Wallets

Let's clear up the most misleading word in crypto first: "wallet." A crypto wallet does not hold coins the way a leather wallet holds cash. The coins never leave the blockchain, where they are just ledger entries assigned to an address. What the wallet actually holds is the private key that controls that address. A wallet is a key manager, not a money container.

That one fact explains everything else. Securing your crypto means securing a private key. Lose the key and the coins are stranded on the blockchain forever, visible to everyone and spendable by no one (there is no password reset). Let someone copy the key and they can move the coins instantly and irreversibly. So the whole subject of wallets is really "how do I store a secret number safely while still being able to use it." Every type of wallet is just a different answer to that.

The types sort themselves along two simple questions.

The first question is: is the key connected to the internet?

• Hot wallet
  the private key lives on an internet-connected device, like a phone app, a browser extension such as MetaMask, or the software an exchange runs for active trading. Hot wallets are fast and convenient, which is exactly what you need to actually transact, but being online means an attacker has a network path to reach them. Think of this as the cash in your pocket.
• Cold wallet
  the private key is kept on a device that never touches the internet, like a dedicated hardware wallet (a Ledger or Trezor) or, for an institution, an air-gapped machine in a vault. A paper wallet, where the key is simply printed out, is the most basic form. To move funds you physically approve the transaction on the offline device. Cold storage is dramatically safer because a remote attacker has no way in, but it is slower to use. Think of this as your safe deposit box.

Almost every serious holder splits funds across both: a small working balance sits hot for day-to-day use, the bulk sits cold. An exchange does the same at scale, keeping a few percent of customer assets in hot wallets for withdrawals and the rest in deep cold storage. The split is a deliberate risk budget: how much are you willing to expose online in exchange for how much speed.

The second question is: who holds the key at all, you or someone you hire?

• Non-custodial (self-custody)
  you hold your own private keys, so no third party can freeze, lose, or misuse your assets, because no third party is involved. The cost is that security is entirely on you: lose the key, fumble a backup, or get phished, and there is no help desk and no recovery. The risk does not vanish, it moves from counterparty risk onto your own operations. MetaMask and a hardware Ledger are examples.
• Custodial
  a third party holds the keys for you. For most people that is just their exchange account, like Coinbase or Binance. You regain a help desk and professional security, but you take on counterparty risk, which means your access now depends on that third party staying solvent and honest. Your "balance" is really an IOU in their database, not coins you directly control.

That second axis is where the famous slogan "not your keys, not your coins" comes from, and it is genuinely a hard trade-off rather than an obvious one. FTX's 2022 collapse is the cautionary tale: customers who thought they "had" coins on the exchange discovered they were unsecured creditors of a bankrupt company. Self-custody removes that counterparty risk but concentrates the risk of you losing the key yourself. There is no free option.

So, a wallet stores a key, not coins, and once you know that, every wallet is just a choice on two axes: online or offline, and your keys or someone else's. Get those two questions straight and you can place any wallet you ever meet on the map!