishing and exchange outages remain the most common loss vectors in 2025 and 2026. Isolating savings on a signer reduces that exposure.
Do not move everything at once. Create the non-custodial wallet first, back up the phrase, move a small amount, verify arrival at the correct address on the right network, then move the rest. Keep a small exchange balance only if you trade frequently.
Write two copies by hand or stamp on a metal plate rated for fire and water. Keep them in two separate secure places, such as a home safe and a bank safety deposit box. Never store the phrase in a photo, messenger app, password manager that syncs to cloud, or email draft. For metal backups, Trezor Keep Metal is built for 20-word SLIP-39, Cryptosteel and Billfodl cover 24-word BIP-39. First four letters uniquely identify each BIP-39 word, so stamping four letters per word is enough.
No real support team will ask for it. Anyone who does is trying to steal funds.
BIP-39 lets you add a 13th or 25th word of your choice that is not from the wordlist. It creates hidden wallets and adds protection if the paper is found. SLIP-39 also supports passphrases in Trezor Suite. If you use one, store it separately from the words. Lose it and the phrase alone will not restore the wallet.
Trezor's SLIP-39 Multi-share lets you split the seed into up to 16 shares with a threshold (for example 2 of 3). Supported on Trezor Model T and Safe 3, 5, 7. Each share is 20 words (33 for 256-bit). Store shares in different locations. This removes a single point of failure but adds complexity. Single-share vs multi-share comparison at https://trezor.io/learn/advanced/standards-proposals/what-is-shamir-backup
Hot wallet security assumes the phone or laptop is patched and locked.
Prefer authenticator apps or hardware keys over SMS where available. Ledger devices can also act as FIDO2 security keys via Ledger Security Key.
Stop blind signing. On EVM chains, token approvals with "Permit" or "Approve unlimited" let apps spend without a new prompt. Use tools such as https://revoke.cash to review and revoke stale approvals. On Ledger, prefer Clear Signing when available and treat any blind-sign request as high risk.
Try new mints, airdrops, and links with a separate wallet that holds little value. Keep vault addresses disconnected.
Fake update popups and sideloaded extensions are a common trap. Bookmark official update pages: https://support.ledger.com and https://trezor.io/support
Document where the backup is and how a trusted person can find it if needed, without leaving the phrase in plain email or cloud.
Security checklist published by Ledger for 2026 is a practical reference: https://www.ledger.com/academy/topics/security/crypto-wallet-security-checklist-protect-crypto-with-ledger
For most retail users, a hardware signer that stores keys in a certified Secure Element and verifies transactions on its own screen offers the highest practical security, keeping keys offline while still letting you sign. Ledger Nano S Plus, Flex, Stax, and Nano Gen5 are EAL6+, Nano X is EAL5+. Trezor Safe 3, 5, 7 are EAL6+ with open-source firmware. That does not remove risk from signing a malicious transaction, which is why Clear Signing and careful review matter. The device protects the key, you protect the approval.
You need one for direct app use. On an exchange you have a custodial account. It is easy for buying and selling, but you cannot sign DeFi transactions or hold keys yourself. If the exchange restricts withdrawals or has an outage, you wait. Moving long-term holdings to a non-custodial wallet gives you direct control. Keep an exchange account only for liquidity you trade.
With a non-custodial wallet there is no company reset. If the device is lost and the phrase is gone, access is gone. If others find the phrase, they can take the funds. If you use SLIP-39 multi-share, loss of some shares is tolerable up to the threshold, but loss beyond threshold is also permanent. That is why two offline copies in separate places, or distributed Shamir shares, are the baseline.
Yes. The same 12, 20, or 24 words can derive addresses for multiple networks under BIP-32 and BIP-44. For example, a single phrase can derive Bitcoin addresses at m/44'/0'/0'/0/0 and Ethereum at m/44'/60'/0'/0/0. Restore the phrase in a wallet that supports the chain you need. One limitation: BIP-39 phrases translated to a different language wordlist produce a completely different seed, so stay with the English list as recommended in the BIP-39 spec.
Pick based on chain. MetaMask has the widest EVM dApp support and pairs well with hardware signers. It is available as a browser extension for Chrome, Firefox, Brave, and Edge and as a mobile app. Download only at https://metamask.io. Phantom is strongest for Solana and NFTs but now supports Ethereum, Bitcoin, Polygon, Base and others in one app. Download at https://phantom.com. Trust Wallet covers the largest number of blockchains in a single mobile app (100+ chains, about 10 million assets) and charges no extra platform fee beyond network fees. Download at https://trustwallet.com. All three are non-custodial. Many users keep two, for example MetaMask for EVM plus Phantom for Solana, with a shared hardware signer for larger amounts.
Multisig fits small teams that want transparent, on-chain shared control, for example a 2 of 3 DAO treasury on Safe. Safe powers over $100 billion secured and supports Ethereum and other EVM chains, verified at https://safe.global. MPC fits larger operations that need fast signing, chain-agnostic coverage, and hidden approval rules. For individual holders, a single hardware signer is simpler than either. Adding a passphrase to that signer already gives plausible deniability without team coordination.
If the total you hold is close to or above the price of the device, the device usually pays for itself in risk reduction. Ledger Nano S Plus and Trezor Safe 3 start around $59 to $79, the typical entry point in 2026. If you hold for years, even small amounts can grow. Many people start with a hot wallet, then add a signer once the balance they would hate to lose is larger than the device cost. The cost is one-time, no subscription.Can I switch wallets later? Yes. Your funds are on chain, not inside an app. Import the same seed phrase into another compatible wallet to move, or create a fresh seed and send funds on chain to the new addresses. Sending on chain is safer than reusing the same phrase across apps indefinitely. If moving from BIP-39 to SLIP-39 or the reverse, you must create a new wallet and transfer funds, the two formats derive different seeds from the same entropy.
Explore more guides and career playbooks