A crypto wallet is software or a hardware device that stores the private keys needed to access and spend cryptocurrency and lets its owner sign transactions.
How crypto wallets work
A wallet does not hold coins: the funds live on a blockchain, and the wallet holds the private keys that prove ownership. Most wallets derive all keys from a seed phrase (recovery phrase) of 12 or 24 words defined by the BIP-39 standard – anyone who knows these words controls the funds. Wallets fall into several categories:
- Hot wallets – mobile apps, desktop programs and browser extensions such as MetaMask, convenient but exposed to malware.
- Cold wallets – hardware devices such as Ledger or Trezor, or offline storage, which keep keys isolated and sign transactions internally.
- Custodial wallets – accounts at exchanges, where the provider holds the keys on the user’s behalf.
Why crypto wallets are targeted
Stolen cryptocurrency is quickly laundered and almost never returned, so wallets are a prime target:
- Infostealers routinely search for wallet files and browser extension data.
- Clipper malware swaps a copied wallet address for the attacker’s address.
- Phishing sites and fake support agents trick users into entering seed phrases, and “wallet drainer” kits obtain malicious transaction approvals.
- Fake wallet apps appear in app stores and search ads.
- Supply chain incidents hit wallet vendors: Ledger’s customer database leaked in 2020, fuelling phishing, and its Connect Kit library was compromised in 2023.
How to protect a crypto wallet
- Use a hardware wallet for long-term holdings and verify addresses on its screen.
- Store the seed phrase offline; never type it into a website, chat or cloud note.
- Download wallets only from official sources and review every transaction approval.
- Keep only small amounts in hot wallets and on exchanges.
Synonyms:
cryptocurrency wallet, bitcoin wallet
