Crypto wallets, explained properly

Behind the friendly interface, every wallet is doing one job: turning a secret into signatures. From a single seed — usually twelve or twenty-four ordinary English words — a wallet derives private keys, and from those, addresses. The address is what you hand out. The private key is what you never hand out. The seed can rebuild both, on any device, from any brand of wallet that follows the same standard.

That last point is the quietly liberating part. A wallet app is not a bank account you are locked into. If the developer disappears tomorrow, you type the same twelve words into a different wallet and everything reappears, because the balance was never in the app. It was on Bitcoin, Ethereum or whichever chain you were using all along. The app was a window.

There is one meaningful exception, and it matters for privacy: Monero works differently under the hood, with view keys and stealth addresses instead of a public balance anyone can read. It still restores from a seed, but the wallet does more work, and not every multi-chain app supports it properly. That is why the Monero wallet question gets its own chapter rather than a row in a table.

A custodial wallet is an account. Some company holds the keys, shows you a number, and moves coins when you ask nicely. It has genuine advantages: password resets, support staff, and no chance of you deleting your own life savings with a careless factory reset. It also has one structural cost — the balance is a claim on a company, not a coin you control, and it can be frozen, delayed, or asked to prove where it came from.

A self-custody wallet gives you the key and hands you the whole job: backup, secrecy, recovery, discipline. Nothing can be frozen, nothing needs permission, and nobody can lock you out. Nobody can let you back in, either.

"Not your keys, not your coins" is not a slogan about ideology. It is a sentence about who can say no to you.

The honest answer for most people is both, split by purpose. Keep whatever you are actively trading somewhere convenient, and keep the part you would be sick to lose in self-custody, backed up properly, touched rarely. The line between the two is personal — but you should be able to say out loud where it sits.

It is worth knowing where a swap sits in this picture. A non-custodial swap never takes deposits: coins arrive from your wallet, get converted, and leave to the address you named, with no account holding a balance in between. That is what the non-custodial exchange guide walks through, and it is why a good wallet and a good swap are complementary rather than competing.

Mobile wallets are what most people should start with. They are always on you, they scan QR codes, and the good ones make backup unavoidable during setup. They are also the most likely to be lost or stolen, which is fine — a stolen phone with a properly backed-up wallet is an inconvenience, not a loss.

Desktop wallets suit people who transact from a computer, run their own node, or want a full Monero wallet with everything it can do. The trade-off is that a desktop machine collects more software over the years, and any of it can read the screen.

Hardware wallets keep the key on a small dedicated device that signs transactions and never reveals the secret, even to an infected computer. If your holdings would ruin your year, this is the answer. Buy directly from the manufacturer, never second-hand, and never one that arrives with a seed phrase already printed — that is the oldest scam there is.

Browser extension wallets are the price of admission for on-chain apps. Treat them as a hot pocket: useful, exposed, and never the home of anything you could not replace.

Multi-chain convenience is real, but it has an edge. One app holding BTC, ETH, SOL and a shelf of tokens is one app to compromise, and one app whose support for any single chain may be shallower than a dedicated wallet's. Convenience is a legitimate reason to accept that. Not noticing is not.

Your seed phrase is the wallet. Anyone who reads it owns your coins instantly and irreversibly, from anywhere on earth, with no way to undo it. That single fact should drive every backup decision you make.

Write it on paper or stamp it into metal. Store it somewhere a fire or a burst pipe would not reach. Never photograph it, never type it into a notes app, never put it in a password manager you access from the same phone that holds the wallet, and never — under any circumstance, for any reason, to anyone claiming to be support — type it into a website. Legitimate support never asks. The request is the attack.

Then do the step almost everyone skips: test the restore. Wipe the app, or install a second wallet on a spare device, and rebuild from your written words before you hold anything meaningful. A backup you have never tested is a hypothesis. The wallet setup walkthrough takes you through this end to end, including the passphrase option and where it helps.

Can you leave? A wallet that shows you your seed phrase and follows the standard derivation paths is one you can walk out of. One that will not export is a custodian wearing a costume.

Is the code public? Open source is not a guarantee of safety, but it is the difference between a claim anyone can check and a claim you simply believe. Prefer wallets with reproducible builds and a visible history of fixing what researchers report.

Does it actually support your chains? Support is not a logo on a landing page. It means correct fee estimation, the right address formats, memo and destination-tag fields where the chain needs them, and sane behaviour on congested days. Assets like XRP use a destination tag, and Tether exists on several chains at once — a wallet that blurs those distinctions will eventually cost you a transfer.

Who does it talk to? Most wallets query a server to learn your balance, which means that server can associate your addresses with your IP. The privacy-serious ones let you point at your own node or route over Tor.

What happens on the bad day? Read the recovery documentation before you need it. If a wallet cannot explain, in plain language, how you get your money back from a dead device, that is your answer.

Most chains are permanent public records. An address is a pseudonym, and pseudonyms leak: reuse one, and every payment made to it is linked forever, by anybody, including years later. This is not a niche concern for people doing something unusual. It is the default condition of using Bitcoin, Ethereum or Tron carelessly.

The practical habits are dull and effective. Take a fresh receiving address for every payment — good wallets do this automatically, so let them. Keep funds with different origins in different wallets rather than merging them in one place, so a single transaction cannot tie two parts of your life together. And decide consciously which assets you hold: privacy at the chain level is a property of the coin, not of the wallet, which is the whole argument of the no-KYC pillar and the reason Monero and Zcash exist at all.

If privacy is the point, read the no-KYC wallet comparison next: a wallet that never asked who you are still leaks plenty if it broadcasts through someone else's server and reuses one address for a decade.

The reason self-custody stopped being inconvenient is that you no longer need an exchange account to change one asset for another. A non-custodial swap works wallet-to-wallet: you say what you are sending and where the result should land, the coins move through the provider that quoted best, and the output arrives at your address — typically in well under ten minutes, with no account, no deposit balance and no identity check on crypto-to-crypto routes.

Monivo's role in that is narrow and worth stating plainly: we ask every connected provider for a live quote on your exact amount and show you the best executable payout, with zero added fees on top of the rate you see. The difference between providers on the same trade is real money, which is why we publish it in the rate index and explain the mechanics in the exchange rate pillar.

Common wallet-to-wallet routes worth knowing: BTC to XMR for moving into a private asset, ETH to USDT for stepping out of volatility, and USDT to BTC for stepping back in. Whatever the route, the rule is the same: paste the destination address from your own wallet, check the first and last characters against what the wallet shows, and only then send.

1. No real backup. The seed exists only inside an app on one device. The device dies. That is the single most common loss, and it has nothing to do with hackers.

2. The seed typed into a website. A fake support agent, a fake "wallet validation" page, a fake airdrop claim. Same outcome every time.

3. Wrong network. Sending a token over one chain to an address that only exists on another. Recovery ranges from fiddly to impossible — the USDT network guide exists precisely because this happens so often.

4. Missing memo or destination tag. Chains that require one will happily accept a transfer without it, and then the funds sit somewhere unhelpful.

5. Clipboard malware. Software that silently swaps a copied address for the attacker's. This is why you verify the pasted address on screen, every single time, no matter how boring it gets.

None of these require sophistication to avoid. They require a habit. Build the habit while the amounts are small, and it will still be there when they are not — and if you get stuck at any point, our support team is reachable around the clock.