Wallets

⚠️ THE MOST IMPORTANT THING ABOUT ANY WALLET — HARDWARE OR OTHERWISE

It doesn't matter how sophisticated your hardware device is. It doesn't matter how many security features it has, how strong your PIN is, or how reputable the manufacturer.

If someone gets your seed phrase, they have everything. Instantly. From anywhere in the world.

They don't need your device. They don't need your PIN. They don't need to be in the same room, the same country, or even the same hemisphere. They simply enter your seed phrase into any compatible wallet and your entire crypto history populates — every coin, every token, every balance — ready to drain in seconds.

This is exactly how sophisticated impersonation scams work. They don't hack your device. They don't break your PIN. They simply talk you into revealing your seed phrase — through urgency, authority, and trust. And once it's shared, there is no undo button.

What is a seed phrase? A seed phrase is a unique sequence of 12 to 24 randomly generated words created when you first set up any crypto wallet. It is the master key to everything inside it — every coin, every token, every blockchain address connected to that wallet. It cannot be changed, reset, or recovered by anyone if lost. Guard it with your life. Full explainer on the Wallets page.

Your hardware wallet is only as secure as the secrecy of your seed phrase.

🏛️ CUSTODY — Who actually controls your crypto?

This is one of the most important concepts in crypto and one of the least talked about for newcomers.

Self-custody means you hold your own keys. Nobody else. No company, no exchange, no institution can freeze your account, restrict your access, or lose your funds through their own mismanagement. You are the bank. The cold wallet, hardware wallet, and browser wallets like MetaMask and Brave are all self-custody — because you control the keys.

With self-custody comes full responsibility. If you lose your seed phrase, nobody can help you. There is no customer service line. There is no account recovery. This is why protecting your seed phrase is the single most important thing you will ever do in crypto.

Custodial wallets are held by centralized entities — exchanges like Coinbase, Kraken, and Crypto.com. When you buy crypto on these platforms and leave it there, the exchange holds the keys on your behalf. You have an account balance, just like a bank account, but you don't directly control the underlying keys.

This is convenient — and for buying, selling, and trading it's perfectly reasonable. But it comes with real risks:

• If the exchange is hacked, your funds could be stolen
• If the exchange goes bankrupt, your funds could be frozen or lost — as thousands of FTX customers discovered in 2022 when the exchange collapsed overnight and billions in customer funds disappeared
• If the exchange decides to restrict your account for any reason, you lose access

This is why the crypto community has a saying that has become one of the golden rules:

"Not your keys, not your coins."

It means simply this — if you don't hold the keys, you don't truly own the crypto. Someone else does, and you are trusting them to keep it safe.

The practical approach most people take:

• Use a custodial exchange wallet for buying, selling, and trading
• Move larger holdings you want to keep long term into self-custody — a hardware wallet or securely stored seed phrase
• Never keep more on an exchange than you can afford to lose

The blockchain gives you the power to be your own bank. Self-custody is how you claim that power.

WALLETS Your crypto doesn't live in a wallet. Your keys do.

This is the first thing that trips people up — and it's important. A crypto wallet doesn't actually hold your cryptocurrency the way a physical wallet holds cash. Your crypto lives on the blockchain. Your wallet holds the keys that prove you own it and allow you to move it.

Think of it like a safe deposit box at a bank. The valuables are in the vault — but the key is yours. Lose the key, lose access. Hand someone the key, hand them everything.

🥶 COLD WALLET — Offline and in your hands

A cold wallet is any way of storing your crypto keys that is completely disconnected from the internet. And at its most fundamental level, a cold wallet is just words.

Specifically it's your seed phrase — 12 to 24 words generated when you first set up a wallet. Those words, in that exact order, are the master key to everything. They are your cold wallet. Write them down on paper. Better yet etch them onto a fireproof metal plate — yes, that's a real product and yes, crypto people really do that. Because if your house burns down and your seed phrase was on paper, your crypto is gone forever.

The Cold Wallet Checklist:

• Write it down by hand — never type it, never photograph it, never store it digitally
• Make two or three copies
• Store them in separate secure locations — a home safe, a safety deposit box, a trusted family member's home
• Never, ever share it with anyone for any reason

The one exception — your loved ones. This is something most people don't think about until it's too late. When you die, your crypto keys could be lost forever unless someone you trust knows where to find your seed phrase. Consider leaving instructions with your estate documents or a trusted person. Crypto inheritance is a real and growing issue — and unlike a bank account, there is no customer service line to call.

Your seed phrase is your legacy. Plan for it accordingly.

🔥 HOT WALLET — Online and convenient

A hot wallet is any wallet that lives on or is connected to the internet. This includes:

• Browser wallets — MetaMask, Brave Wallet, Trust Wallet. These live as extensions in your browser, always connected, always ready to interact with the blockchain.
• Exchange wallets — Coinbase, Crypto.com, Kraken. These are apps on your phone or computer managed by the exchange itself. Convenient but you don't fully control the keys — the exchange does. There's a saying in crypto: "Not your keys, not your coins."
• Mobile wallets — apps on your phone that hold your keys locally but are still internet-connected.

Hot wallets are like a checking account — convenient for everyday use but not where you keep your life savings. If your device is compromised, if you click the wrong link, if someone gets access to your browser — a hot wallet is vulnerable in ways a cold wallet simply is not.

Use a hot wallet for spending. Use a cold wallet for saving.

🔌 COLD WALLET DEVICES — The hardware wallet

A hardware wallet like a Ledger or Trezor is a physical device — about the size of a USB drive — that stores your private keys in a chip that never connects to the internet directly. Even when you plug it into your computer, the keys never leave the device. Transactions are signed inside the hardware itself and only the signed transaction goes out — not the key.

Think of it like a notary. The notary (your Ledger) verifies and stamps the document (your transaction) without ever handing over the original seal. The document goes out into the world but the seal stays safely inside.

So why does it need an app? The device itself is essentially a secure vault with a tiny screen and buttons. The app (Ledger Live) is the interface that lets you see your balances, initiate transactions, and manage your accounts. But the critical moment — the moment of approval — happens on the device itself, not in the app. That's the whole point. The app never touches your keys. Only the device does.

The PIN protects the physical device — so if someone steals it they can't just plug it in and access everything. But your seed phrase is the deeper backup — if the device is lost, stolen, or broken, you can restore everything on a new device using just those 12-24 words.

Popular hardware wallets:

• Ledger — most widely used, comes in Nano S and Nano X versions
• Trezor — open source, strong privacy reputation
• Foundation Passport — Bitcoin focused, fully open source, privacy first
• Coldcard — favored by Bitcoin maximalists for its advanced security

🔍 HOW TO VERIFY YOU'RE DOWNLOADING THE REAL EXCHANGE APP

One fake app can drain everything. Here's how to make sure you're getting the real one.

📱 DOWNLOADING FROM THE APP STORE OR GOOGLE PLAY

1. Developer/Publisher Name Tap on the app before installing and scroll down to find the developer name. Cross reference it against the exchange's official website — type the exchange URL directly into your browser and find their official download link there.

• Real Coinbase app — published by Coinbase, Inc.
• Real Kraken app — published by Payward, Inc.
• Real MetaMask — published by ConsenSys

If the developer name is slightly off — a different word, an extra character, a different company name entirely — do not install it.

2. Download Count Major exchanges have apps downloaded tens or hundreds of millions of times. If an app claiming to be a major exchange shows only thousands of downloads — that's a red flag.

3. Reviews and Rating Look at the number of reviews, not just the star rating. A real exchange app will have hundreds of thousands of reviews. Fake apps often have suspiciously perfect ratings with very few reviews posted around the same time.

4. Release Date and Update History A legitimate exchange app will have years of history and regular updates. A fake app will often have been published recently with little or no update history.

5. Use the Official Website's Download Link Go directly to the exchange's official website by typing the URL yourself, find their download links, and tap those. Never search for an exchange app in the app store search bar as your starting point.

💻 DOWNLOADING ON DESKTOP OR BROWSER

⛔ DO NOT USE GOOGLE SEARCH TO FIND A CRYPTO EXCHANGE OR WALLET.

Type the URL directly into your browser bar. Every single time. Without exception.

This is not a suggestion. This is the rule that could save everything.

Fraudulent websites that perfectly impersonate legitimate exchanges appear in Google search results — sometimes above the real site. Google does not guarantee that the first result is the authentic one. Chrome will not always warn you. And by the time you realize you're on a fake site, it may already be too late — because impersonator sites are very sophisticated. Just about everything looks the same: the logo, the colors, the layout, the language. And waiting behind that convincing facade is a "customer service" team that exists for one purpose only — to prey on you.

The only safe starting point is your own hands typing the correct URL.

• metamask.io — type it
• coinbase.com — type it
• kraken.com — type it
• brave.com — type it
• ledger.com — type it

The first time you visit and confirm it's legitimate — bookmark it immediately. From that moment forward, only ever access that exchange through your bookmark. Never through a search result. Never through a link in an email, a text, a social media post, or a chat message.

One Google search. One wrong click. Everything gone.

✅ THE GOLDEN VERIFICATION CHECKLIST

Before downloading any crypto app or logging into any exchange, ask yourself:

• Did I type this URL directly or follow a link? (Type it)
• Did I find this app through the official website or by searching? (Official website)
• Have I checked the developer name against the official site? (Check it)
• Does the download count match a major platform? (Millions, not thousands)
• Am I using Brave or Firefox rather than Chrome? (Switch if not)
• Does anything feel even slightly off? (Stop and verify)

When in doubt — close everything, take a breath, and start again from the official URL typed directly into your browser.

THE GOLDEN HIERARCHY

The safest crypto is the crypto whose keys only you control, stored somewhere the internet can never reach.