How Wallets Work
When most people talk about a crypto wallet, they imagine a digital vault where their bitcoin or ether “sits.” But that’s not accurate: wallets manage private keys, not coin balances.
Contents 5 sections
A Bitcoin wallet is a collection of private keys, and wallet software manages those keys and makes transactions on the Bitcoin network. Understanding this distinction is critical for protecting one’s cryptocurrency.
What a Wallet Holds—and How it Keeps it Secure
At its core, a crypto wallet is a secure manager of private keys. The private key is what grants a cryptocurrency user ownership of the funds on a given address. A secret string of numbers and letters, the private key proves ownership and allows a user to sign transactions. Crucially, when sending crypto, the wallet uses this private key locally to create a digital signature, and the private key itself never leaves the wallet.
Custodial Wallets vs. Non-Custodial: The Keys Control
Custodial wallets and non-custodial wallets illustrate the basic distinction between third-party custodians and self-custody control of private keys. While custodial wallets hold keys on behalf of users, and custodians manage the cryptographic keys that allow assets to move, in a non-custodial wallet setup, users themselves control the private keys. In practice, that means that in a custodial setup, the company providing the service could control cryptocurrency; in self-custody, only the users hold funds.
Recovery Phrases, BIP-39 and the Master Key
The non-custodial safeguard comes in the form of a recovery phrase: almost all modern wallets generate a 12- or 24-word mnemonic seed. This phrase, as laid out by the BIP-39 standard, serves as a master private key that can regenerate every single derived key needed. A single seed phrase, in other words, can regenerate every single private key, public key, and Bitcoin or altcoin address a wallet will ever use.
If someone has access to one’s private keys, they own the cryptocurrency. And if a user enters their seed phrase into a wallet, that wallet potentially has full control of one’s cryptocurrency balance, in the same way that a 12-word phrase could mint a new wallet containing that balance. A password tied to a cryptocurrency account, unlike the recovery phrase, offers no safeguard.
Losing Keys Means Losing Coins
The practical consequence of this arrangement is that the key—both literally and figuratively—is key. Non-custodial wallets like Bitcoin Core, Electrum, or any tool that directly handles private keys give users sole control of their own private keys. This is helpful—and necessary—if they want deep control over funds. The phrase is just as important; accessing the phrase even once could wipe a wallet’s balance, and an attacker in control of the phrase can spend one’s coins. In a custodial wallet, the custodian is responsible for protecting the keys, so users are protected from these risks—and trust the custodian.
Wallets Don’t Store Cryptocurrency: They Manage Keys
Crypto does not live in wallets. Wallet apps don’t “store” cryptocurrency in a vault. One misconception here is the idea of wallets containing, or “storing,” a cryptocurrency, as if coins are bundled up like coins or bills. But this is not accurate. In fact, the money doesn’t “live” in the wallet. Wallet software manages the keys that prove ownership. The coins live on the blockchain. For users, this means understanding one crucial point: a private key proves the user owns an address and thus a certain amount of cryptocurrency. Proper management and control of keys means proper control of one’s cryptocurrency.
