Securing Digital Assets: Wallets, Keys and Custody

Crypto Wallets

One of the very first things you’re going to start any crypto journey with is a crypto wallet. So it makes sense to start here.

Now, the word "wallet" can be a little misleading, because you’ll probably picture something that holds money. But a crypto wallet doesn’t actually store your cryptocurrency the way a physical wallet stores money. In other words, your crypto doesn't literally sit inside the wallet, because it never leaves the blockchain.

So what does a wallet actually do then? Simply put, it stores the information that allows you to access and manage your crypto on the blockchain.

Remember that cryptocurrencies don’t actually physically exist anywhere. They live on the blockchain, which is a distributed digital ledger that records all transactions. Your crypto wallet simply acts as the tool that lets you interact with that ledger.

What the wallet really stores are cryptographic keys, specifically your private key and the public address associated with it. These keys allow you to send, receive, and manage your digital assets. Without those keys, you can't do anything with them, even if they’re technically yours.

Cryptographic Key

At a basic level, a cryptographic key is a piece of coded information used to secure and verify transactions on the blockchain. It is essentially a long, unique string of letters and numbers that proves that a certain amount of cryptocurrency belongs to you and that you have the authority to move it.

In the crypto world, there are two main types of keys you’ll hear about: public keys and private keys.

Public Key

The public key is like your bank account number. It's the address people use to send crypto to you, and you can share it freely without any risk. It's visible on the blockchain, and that's perfectly fine, because knowing your public key doesn't give anyone the ability to touch your funds. It just tells them where to send things.

Private Key

The private key is a unique, unguessable string of characters that proves you are the rightful owner of the crypto tied to your wallet. Every time you authorise a transaction, say, sending crypto to someone else, your private key is what signs off on it. It's the proof of ownership.

Your private key should always be kept secret and secure, because anyone who gains access to it can effectively take control of your wallet and transfer your assets. It’s more like whoever holds the private key owns the crypto.

Now, because your private key is such a long, complex string of characters, it's not exactly something you can memorise or jot down easily. That's where the seed phrase comes in.

Seed Phrase

A seed phrase, which is sometimes called a recovery phrase, is a set of usually 12 or 24 randomly generated words. Instead of having to store complex strings of numbers and letters, your wallet gives you this list of words when it’s first created.

If you ever lose access to your device or need to restore your wallet on another one, entering that seed phrase will regenerate the same private keys and give you access to your funds again. This means that anyone who has access to your seed phrase can recreate your wallet and gain full control over your assets. In other words, a seed phrase is essentially another form of your private key.

That’s why protecting it is absolutely important. It should never be shared with anyone, stored online, or saved in places where others can easily find it.

Categories of Crypto Wallets

Now that you understand what crypto wallets are and what cryptographic keys are, it’s important to understand that there are different types of wallets. In practice, they are categorised based on how they store your keys and who controls them.

Below are the major categories:

Hot and Cold Wallets

When we talk about hot and cold wallets, we are classifying crypto wallets based on whether they are online or offline.

Hot Wallets

A hot wallet is any wallet that is connected to the internet. This includes mobile apps like Trust Wallet, browser extensions like MetaMask, and the wallets you get when you sign up on a crypto exchange. Hot wallets are convenient; they're easy to set up and use, and great for people who are actively trading or making frequent transactions.

However, since hot wallets are connected to the internet, they are exposed to the same threats as anything internet-connected. These include security risks such as hacking, phishing attacks, and malware.

For that reason, many people prefer to keep only smaller amounts of crypto in hot wallets, similar to how you might carry a small amount of cash in your physical wallet.

Cold Wallets

A cold wallet is kept completely offline. It has no internet connection, which means it is largely out of reach of the online threats that hot wallets are exposed to. Examples of cold storage include hardware wallets, paper wallets, and other offline storage methods that keep private keys isolated from internet-connected devices.

The downside of cold wallets is that they are not as quick or convenient to use. Accessing them usually requires additional steps, which can make everyday transactions slightly less practical. This is why they are the preferred choice for people holding large amounts of crypto long-term and not needing to access it frequently.

Custodial and Non-Custodial Wallets

This classification is based on who controls your private keys, or more specifically, who holds the keys.

Custodial Wallets

With a custodial wallet, a third party holds and manages your private keys on your behalf. Most cryptocurrency exchanges, including Binance, Coinbase, Kraken, and Bybit, operate this way. When you create an account and store your crypto with them, you typically don’t control the private keys yourself. Instead, their platform manages them for you.

This setup can be convenient, especially for beginners. If you forget your password, the platform may allow you to recover access to your account. But there is an important trade-off here: you don’t have full control over your assets.

If the exchange gets hacked, freezes withdrawals, or shuts down entirely, your funds could become inaccessible. The collapse of major platforms like FTX is an example of this risk. Many users who stored their assets on the exchange suddenly found themselves unable to access their funds.

Non-Custodial Wallets

A non-custodial wallet, by contrast, is one where you hold your own private keys. This means you have full ownership and control over your digital assets, without relying on any third party to safeguard them.

However, with that control comes responsibility. If you lose your private keys or seed phrase, there is usually no way to recover your funds.

Examples of non-custodial wallets include MetaMask, Trust Wallet, Phantom, Exodus, and Electrum.

Software and Hardware Wallets

This classification is based on the form the wallet takes, whether it exists as a physical device or purely as a program on your device.

Software Wallets

A software wallet is a program or application that runs on an internet-connected device, your phone, your computer, or your browser. Everything exists digitally, with no physical component.

Software wallets come in three main forms:

• Mobile wallets, which are apps you install on your smartphone, like Trust Wallet and Exodus.
• Desktop wallets, which are applications installed directly on your computer, like Electrum.
• Web or browser wallets, like MetaMask, which run as browser extensions and allow you to interact with blockchain applications directly from your browser.

Hardware Wallets

Among the various wallet options available, hardware wallets are widely considered the gold standard for securing cryptocurrency. They are usually a small physical device that looks similar to a USB drive, and they store your private keys completely offline. Popular options include Ledger and Trezor.

Because your keys are generated and stored on the device itself and never exposed to the internet, hardware wallets are largely immune to the kind of online threats that software wallets face. Even when you connect them to your computer to make a transaction, the private keys never leave the device. The transaction is signed internally, and only the result is sent to the blockchain.

Now, hardware wallets are not free. They usually cost anywhere between $50 and $150, and they require a bit more setup than simply downloading an app. But for anyone holding a significant amount of crypto for the long term, that is a small price to pay for the level of security they provide.

Now, here's something worth pointing out. These three wallet categories are not entirely separate boxes.

For example, most software wallets are also hot wallets, since they run on internet-connected devices. And most exchange-based wallets, like those on Binance or Coinbase, are both custodial and hot, because they are online and controlled by a third party. Non-custodial wallets like MetaMask and Trust Wallet are hot wallets too, since they're connected to the internet, but unlike exchange wallets, you hold your own keys.

Hardware wallets, on the other hand, sit at the intersection of cold and non-custodial. They are offline, and you control the keys entirely, which is exactly why they are considered the most secure option available.

So when you're thinking about which wallet to use, you're really making decisions across all three of these dimensions at once: how connected it is, who controls the keys, and what form it takes. The right combination depends on how much crypto you're holding, how often you need to access it, and how much responsibility you're comfortable taking on.

Security Risks to Watch Out For

The crypto space, like every other institution that houses valuable assets, unfortunately, attracts a significant number of bad actors who are constantly coming up with new ways to steal. The good news is that most of their threats are avoidable. Here are the most common risks:

Phishing

Phishing is one of the oldest tricks in the book, but it remains one of the most effective. It usually involves a scammer impersonating a legitimate platform, maybe a wallet provider, or an exchange, to trick you into handing over your private keys or seed phrase. This could come in the form of a fake email or a cloned website that looks almost identical to the real one.

The goal is always the same: get you to either enter your credentials on a fake site or reveal your seed phrase directly. To protect yourself:

• Always double-check the URL of any crypto site before entering your details.
• Never click links in unsolicited emails or messages.
• Bookmark the official websites of platforms you use regularly and access them only through those bookmarks.
• Remember that no legitimate platform will ever ask for your seed phrase or private key.

Exchange Hacks

Centralised exchanges are attractive targets for hackers precisely because they hold large amounts of crypto on behalf of millions of users. When an exchange gets hacked, the consequences can be devastating for everyone who stored their assets there. So how do you protect yourself:

• Avoid storing large amounts of crypto on exchanges for extended periods.
• Use exchanges only for active trading, then withdraw your assets to a personal wallet.
• If you must keep funds on an exchange, use one with a strong security track record and insurance policies.
• Enable all available security features on your Exchange account.

Fake Wallet Apps

Not every wallet app on the internet or even in app stores is legitimate. Scammers create convincing replicas of popular wallets and distribute them through fake websites or third-party app stores. If you download one of these and use it, your keys go straight to the scammer.

Here’s how to protect yourself:

• Only download wallet apps directly from the official website of the wallet provider.
• Double-check the developer name and reviews before downloading any wallet from an app store.
• Be especially cautious of wallet apps with very few reviews.
• If something feels off about an app, maybe unusual permissions or a strange interface, delete it immediately.

Clipboard Hijacking

Clipboard hijacking is a type of malware that monitors your clipboard and silently replaces a copied crypto wallet address with one belonging to the attacker. So when you go to paste a wallet address to send crypto, you're actually sending it to a scammer without realising it.

How to protect yourself:

• Always double-check a wallet address character by character before confirming any transaction.
• Keep your devices clean by using reputable antivirus software and avoiding downloading files from untrusted sources.
• Consider using a hardware wallet.

Taking Responsibility for Your Crypto Security

If there’s one thing crypto makes clear, it’s that ownership comes with responsibility, and to a large extent, crypto places the responsibility of safeguarding your assets directly in your hands. As we’ve seen throughout this article, everything ultimately comes down to the control of your keys. But beyond knowing your keys and securing them, you’ve also gained valuable information on how to choose your wallet type wisely and stay alert to the threats.