What Is a Crypto Wallet? Keys, Seed Phrases and Cold Storage

A crypto wallet does not hold your coins. This is the single most useful thing to understand about wallets, and almost every mistake beginners make follows from not knowing it.

Coins exist as entries on a blockchain — a public ledger that says a particular address controls a particular balance. A wallet holds the private key that proves you control that address and lets you sign transactions moving the balance. Destroy the wallet and the entries remain. Lose the key and the entries stay where they are forever, visible to everyone and spendable by no one.

Once you see a wallet as a key manager rather than a container, the rest of the subject becomes straightforward.

The seed phrase is the wallet

Modern wallets do not ask you to back up individual keys. They generate a seed phrase — a sequence of ordinary words that encodes everything needed to regenerate every key the wallet will ever use.

This is standardised, which is why the phrase from one wallet usually works in another. The standard is BIP-39, titled "Mnemonic code for generating deterministic keys", and its mechanics are worth knowing in outline:

• Phrases are 12, 15, 18, 21 or 24 words long, drawn from a fixed list of 2,048 words. Each word encodes 11 bits.
• The length reflects the underlying randomness: 128 bits of entropy produces 12 words, 256 bits produces 24.
• A checksum is built in — the first bits of a SHA-256 hash of the entropy are appended — which is why a phrase with a mistyped word is usually rejected rather than silently opening an empty wallet.
• The words are converted into a 512-bit seed using PBKDF2 with HMAC-SHA512 over 2,048 iterations.

That last step has a detail worth knowing: the salt is the string "mnemonic" plus an optional passphrase you choose. Add a passphrase and you get an entirely different set of wallets from the same words. This is the basis of the "25th word" feature — powerful, and irreversible if you forget it.

The practical consequence: the phrase is the asset. Anyone who reads it controls the funds, from anywhere, without needing your device. Any backup that touches a camera, a cloud drive or a messaging app should be treated as compromised.

Custodial versus self-custody

Custodial means someone else holds the keys. Most exchanges work this way. You have an account balance, which is a claim against the company, and you rely on it staying solvent, staying honest and staying online. In exchange you get password resets, customer support and no responsibility for backups.

Self-custody means the keys are yours. Trust Wallet, MetaMask and Phantom all describe themselves this way — Phantom's own wording is that "you control your funds. We never have access." There is no reset, no support line that can help, and no counterparty that can fail.

Neither is universally correct. Custody suits money you are actively trading; self-custody suits money you intend to keep. The relevant question is not which is safer in the abstract but which failure mode you are better placed to prevent.

Hot and cold

Hot wallets run on internet-connected devices — a phone app, a browser extension. Convenient, and exposed to whatever else is on that device.

Cold wallets keep the key on hardware that never connects directly to the internet. The transaction is prepared on a computer, sent to the device, signed inside it and returned. The key itself never leaves.

Hardware wallets protect that key with a secure element — a dedicated chip designed to resist physical extraction. Trezor's Safe range uses an OPTIGA Trust M secure element, with the Safe 7 pairing it with an auditable TROPIC01 chip; encrypted keys sit on the main processor and cannot be decrypted without secrets held in the secure element, and after 16 incorrect PIN attempts the device wipes itself. Ledger's devices carry Common Criteria certifications — EAL6+ on the Stax, Flex, Nano Gen5 and Nano S Plus, EAL5+ on the Nano X.

The security model has a limit worth stating plainly: the device protects the key, not your judgement. If you approve a malicious transaction on the device screen, the hardware signs it faithfully. This is why every hardware wallet insists you verify details on its own display rather than on the computer.

Where losses actually come from

Cryptography is not the weak point. Chainalysis data for 2025 shows where the damage happens:

• Over $3.4bn was stolen in total during 2025, with the February 2025 Bybit breach alone accounting for $1.5bn.
• Personal wallet compromises reached about 158,000 incidents, up from 54,000 in 2022, affecting at least 80,000 unique victims and totalling $713m — down from $1.5bn in 2024. More victims, smaller average loss.
• Concentration is extreme at the service level: the top three hacks accounted for 69% of all service losses.

The direction of travel is clear. Attacks on individuals are becoming more numerous and less lucrative each — which is consistent with automated phishing and drainer campaigns rather than targeted operations.

Supply-chain attacks are the pattern to understand. In December 2023, an attacker phished a former Ledger employee's npm account and published malicious versions of the Ledger Connect Kit, injecting a drainer into applications that used it. The window was under two hours. Ledger stated that device private keys were never compromised — the attack targeted the software layer that applications relied on, not the hardware.

The lesson generalises: your keys can be safe while the interface you use to reach them is not.

What is changing

Smart contract wallets are moving from experiment to practice. The ERC-4337 standard, titled "Account Abstraction Using Alt Mempool", is finalised and works without changes to Ethereum's consensus layer. It introduces a separate flow — user operations, a singleton entry point contract, and bundlers that package operations into ordinary transactions.

What this enables matters for ordinary users: paying fees in a token rather than the native coin, social recovery instead of a single fatal phrase, spending limits, and alternative signature schemes. Trust Wallet ships such a wallet under the name SWIFT.

This does not make seed phrases obsolete, but it does make the all-or-nothing model optional for the first time.

Choosing sensibly

Start with the question of what you are protecting against. If the risk is your own device being compromised, hardware helps. If the risk is losing a backup in a house move, hardware alone does not.

Three principles hold regardless of product:

Test recovery before it matters. Restore the phrase into a second wallet with a trivial balance and confirm the addresses match. A backup you have never tested is a hypothesis.

Keep the phrase off anything that syncs. Paper or metal, stored physically. Metal backup plates exist because paper does not survive water or fire.

Separate the amounts. A hot wallet for what you use and a cold wallet for what you keep is a better structure than one wallet trying to serve both.

For a deeper treatment of backups, see seed phrase best practices, and for the attack patterns to recognise, protecting your wallet from scams.

Sources

• BIP-39 specification, Bitcoin BIPs repository — word counts, entropy, checksum, PBKDF2 derivation
• Crypto hacking and stolen funds 2026 report, Chainalysis — 2025 theft totals and personal wallet compromise data
• Secure elements in Trezor Safe devices, Trezor — secure element model, PIN wipe threshold
• Hardware wallet comparison, Ledger — Common Criteria certification levels
• Security incident report, Ledger — December 2023 Connect Kit supply-chain attack
• ERC-4337: Account Abstraction, Ethereum Improvement Proposals — standard status and architecture