How Crypto Wallets Work: Addresses, Keys and Recovery Explained
Understand where crypto is recorded, what a wallet controls, and how addresses, private keys and recovery phrases fit together.

On this page
A wallet can disappear from your phone without the assets disappearing from the blockchain. Understanding why makes addresses, recovery phrases and transaction approvals much easier to reason about.
1. The question: where is your crypto actually stored?
You install a wallet, receive an asset and see a balance. It is natural to imagine that the app now contains the coins. But the app is an interface: the blockchain records the state that determines what an account can spend. The wallet helps you read that state and authorize changes.
This distinction matters when replacing a phone or choosing between a personal wallet and an exchange account. The useful question is: who can authorize a transfer, and how would you recover that ability? Ethereum.org explains the difference between wallets and accounts.
2. A simple model: a shared ledger and a signing tool
Imagine a shared ledger with an entry for your address. Your wallet is a viewing window plus a signing tool. The address identifies an account; a private key lets its controller produce a signature that the network can verify.
The analogy has a limit: there is no clerk who can reset a conventional self-custody account after you lose its keys. Ethereum also supports contract accounts, whose authorization depends on code, so the one-key model is a starting point rather than a description of every wallet. See Ethereum account types and keys.
3. The mechanism: four things that should not be confused
- Address: a public destination identifier you can share to receive assets. Sharing it can also expose associated public activity.
- Private key: secret signing material for an account. Someone who obtains it may be able to authorize transfers.
- Recovery phrase: in many wallets, a backup from which a set of accounts can be derived. It can control more than one address.
- App password: typically unlocks a local wallet installation. It is not a replacement for the recovery phrase.
For example, MetaMask distinguishes its local password from its Secret Recovery Phrase and account private keys. Accounts imported separately may need separate backups; restoring the main phrase does not necessarily restore everything previously displayed. Always follow the recovery instructions for the actual wallet and account type. Read MetaMask’s recovery and password guide.
4. A worked example: replacing a broken phone
Suppose Maya uses a conventional self-custody wallet on a phone that stops working. The broken screen has not changed the blockchain’s ledger.
If she has the correct backup and uses a compatible recovery process on a trusted device, she can regain signing access. Restoring the wallet does not itself move the assets. If she has neither a usable signer nor the required recovery material, reinstalling the app alone will not restore control.
Compare that with an exchange balance: the exchange controls custody and provides its own account-recovery process. The responsibilities are different, even when both interfaces show the same asset name.
5. Risks and limitations: access is only part of safety
A hardware wallet helps isolate keys, but it cannot make every approval harmless. A misleading transaction or token permission can still be dangerous if you authorize it. Review what the request permits, not just the logo of the application asking.
Never give a recovery phrase to a support agent or enter it into a website to “verify” or “unlock” an account. Keep backups protected from both theft and physical loss. Public addresses are shareable, but they are not private: linking one to your identity can reveal activity. Ethereum.org’s security guide covers phishing, approvals and recovery-phrase protection.
6. The takeaway
Think in three layers: the blockchain records state, an account has authorization rules, and a wallet helps you interact with both. Before using a wallet, identify who controls signing, what the backup restores and what happens if the device fails. Those answers are more useful than how polished the balance screen looks.


Discussion