Bitcoin wallets explained: custody, keys and backups

What a wallet actually stores

A wallet stores keys, not coins. The coins themselves exist as records on the Bitcoin network, written into the blockchain and confirmed by other participants. What sits on your phone or hardware device is the small piece of data that proves those records belong to you.

Two items matter. The private key is the secret that proves control; anyone who holds it can move the coins. The receiving address is derived from that key and is the string you share when you want payment sent to you. Think of the address as a mailbox slot and the private key as the only thing able to open the box.

Because the coins stay on the network, losing a phone does not lose the coins by itself. What matters is whether you still have the private key or the recovery phrase that rebuilds it. Anyone who obtains that phrase gains the same control you have, which is why it must stay offline and away from screenshots or chat messages.

A wallet app is simply the tool that reads the network and signs payments on your behalf. Signing uses the private key without displaying it, and the network checks the signature before accepting a transfer. Your receiving address can be shared freely; the key behind it cannot.

Custodial or self-custody

The first choice you face with any bitcoin wallet is who holds the private keys. In a custodial setup, a platform keeps them for you and you log in with a password, much like a mobile banking app. In a self-custody setup, the keys sit with you and no platform stands between you and the coins.

Custody changes what you depend on. With a platform, you rely on its security, its withdrawal rules and its continued operation; a password reset or a support desk exists because the platform, not you, controls the keys. The trade is convenience and a familiar login in exchange for depending on someone else.

Self-custody reverses that. You hold the keys, so nobody can freeze the coins or reset your access, and no support line can restore them if the keys are lost. That freedom is real, and so is the responsibility that comes with it.

• Custodial: simple login, password recovery, but you depend on the platform and its rules.
• Self-custody: you control the keys, no third party can freeze or reset, but loss of keys means loss of coins.
• Custodial may suit small amounts you move often; self-custody may suit savings you intend to hold, if you can protect the keys.

People often say "not your keys, not your coins". It is a shorthand for the point above: if a platform holds the keys, your access depends on that platform honouring its rules. It is a saying about control, not a statement of law.

Hot and cold storage

Hot storage means the keys sit on a device that is connected to the internet: a wallet app on your phone, an extension in your browser, or an account on a platform. It is convenient for sending and receiving, and it is exposed to whatever reaches that device, from malicious apps to phishing links sent by SMS.

Cold storage means the keys are kept offline. A dedicated hardware device holds them and only connects when you plug it in to sign a payment. A written backup of a key or recovery phrase, stored somewhere safe, is also offline, though it is easier to lose, damage or have photographed by a visitor.

Be honest about what counts as cold. A phone in flight mode is still a hot device once it reconnects, and a key photographed and saved in your gallery is exposed. Cold means the key has not touched an internet-connected machine.

A sensible split is common: a small amount in a hot wallet for spending, and the larger holding kept cold and left alone. That way a compromised phone costs you little.

Buy a hardware device from the maker's official channel, not a reseller. A device that passed through other hands can be tampered with before it reaches you.

The kinds of wallet in plain words

The label on a wallet tells you where the keys live and what you have to protect. Each kind below works differently, and each has a weak point worth knowing before you commit coins to it.

• Mobile app: software on your phone that holds keys and signs payments, handy for daily spending and receiving. Its weak point is the phone itself: a lost handset, a malicious app or a phishing link can expose the keys.
• Desktop program: software installed on a computer, giving you more screen space and control than a phone. The weak point is the machine, since malware on a computer can reach the key file.
• Browser extension: a small add-on that connects to websites and signs transactions from the browser. Convenience is high, but a fake site or a compromised extension can trick you into approving a payment.
• Hardware device: a dedicated unit that keeps keys offline and connects only to sign. Its weak point is the backup phrase and the supply chain, so buy direct and store the phrase safely.
• Paper note: a written copy of a key or recovery phrase kept offline. It is simple, but paper burns, fades and can be photographed or thrown away by mistake.
• Exchange account: a custodial balance where a platform holds the keys and you log in. The weak point is dependence on that platform's rules and continued operation.

No single type suits everybody. The right mix depends on how much you hold, how often you move it and how comfortable you are with technical setup.

The recovery phrase

A recovery phrase is a short list of ordinary words, generated by the wallet when you first set it up, that can rebuild that wallet on another device. The order matters, and so does every word. Anyone who sees the full phrase can restore the wallet and take everything in it, so treat it as the money itself.

Write it on paper by hand, checking each word against the screen as you go. Do not photograph it, and do not type it into a website or a chat message. Keep it out of phone notes and cloud drives, because those copies sync to accounts that can be breached or signed into from elsewhere.

No genuine support desk asks for your phrase. A message claiming to verify your wallet, fix a sync problem or process a refund is an attempt to take the coins. Close it and move on.

Make two copies and keep them in separate safe places, so a fire or a flood does not destroy both. Some people split the phrase between locations, but that adds complexity; if you do it, be sure you can still assemble the whole phrase when needed.

Test the backup before you trust it with real savings. Install a second wallet, restore from the written phrase, send a small amount to it and confirm it arrives. Then you know the paper copy is correct and legible.

Think gently about heirs. If nobody knows the phrase exists or where the copies are kept, the coins are effectively gone when you die. A sealed letter with a trusted person, or instructions held with a will, can prevent that without handing over control now.

Choosing and installing a wallet safely

Where you get a wallet matters more than which one you pick. Download only from the maker's own site or the official listing in your phone's app store, and check that the developer name on the listing matches the maker. Look-alike apps are built to look identical, so a small difference in the name or the icon is worth pausing over.

Search results can work against you. Adverts at the top of a search often point to copies, so ignore the sponsored slot and type the maker's address yourself. Treat links sent by SMS, chat or email from strangers as unsafe, however official they look.

Before installing, read whether the code is open to inspection. Open code can be checked by outside reviewers, which does not make a wallet perfect but does mean problems are harder to hide. A closed wallet asks you to trust the maker's word alone.

Once it is installed, keep it updated. Updates carry security fixes, and an old version left on a phone can carry known faults. Turn on the PIN or biometric lock your phone offers, and keep your mobile banking app and your wallet separate in your mind: they protect different things.

Finally, look into the developer or company before trusting funds to it. Find out who runs it, how long it has existed and whether it publishes a physical address or a way to reach support. If you cannot establish who is behind a wallet, do not put savings in it.

Setting up and a first test

Setting up a wallet takes a short, careful session, and the first test matters more than the setup itself. Work through the steps in order rather than rushing to move coins.

Install the wallet from the maker's own site or official app listing, then choose the option to create a new wallet rather than restoring an existing one. The app will display your recovery phrase; write each word by hand on paper in the order shown, checking against the screen. Confirm the phrase when prompted, which proves your written copy matches.

Set a PIN or turn on biometric lock, then find the receive screen. It shows an address, a string of letters and figures you can copy or scan as a QR code. Read it carefully before sharing.

Send a small test amount from an account you already control, using coins you hold elsewhere (see how to buy bitcoin). Wait for the transaction to confirm, which typically takes about ten minutes for the first block, then check the balance in your new wallet.

Send a small amount back out to the same source account and confirm it leaves. Only after both directions work should you move more onto the wallet.

How wallet money is lost

Most losses come from human slips rather than broken cryptography. A wallet holds keys, not coins, and it makes no promise about price; for market context see the bitcoin price in usd pages. What follows are the common ways money leaves a wallet.

• Phishing pages: a link opens a site that copies a wallet maker's design and asks for your phrase. Type addresses yourself and treat any page that requests the phrase as hostile.
• Screenshots of the phrase: a photo sits in your gallery and syncs to cloud backups. Keep the phrase on paper only.
• A shared phone: family or friends who use the device can open the app or read notes. Use a separate device or a strong lock.
• Malware that swaps copied addresses: malicious software replaces the address in your clipboard with another. Check the first and last characters on screen before sending.
• Fake support: someone offers to fix a sync error and asks you to share your screen or phrase. Genuine support does neither.
• Lost phone with no backup: the device goes missing or dies and the written phrase cannot be found. Test your backup before relying on it.
• Wrong network: coins sent on a network the receiving wallet does not use may not appear. Confirm the network matches on both sides first.