Crypto wallets, explained without the magic trick

Why it matters

Most wallet mistakes begin with the wrong mental model. If the app is mistaken for the asset, backup and recovery decisions become dangerously vague.

Start with the ledger

A blockchain records which conditions must be satisfied before an asset can move. Wallet software helps construct and sign the instruction that satisfies those conditions. It may show a balance, but that balance is a view of network state—not a pile of tokens stored inside the phone or device.

A public address is used to receive. A private key, or a system derived from it, authorizes spending. Good wallet design keeps that authority controlled while making ordinary use understandable.

Custodial or self-custody

With a custodial service, the provider controls the signing infrastructure and gives the user an account claim. Recovery can resemble a conventional account, but access depends on the provider, its controls and its solvency.

With self-custody, the user controls the recovery material and accepts the operational responsibility. No slogan removes that tradeoff. The useful question is which trust model fits the task, the amount at risk and the user's ability to recover safely.

Hot and cold are exposure models

A hot wallet operates on an internet-connected general-purpose device. It is convenient for frequent activity, but shares an environment with browsers, extensions, downloads and other attack surfaces.

A cold or hardware-backed arrangement keeps signing authority away from ordinary connected software. That reduces some remote risks; it does not eliminate phishing, bad address verification, malicious approvals, physical coercion or a poorly protected backup.

Recovery is the real design

The device, app and account interface can change. The recovery model determines whether access can be restored. A backup must remain private, legible and available when needed—without becoming an easy target for theft.

Never enter a wallet backup into a website because someone claiming to be support asks for it. Product-specific recovery should begin at a verified official destination, and a reader should confirm the device and instructions independently before exposing sensitive material.