What Is a Crypto Wallet? How Keys, Addresses, and Signatures Work
On this page
A crypto wallet does not store cryptocurrency in the way a physical wallet stores cash. The assets remain recorded on a blockchain. What the wallet manages is the information and software needed to control them: private keys, public addresses, transaction data, and digital signatures.
This distinction explains both the power and the risk of crypto ownership. A wallet can let you move assets without asking a bank or payment company for permission. But if the credentials controlling that wallet are lost or exposed, a central support desk may not be able to restore access or reverse a transaction.
The simple model: the blockchain records the assets, an address identifies where they are controlled, and a private key creates signatures that authorize actions.
- What is a crypto wallet?
- The four parts of the basic wallet model
- Private key
- Public key
- Address
- Digital signature
- How a wallet sends a transaction
- Where does a seed phrase fit?
- Custodial and self-custody wallets
- Software wallets and hardware wallets
- What can go wrong?
- Seed phrase or private-key theft
- Signing the wrong action
- Wrong address or network
- Lost or unusable backups
- False confidence in the interface
- A practical wallet safety checklist
- The takeaway
What is a crypto wallet?
A crypto wallet is an application, device, or account system that helps a user interact with a blockchain. Depending on its design, it may generate keys, derive addresses, display balances, prepare transactions, request approvals, and submit signed data to the network.
The wallet normally calculates or retrieves your balance by reading blockchain data. It does not download individual coins into your phone or hardware device. A balance is part of the network’s shared state: either an amount associated with an account, as on Ethereum, or a collection of spendable transaction outputs, as in Bitcoin.
“Wallet” can describe several different products. It might be a mobile app, a browser extension, a dedicated hardware device, an institutional custody system, or a smart-contract account. These tools can have very different security models even though their interfaces show similar buttons such as Send, Receive, and Swap.
The four parts of the basic wallet model
| Part | What it does | Can it be shared? |
|---|---|---|
| Private key | Creates signatures that authorize transactions or messages | No |
| Public key | Allows others or the network to verify a signature | Yes |
| Address | Provides a shorter, network-specific destination or identifier | Yes |
| Digital signature | Proves that the holder of the relevant private key approved specific data | Yes, after signing |
Private key
A private key is a large secret number generated within the rules of a cryptographic system. Wallet software uses it to sign transactions. Anyone who obtains the key can generally produce valid signatures and control the assets associated with it.
A private key is therefore closer to an unforgeable signing credential than to a conventional password. A password usually asks a company’s server to grant access. A private key lets its holder create mathematical proof that a decentralized network can verify independently.
The key should never be sent to the blockchain or revealed to another person. Signing happens inside the wallet. The resulting signature can be public without exposing the private key.
Public key
A public key is mathematically derived from its private key. It can be used to verify signatures, but it should not provide a practical way to calculate the private key.
The exact relationship between public keys and addresses depends on the network. An Ethereum externally owned account has an address derived from part of a hash of its public key. In Bitcoin, an address commonly represents conditions that must be satisfied to spend an output; those conditions may involve a public-key hash, multiple keys, or a script.
Address
An address is a shareable identifier used when receiving assets or interacting with a blockchain. It plays a role similar to a destination on the network, but it is not a universal account number.
Address formats differ across blockchains and sometimes across networks belonging to the same ecosystem. A syntactically valid address on one network may not represent the intended recipient on another. Wallets can reduce mistakes with warnings and address books, but the user still needs to confirm the network and destination.
Important: an address is not a private key. Sharing an address normally lets someone send assets to it or inspect its public activity. Sharing the controlling private key can let them move the assets.
Digital signature
A digital signature connects a private key to a specific piece of data. When a wallet signs a transaction, it produces proof that the holder of the relevant key authorized that transaction. Network participants can verify the proof using public information.
A valid signature does not mean that a transaction is affordable, properly ordered, or permitted by every other network rule. Nodes still check conditions such as available funds, transaction structure, previously spent outputs, account nonces, and applicable fees.
How a wallet sends a transaction
Consider Alice sending an asset to Bob. The details vary by blockchain, but the general process has six stages.
- Bob provides an address. Alice’s wallet checks whether its format appears compatible with the selected network.
- The wallet prepares the transaction. It includes the destination, the amount or requested action, and network-specific information. On Ethereum, this can include a nonce and gas parameters. In Bitcoin, the transaction identifies inputs to spend and defines new outputs.
- A summary is shown to Alice. A well-designed wallet displays the recipient, network, amount, estimated fee, and any application request it can interpret.
- A private key signs the transaction. In a hardware wallet, signing may occur inside the device so the private key does not have to enter the connected computer.
- The signed transaction is broadcast. The wallet sends it to a node, which shares it with the network.
- The network verifies and records it. Nodes check the signature and other validity rules. A validator or miner may then include the transaction in a block.
The signature authorizes the transaction; it does not personally identify Alice. A blockchain address is generally pseudonymous rather than automatically anonymous. Its activity is public on many networks, and outside information can sometimes connect it to a real person.
Where does a seed phrase fit?
Modern self-custody wallets often manage many private keys instead of only one. Hierarchical deterministic wallets can derive a tree of keys from a single starting secret. This makes backup and address management more practical.
A seed phrase, sometimes called a recovery phrase or mnemonic, is a human-readable representation used by many wallet systems to generate that starting secret. BIP-39 defines one widely adopted mnemonic method, while BIP-32 defines a system for hierarchical deterministic Bitcoin wallets. Not every wallet or blockchain uses these standards, so recovery compatibility should not be assumed.
The seed phrase is not simply a login password. In a compatible wallet, it can recreate the keys and therefore restore control without the original phone or hardware device. Anyone who copies it may be able to do the same.
A PIN protects a device. A wallet password may encrypt a local file. A seed phrase can recreate the wallet’s keys. These protections are related, but they are not interchangeable.
Custodial and self-custody wallets
The decisive question is not whether a wallet is an app or a device. It is who ultimately controls the signing authority.
| Model | Who controls the keys? | Main advantage | Main limitation |
|---|---|---|---|
| Custodial wallet | A service provider, sometimes under a shared or institutional arrangement | Account recovery and simpler key management may be available | The user depends on the provider’s security, access policies, and continued operation |
| Self-custody wallet | The user or a signing system chosen by the user | Direct control without requiring a custodian to approve ordinary transactions | Loss, theft, or misuse of recovery credentials may be irreversible |
Self-custody does not always mean one person with one seed phrase. Multisignature systems can require several keys. Smart-contract wallets can add spending limits, recovery roles, delayed actions, or multiple approval methods. These designs change the authorization rules, but they do not remove the need to protect whatever credentials can approve or modify those rules.
Software wallets and hardware wallets
A software wallet stores or accesses signing credentials on a general-purpose device such as a phone or computer. It is convenient for regular activity, but its security depends partly on the device, operating system, wallet software, browser environment, and user behavior.
A hardware wallet is designed to keep private keys in a more isolated signing environment. It can reduce exposure to malware on the connected computer, but it cannot make every transaction safe. If the device displays one destination and the user approves another without checking, or if the user signs a malicious smart-contract request, isolation alone does not prevent loss.
“Hot” and “cold” describe connectivity and operational exposure. A hot wallet is available for frequent transactions. A cold setup keeps signing keys offline or otherwise separated until needed. Neither term guarantees a particular product quality or backup process.
What can go wrong?
Seed phrase or private-key theft
Phishing sites, fake support agents, malicious extensions, compromised backups, and screen-sharing scams often target recovery credentials. A legitimate transaction does not require typing a seed phrase into a website to “verify” or “synchronize” a wallet.
Signing the wrong action
A signature can authorize more than a simple transfer. It may approve a token allowance, place an order, change account permissions, or interact with a smart contract. A technically valid signature can still express a harmful instruction.
Wrong address or network
Blockchain transactions are not designed like card payments with routine chargebacks. Sending to the wrong destination, choosing an incompatible network, or copying an address altered by malware may leave no practical recovery path.
Lost or unusable backups
A backup can fail because it is incomplete, illegible, stored in only one vulnerable location, or created for a wallet with different recovery requirements. Adding an optional passphrase can provide another layer of protection, but forgetting it may create a permanently different wallet.
False confidence in the interface
A wallet’s balance display, token name, or transaction description can be incomplete or misleading. The interface is an interpretation of blockchain data, not the blockchain itself. Unknown assets and unexpected messages should not automatically be trusted because they appear inside a wallet.
A practical wallet safety checklist
- Identify whether the wallet is custodial, self-custodial, multisignature, or controlled by a smart contract.
- Download wallet software from a verified source and keep the device reasonably secure.
- Never disclose a private key or seed phrase to support staff, websites, or message senders.
- Keep recovery information offline where possible and protected from theft, fire, water, and accidental disposal.
- Confirm the destination, blockchain network, asset, amount, and fee before signing.
- Read smart-contract permissions instead of treating every signature request as a login.
- Test an unfamiliar address or recovery process with a low-value setup before relying on it.
- Separate frequently used funds from long-term holdings when the additional complexity is justified.
The takeaway
A crypto wallet is best understood as a control and signing tool. The blockchain keeps the asset record. Addresses identify destinations or spending conditions. Private keys create digital signatures, and the network verifies those signatures before accepting authorized changes.
This model removes the need for a central operator to approve every transfer, but it also changes the meaning of ownership. Control depends on keys, recovery methods, signing rules, and careful verification—not merely on having an app installed or knowing an account password.
Discussion