The word "wallet" is one of the most misleading terms in crypto. A physical wallet holds your cash: if you open it, the money is inside. A crypto wallet holds nothing of the sort. Your coins never leave the blockchain, which is a shared ledger maintained by thousands of computers around the world. What a wallet actually stores is a set of cryptographic keys that prove you have the right to move balances recorded on that ledger.
At the heart of every wallet is a pair of numbers. The first is a private key, which is essentially an enormous randomly generated number. The second is a public key, which is mathematically derived from the private key using a one-way function. "One-way" is the crucial part: it is straightforward to calculate the public key from the private key, but computationally infeasible to work backwards. From the public key, the wallet software derives an address, the string of letters and numbers you share with someone when you want them to send you funds.
Think of the address as a transparent mailbox. Anyone can see what's in it, because the ledger is public, and anyone can drop something in. Only the holder of the private key can take anything out. This is why the phrase "not your keys, not your coins" gets repeated so often. Control of the private key is control of the funds, full stop. There is no customer service department inside a blockchain that can override the math.
So what happens when you send a transaction? Your wallet builds a message describing what you want to do: move a certain amount from your address to a destination address, along with a fee for the network. It then uses your private key to produce a digital signature over that message. The signature is unique to both the key and the exact contents of the message, which means it cannot be reused or edited. Your wallet broadcasts the signed transaction to the network, where nodes verify that the signature matches the public key associated with the funds. If it checks out, the transaction gets included in a block and becomes part of the permanent record. Notice that your private key itself is never transmitted. It stays in the wallet and only produces signatures.
Managing one private key per address would be miserable, so modern wallets use a hierarchical system built from a single master secret. When you set up a self-custody wallet, it generates a recovery phrase, usually twelve or twenty-four common English words, sometimes called a seed phrase or mnemonic. Those words encode the master secret. From it, the wallet can deterministically derive a practically unlimited tree of key pairs and addresses. That is why the phrase alone can restore your entire wallet on a brand new device: the addresses aren't stored anywhere secret, they're regenerated from the same starting point. It is also why writing the phrase down and keeping it offline matters so much. Anyone who reads it can reconstruct every key it produces.
Wallets are usually grouped along two axes. The first is custody. In a self-custody or non-custodial wallet, you hold the keys and bear full responsibility for backups. In a custodial arrangement, a service holds keys on your behalf and tracks your balance internally, which trades away direct control for convenience and account recovery options. The second axis is connectivity. Hot wallets keep keys on an internet-connected device such as a phone or browser extension, which makes them convenient for frequent use but exposed to malware and phishing. Cold storage keeps keys on a device that never goes online, often a dedicated hardware unit that receives an unsigned transaction, signs it internally, and returns only the signature. The key never touches the connected computer. Multi-signature setups add another layer by requiring several independent keys to approve a transaction.
Understanding this structure changes how you evaluate risk. The blockchain part of the system is generally very difficult to attack directly. The realistic threats are almost always about key handling: a phrase photographed and stored in cloud backups, a fake wallet app, a phishing site asking you to "verify" your words, or a signature approved without reading what it authorizes. Once you see a wallet as a key manager rather than a container of money, the security habits that matter start to make obvious sense.
This article is for general education only — not financial advice, and nothing here is a recommendation to buy, sell, or hold any asset. Cryptocurrency carries real risk of loss; always do your own research before making a financial decision.
