Home / Crypto / Academy / Custody and security

Wallets, keys and seed phrases: the part you cannot get wrong

If you read one module properly, make it this one. More crypto has been permanently lost to mishandled seed phrases than to every exchange hack in history combined.

MODULE 3 OF 64 LEVEL 2: CUSTODY AND SECURITY 15 MIN

A wallet is not a wallet

The name is genuinely misleading. A physical wallet holds your money. A crypto wallet holds no money at all. Your balance is a line on the blockchain, and it stays there whatever happens to your phone.

What the wallet holds is the private key: the secret that lets you authorise changes to that line. A better name would be "key manager", or "signing app".

This is why you can drop your phone in a river, buy a new one, install the same wallet, type twelve words, and everything reappears. Nothing was ever on the phone. The words rebuilt the key, and the key still matches the balance sitting on the chain where it always was.

Where the twelve words come from

When you create a wallet, the software generates an enormous random number. That number is then encoded into ordinary English words using a standard list of 2,048 words, so that humans can write it down without mistakes. That is your seed phrase, also called a recovery phrase or mnemonic.

From that one phrase, mathematics generates every private key in that wallet, for every chain, forever. That is why a single phrase can restore Bitcoin, Ethereum and everything else in one go.

What the seed phrase means in practice
Anyone with the words
Owns everything
There is no second factor, no password on top, no identity check. The words alone are complete control. Somebody reading them over your shoulder has your money.
Nobody without them
Including you
Lose the words and the funds are mathematically unreachable. No company, developer, court or government can recover them. This is not a policy that can be appealed.
The order matters
Exactly
It is a sequence, not a set. Word seven must be word seven. Most wallets include a checksum, so a wrong or misordered word usually fails outright rather than silently opening an empty wallet.
No legitimate wallet, exchange, support agent, airdrop, migration page or "wallet validator" will EVER ask for your seed phrase. Not to verify it, not to sync it, not to restore it, not to claim anything. Every single request is theft, without exception, and there has never been a real one.

Storing it properly, in order of how people actually lose money

Seed phrase storage
✓ Do this
  • Write it by hand on paper, or stamp it into a metal plate if the amount justifies it
  • Store it somewhere only you can reach, and consider two separate locations
  • Keep it away from the device it belongs to, so one burglary does not take both
  • Test recovery once with a small amount before trusting it with more
  • Consider a passphrase, an extra word you choose, for a hidden wallet on top
✗ Never do this
  • Photograph it. Phone photos sync to the cloud, and cloud accounts get breached constantly
  • Type it into a notes app, an email to yourself, or a document
  • Store it in a password manager if the amount is meaningful. One online account then holds everything
  • Keep it in the same drawer as the hardware wallet
  • Type it into any website, ever, under any circumstances
  • Tell anyone, including someone who sounds exactly like official support

Hot and cold, explained

The two families of wallet
Hot wallet
Connected to the internet
A phone app or browser extension. The key lives on a device that also browses the web, so if that device is compromised, so is the key. Convenient, and the right place for small working balances.
Cold wallet
Never connected
A hardware device holding the key inside a chip that never touches the internet. Transactions are sent to the device, signed inside it, and sent back. The key never leaves. This is what you want for anything you would be upset to lose.

How a hardware wallet actually protects you

Suppose malware on your laptop swaps the destination address when you copy and paste, which is a real and common attack. With a hot wallet, you would sign the wrong transaction without ever noticing.

With a hardware wallet, the transaction is sent to the device, and the device displays the destination on its own screen, which the malware cannot touch. You compare it, see it does not match, and refuse. That small screen is the entire point of the product.

Which means: if you approve on the device without reading its screen, you have paid for a hardware wallet and thrown away its main benefit. The largest theft in crypto history, 1.4 billion dollars from Bybit in 2025, happened because signers approved what they were shown without verifying it.

Custodial versus self custody, put plainly

On an exchange, the company holds the key. Forget your password and support can help you. If the company fails, freezes you, or is hacked, your money is caught in it. You are a creditor.

In a self custody wallet, you hold the key. Nobody can freeze it, and nobody can help you. The risk has not disappeared, it has moved from the company to you.

Neither is safer in the abstract. They fail differently. A sensible pattern for most people: keep what you are actively trading on a reputable exchange, and move anything you intend to hold to a wallet you control.

The mistake almost everyone makes first

Creating a wallet, writing the words on a scrap of paper, meaning to store them properly later, and then funding it. A week passes. The paper is somewhere. Six months later there is a real balance and nobody knows where the paper went.

Store the phrase properly before you put anything meaningful in. It takes ten minutes and it is the difference between owning crypto and having owned crypto.

READ NEXT

BEFORE YOU MOVE ON

Common questions

What happens if I lose my seed phrase?

The funds become permanently unreachable. No company, developer or authority can recover them, because the key is derived from the phrase and exists nowhere else. This is how the mathematics works, not a policy.

Can I keep my seed phrase in a password manager?

It is far better than a photo and weaker than paper or metal, because it places your entire holding behind a single online account. For meaningful amounts, keep it offline.

What is the difference between a hot and a cold wallet?

A hot wallet keeps the key on an internet connected device. A cold wallet keeps it inside a chip that never connects, and signs transactions internally so the key never leaves.

Do I need a different wallet for each cryptocurrency?

Usually no. One seed phrase generates keys for many chains, and multi chain wallets show them together. Some chains, notably Bitcoin and Solana, need a wallet that specifically supports them.

Risk warning: crypto is highly volatile and largely unregulated. You can lose everything you put in. Nothing here is financial, investment or tax advice.

← PREVIOUS
Where crypto is actually bought and sold
NEXT →
Making your first purchase safely