What is a crypto wallet?

A crypto wallet is a tool that lets you control digital assets on a blockchain. It doesn’t store crypto the way a bank stores money; instead, it holds the cryptographic keys that prove you’re allowed to move those assets, while the assets themselves remain on the blockchain.

A typical wallet is built around two main elements. The first is a public address, which works like an account number. You share it to receive funds. The second is a private key, which authorizes transactions. Whoever controls the private key controls the assets.

When you send crypto, your wallet creates a transaction and signs it with your private key. The blockchain network verifies the signature, confirms you’re authorized, and records the transfer. 

The design gives users direct ownership. With a self-custody wallet, no third party can freeze funds, block transactions, or restrict access. Wallets also reduce points of failure by removing reliance on centralized systems that can be hacked, mismanaged, or shut down. Beyond storage and transfers, wallets serve as identity and access tools that allow users to connect to decentralized apps, sign smart contracts, and interact with onchain systems without creating accounts everywhere.

How do you create a crypto wallet?

The decisions you make during setup affect how safe and usable your wallet will be long-term. Who controls the keys, how recovery works, and what security layers you add are all determined here: 

• Choose your wallet type: Decide whether you need a custodial or non-custodial wallet, a software wallet or a hardware device, or an embedded wallet within an app. This choice determines who controls the keys, how recovery works, and how much responsibility you take on.

• Get the wallet from an official source: Download wallet software from verified websites or app stores, or partner with a provider such as Privy to build your own wallets. If you're using a hardware wallet, purchase it directly from the manufacturer or an authorized reseller. The second-hand hardware wallet market carries real supply chain risks.

• Create a new wallet: Select the option to create a new wallet rather than importing an existing one. The wallet generates a key pair and assigns you one or more public addresses derived from your public key.

• Set local access protection: Create a strong password, PIN, or biometric lock. This controls device-level access but is separate from your recovery phrase.

• Back up the recovery phrase: Your wallet will display a 12- or 24-word recovery phrase. This is the master credential. It can restore full access to your assets on any compatible wallet. Write it down and store it offline. Screenshots, cloud storage, and messaging apps are all attack surfaces.

• Confirm the backup: Most wallets require you to re-enter specific words from the recovery phrase before proceeding. Treat this as a real verification step, not a formality.

• Review your address and finish setup: Once complete, your public address is visible and ready to receive funds. Verify the address format matches the network you intend to use.

• Enable assets or networks if needed: Some wallets require you to manually add blockchains or token standards before they're usable. Configure this before sending funds — assets sent to an unsupported network can be difficult or impossible to recover.

• Secure the setup before funding: Enable any additional security features the wallet offers, and send a small test transaction before moving significant value.

How do different types of crypto wallets handle security and control?

Wallet architecture determines your legal relationship with your assets, your exposure to counterparty risk, and what recourse you have if something goes wrong. Here’s how: 

• Custodial wallets: A third party holds and manages your private keys. Setup and recovery are straightforward, but you're exposed to the provider's security practices, financial health, and regulatory standing. From a legal standpoint, custodial arrangements typically mean the provider holds assets on your behalf, which introduces counterparty risk similar to a bank deposit, without equivalent protections. If the provider is hacked, becomes insolvent, or is subject to regulatory action, access to your assets can be frozen or lost entirely. Operationally, custodial wallets are often subject to KYC/AML requirements, withdrawal limits, and transaction monitoring.

• Non-custodial wallets: You control the private keys directly, with no intermediary involved. This gives you full ownership and independence. No third party can freeze funds or restrict access. The legal picture is cleaner in one sense: the assets are unambiguously yours. But the operational responsibility is entirely yours as well. There's no account recovery, no support line, and no recourse if the recovery phrase is lost or compromised.

• Hot wallets: Keys are stored in software on an internet-connected device. They're well-suited for frequent transactions but carry higher exposure to malware, phishing, and remote attacks. The convenience-to-risk trade-off makes them a poor fit for large or long-term holdings.

• Cold wallets: Private keys are stored offline, typically on dedicated hardware. This dramatically reduces the remote attack surface and makes them better suited for significant holdings or long-term storage. The trade-off is added friction — every transaction requires physical interaction with the device.

• Embedded wallets: Built directly into applications such as games or DeFi platforms, these wallets abstract away key management to reduce onboarding friction. The security and custody model varies by implementation — some are fully custodial, others use approaches such as trusted execution environments (TEEs) to distribute key control. Understanding who actually holds signing authority in an embedded wallet is worth verifying before committing assets.