Wallets & Self Custody

Introduction

The word "wallet" is misleading. A physical wallet holds cash: if you hand it over, the cash is gone. A crypto wallet holds none of your assets at all. Every coin, token, and NFT you own already lives on the blockchain, permanently, in a public ledger that anyone can inspect. What your wallet actually holds is something closer to a keychain: the cryptographic keys that prove those assets are yours and let you authorize moving them.

This distinction matters more than it sounds. If you understand that a wallet is a key manager, not a vault of coins, almost everything else in this lesson (seed phrases, custodial services, hardware devices) becomes a natural consequence of one simple question: who controls the keys?

By the end of this lesson you will know exactly what lives inside a wallet, how to tell a safe setup from a risky one, and how to send and receive assets without making the mistakes that cost beginners the most money.

What's Really Inside a Wallet

Think of your blockchain balance as an entry in a giant public spreadsheet that every node in the network keeps a copy of. Your wallet doesn't hold the money in that spreadsheet: it holds the credentials that let you edit the row that belongs to you. Opening a wallet app is a bit like opening a key management app: three pieces of data make the whole system work.

Notice the balance is the only thing here that actually lives on the blockchain: it is read from the network, not stored locally. Everything above it is what your wallet generates and safeguards. The private key is the only truly secret piece; everything derived from it can be shown, shared, or rebuilt.

Public Key vs Private Key

A useful analogy: your public address is like a mailbox with your name on it, bolted to the street where anyone can see it and drop letters in. Your private key is the only key that opens that mailbox and lets you take what's inside: or send something out signed with your name. You can publish the mailbox address everywhere without any risk; the moment someone else holds the key, the mailbox is no longer yours.

Every legitimate wallet, exchange, or support agent will only ever ask for your public address. The single most reliable way to spot a scam is a request for your private key or seed phrase: genuine services never need it.

Seed Phrase

Modern wallets don't generate one private key: they can generate thousands, one for every asset and account inside the wallet. Memorizing all of them would be impossible, so wallets condense the master secret that produces every single key into one human-readable backup: a sequence of 12 or 24 common words, in a specific order, called a seed phrase (or recovery phrase).

Anyone who has your seed phrase can regenerate every private key your wallet ever created, on any device, anywhere in the world: with no PIN and no permission needed. It is not "a backup among others"; it is the single master key to everything. Treat the words below the way you'd treat the title deed to a house.

This demo is a harmless example: but notice how it feels to have it blurred by default. That's the correct default for a real seed phrase, always: hidden, offline, and never photographed, typed into a website, or stored in a notes app, email, or cloud drive.

• Write it on paper (or metal). A physical, offline copy can't be phished, hacked, or leaked through a data breach.
• Never enter it into a website. No legitimate wallet or exchange will ever ask you to type your seed phrase into a browser form.
• Store copies in separate secure locations. This protects against fire, theft, or loss of a single copy.
• If it's ever exposed, move your funds immediately. Create a brand-new wallet and transfer everything: an exposed seed phrase cannot be "reset."

Custodial vs Non-Custodial

The single most important question about any wallet is: who actually holds the private keys? The answer splits every wallet in existence into one of two categories.

Hot Wallet vs Cold Wallet

This is a separate axis from custodial vs non-custodial: it's about whether your private keys ever touch a device connected to the internet.

A practical rule many experienced users follow: keep a small "spending" amount in a hot wallet, the way you'd carry cash in a pocket, and keep the bulk of your holdings in cold storage, the way you'd use a safe.

Hardware Wallets

A hardware wallet is a small dedicated device, resembling a USB drive, built for a single purpose: generating and storing private keys in a chip that never exposes them, even to the computer it's plugged into. When you approve a transaction, the unsigned data is sent to the device, signed internally, and only the signature is sent back. The private key itself never leaves the chip, not even during use.

This is what makes hardware wallets the standard recommendation for holding meaningful amounts long-term: even a computer that is fully infected with malware cannot extract the key, because the key is never present in the computer's memory in the first place.

Sending & Receiving Assets

Every outgoing transaction follows the same four-step path, whether you're using a hot wallet on your phone or a hardware wallet on your desk.

• User: you decide to send an amount to a specific address and initiate the request in your wallet app.
• Wallet: the app builds the transaction: sender, recipient, amount, and network fee.
• Signature: your private key signs the transaction, mathematically proving it came from you, without ever being revealed.
• Blockchain: the signed transaction is broadcast, validated by nodes, and permanently recorded in a block.

Receiving works in reverse and requires nothing from you but sharing your public address, often as a scannable QR code, for the sender's wallet to fill in automatically, removing any chance of a typing mistake.

Security Best Practices

Most losses in this space come from a handful of preventable habits, not from exotic hacks. These practices remove almost all of the realistic risk.

• Verify the full recipient address. Check the first and last several characters at minimum: malware is known to swap addresses in your clipboard.
• Send a small test amount first. For any large or first-time transfer, send a tiny amount, confirm it arrived, then send the rest.
• Use a hardware wallet for significant holdings. Keep only spending money in hot wallets connected to the internet.
• Bookmark official sites; never search for them. Search ads and lookalike domains are a leading source of phishing.
• Enable all available authentication layers on custodial accounts: a strong password plus two-factor authentication, never SMS alone if an authenticator app is available.

Common Mistakes

Nearly every avoidable loss traces back to one of these five mistakes.

• Typing a seed phrase into a website. No legitimate service ever needs it: this is always a phishing attempt, no matter how official the page looks.
• Sending to the wrong network. The same address can exist on multiple chains; sending an asset on the wrong network can make it unrecoverable.
• Storing a seed phrase digitally. Photos, notes apps, and cloud backups are all searchable by malware and cloud account breaches.
• Skipping the test transaction. A single mistyped character in an address, sent at full amount, is one of the most common and painful losses.
• Trusting unsolicited "support". Real support never DMs you first, never asks for your seed phrase, and never asks you to share your screen during a "fix."

Glossary

Wallet

Software or hardware that generates, stores, and uses cryptographic keys to interact with a blockchain: it does not store the assets themselves.

Public Key / Address

A shareable identifier derived from a private key, used to receive assets and verify signatures.

Private Key

A secret number that proves ownership of an address and is used to sign outgoing transactions.

Seed Phrase

A 12–24 word backup that can regenerate every private key a wallet has ever created.

Custodial Wallet

A wallet where a third party holds the private keys on the user's behalf, such as an exchange account.

Non-Custodial Wallet

A wallet where the user alone holds and controls the private keys.

Hot Wallet

A wallet whose keys are generated or stored on a device connected to the internet.

Cold Wallet

A wallet whose keys are generated and stored fully offline, such as a hardware wallet.

Hardware Wallet

A dedicated physical device that signs transactions internally without ever exposing the private key.

Derivation Path

The standardized formula a wallet uses to generate many key pairs from a single seed phrase.

Quiz

Check your understanding of this lesson before moving on. Incorrect answers point you straight back to the relevant section.