Wallets And Keys: How You Actually Own Crypto

The single biggest source of confusion for newcomers is the word wallet. It suggests a container that holds coins, like a leather wallet holds cash. That mental model breaks the moment something goes wrong. Let us replace it with the accurate one.

A wallet is a key pair

When you "create a wallet", software on your device generates two numbers using a cryptographic algorithm:

A public address — a long string like 0x8f3a4b21...9d7b that anyone can see
A signing key (also called the secret key, or the seed phrase that generates it) — twelve or twenty-four English words that only you should ever see

The address is where money is sent. The signing key is what lets you spend it. That is the whole model.

The coins are not in the wallet

This is the part that trips people up. Your coins do not live on your phone or in an app. They live in the blockchain database — a record that says address 0x8f3a...9d7b owns 2.4 ETH. Every full node in the network has a copy of that record.

What your "wallet" (the software) actually does is:

Store the signing key locally
When you want to send money, use the key to sign a message that says address 0x8f3a...9d7b wants to send 0.5 ETH to address 0xaaaa...bbbb
Broadcast that signed message to the network

The network verifies the signature is valid (which it can do using the public address, no key needed), and the balance updates.

What can the signing key actually do?

Whoever holds the signing key can do all of that instantly, from any device. No password. No recovery. No customer service.

The categories of wallet software

Different wallets store the key in different places. That trade-off is the entire security conversation.

Wallet types, from most convenient to most secure

Type	Where key lives	Trade-off
Exchange (Binance, Coinbase)	On their servers	Easy. You do not really own it. Exchange failure = loss.
Browser (MetaMask, Phantom)	Encrypted in your browser	Convenient. Vulnerable to browser exploits and clipboard hijackers.
Mobile (Trust, Rainbow)	In app storage	Portable. Loss of phone without backup = permanent loss.
Hardware (Ledger, Trezor)	On a dedicated device	Safest. Even a compromised computer cannot extract the key. Costs $70–200.

The seed phrase is the ultimate backup

When your wallet software first generates keys, it shows you 12 or 24 English words. That is not a password — it is the seed that the key is derived from. Anyone who has those words can regenerate the same signing key on any device, anywhere in the world, forever.

Store the seed phrase offline. Write it on paper or stamp it into metal. Never take a photo. Never type it into a website. Never store it in a cloud note or password manager. The single biggest cause of crypto theft is a seed phrase that leaked into a photo backup, a browser autofill, or a phishing form.

Common self-inflicted disasters

Sending to the wrong network. Ethereum USDC and Solana USDC use different address formats. Sending from Binance to a Solana address labelled ETH means the funds are gone.
Approving unlimited spend to a bad contract. "Approve" gives a smart contract permission to move a specific token from your wallet. Malicious contracts ask for unlimited approval, then drain the token when they feel like it.
Signing a "free mint" that is actually a wallet drainer. Some malicious sites ask you to sign a transaction that looks harmless but actually transfers everything you own.

The rule: read what you are signing, and if in doubt, do not sign.

The mental model, condensed

Next chapter

What is DeFi — using wallets to interact with financial protocols