Choosing among crypto wallets confuses beginners because the marketing talks about features while the actual decision is much simpler: do you hold your own keys, or does a company hold them for you?
Everything else — mobile versus desktop, which brand, how many coins supported — follows from that. Here’s what beginners in the USA, UK and Canada actually need to know.
A wallet doesn’t hold your crypto
This trips everyone up at first. Your coins exist on the blockchain, not in any app. A wallet holds the private keys that prove you control them.
The practical consequence: lose the keys and the coins remain on the blockchain forever, permanently unreachable. There’s no password reset, no support line that can restore access, no bank to call. That’s the trade-off you accept in exchange for holding an asset nobody can freeze.
The decision that actually matters
Custodial means a company holds the keys. Leaving crypto on an exchange like Coinbase or Kraken is custodial. If you forget your password, support can help you back in. If the company fails or is hacked, your assets are at risk.
Self-custody means you hold the keys. Nobody can freeze your funds or lose them on your behalf — and nobody can recover them if you lose your recovery phrase.
Neither is universally right. A reasonable approach for most beginners: keep small amounts you’re actively trading on a reputable exchange, and move anything you’d be upset to lose into self-custody.
One thing to be clear about: crypto held anywhere is not covered by FDIC insurance in the US, FSCS protection in the UK, or CDIC in Canada. Those schemes protect bank deposits. Some exchanges carry private insurance, which is not the same thing and rarely covers individual account compromise.
Hot and cold wallets
| Type | Connected? | Best for | Main risk |
|---|---|---|---|
| Exchange account | Yes | Buying, active trading | Company failure, hacks |
| Mobile wallet | Yes | Small amounts, spending | Phone loss, malware |
| Browser extension | Yes | Interacting with apps | Malicious sites, phishing |
| Desktop wallet | Yes | Moderate holdings | Computer malware |
| Hardware wallet | No | Long-term holdings | Physical loss, fake devices |
Hot wallets are connected to the internet. Convenient, and permanently exposed to online threats.
Cold wallets — in practice, hardware devices — keep keys offline. Transactions are signed on the device itself, so the keys never touch your computer even when you’re using it.
A hardware wallet costs roughly $60 to $200. If your holdings exceed a few thousand, that’s cheap insurance. Buy directly from the manufacturer, never from a marketplace reseller — tampered devices are a documented attack.
Wallets beginners commonly start with
Not recommendations, and we have no affiliate relationship with any of these. They’re the names you’ll encounter, with the trade-offs worth knowing.
Exchange wallets — Coinbase, Kraken and similar. Simplest starting point, custodial, regulated in most of these markets. Fine for buying; not where large holdings should sit indefinitely.
Coinbase Wallet, Trust Wallet, Exodus — self-custody software wallets with beginner-friendly interfaces, supporting many assets across mobile and desktop. A reasonable middle step.
MetaMask — browser extension, essential for interacting with Ethereum-based applications, and a frequent phishing target precisely because it’s ubiquitous.
Ledger and Trezor — the two established hardware manufacturers. Both have long track records; both have had security controversies worth reading about before choosing.
What matters more than the brand: does it support the assets you hold, does it work on your devices, and does it give you the recovery phrase rather than keeping it?
Your recovery phrase is everything
When you set up a self-custody wallet, you receive 12 or 24 words. That phrase is your wallet. Anyone with it can take everything, from anywhere, instantly. Lose it and your funds are gone permanently.
Never store it digitally. Not in a photo, notes app, password manager, email draft or cloud document. Phones get compromised and cloud accounts get breached.
Write it on paper, ideally stamp it into metal. Paper burns and dissolves; metal backup plates exist for this reason and cost less than the crypto they protect.
Store copies in two separate physical locations. A house fire shouldn’t cost you both your home and your savings.
Never type it anywhere except your wallet during setup or recovery. No legitimate app, support agent or website will ever ask for it. Every single request you receive for those words is a theft attempt. No exceptions.
Test recovery before funding it properly. Send a small amount, wipe the wallet, restore from the phrase, confirm the funds appear. Discovering your backup was written down wrong five years later is a bad way to find out.
Scams that target wallet users
Fake wallet apps. Convincing clones appear in app stores regularly. Download only via links from the official website.
Support impersonation. You post a problem publicly; someone messages offering help and asks for your recovery phrase. Real support never contacts you first and never asks for those words.
Address poisoning. Attackers send tiny transactions from addresses resembling ones you’ve used, hoping you’ll copy the wrong one from your history. Always verify the full address, not just the first and last characters.
Clipboard malware. Software that swaps a copied wallet address for the attacker’s. Check the pasted address matches before confirming.
Malicious approvals. Connecting a browser wallet to a fraudulent site can grant permission to drain tokens. Review what you’re approving, and revoke old permissions periodically.
Always send a test transaction first when using a new address. A small fee beats losing the full amount to a typo. The same scepticism applies to tokens themselves — see our analysis of how hype-driven tokens actually work.
Country notes
United States. Exchanges register as money services businesses and comply with state-level requirements. Crypto isn’t FDIC-insured. The SEC’s Investor.gov publishes guidance on fraud patterns worth reading once.
United Kingdom. Crypto firms must register with the FCA for anti-money-laundering purposes — registration is not the same as consumer protection, and FSCS does not cover crypto losses. Check any platform on the FCA Register.
Canada. Trading platforms must register with provincial regulators and CIRO. Several international exchanges withdrew rather than comply, so verify a platform is registered to serve your province.
In all three, disposing of crypto is a taxable event — including swapping one coin for another. Keep records from the first transaction.
The step almost nobody takes
If you hold self-custody crypto and something happens to you, can anyone in your family access it?
Self-custody means no institution can release funds to your estate. Without a plan, your holdings simply vanish. Real amounts have been lost this way.
You don’t need to hand anyone the phrase now. But someone should know the wallet exists, where the backup is stored, and how to reach instructions — through a sealed letter with a solicitor, a safe deposit box referenced in your will, or a split arrangement requiring two people. Worth thirty minutes at some point.
Frequently asked questions
Do I need a wallet if I only buy small amounts?
Not immediately. An exchange account is fine while you’re learning. Move to self-custody when the amount would genuinely upset you to lose.
Are hardware wallets worth it?
Above a few thousand in holdings, generally yes. Below that, a reputable software wallet with a properly stored recovery phrase is reasonable.
What if I lose my hardware wallet?
Your funds are safe as long as you have the recovery phrase — restore onto a new device. The phrase is what matters; the device is replaceable.
Can one wallet hold everything?
Multi-currency wallets cover most mainstream assets, but not every blockchain. Check support for what you actually hold before committing.
The bottom line
Start on a regulated exchange while you’re learning. Once you hold an amount you’d hate to lose, move to self-custody — software wallet for moderate holdings, hardware wallet above that.
Then treat the recovery phrase as the actual asset. Written on paper or metal, stored in two physical places, never photographed, never typed anywhere but your own wallet.
Most crypto losses aren’t market losses. They’re lost phrases, phishing links and mistyped addresses — all preventable with habits that take an afternoon to establish. Our guides on investing in cryptocurrency safely and the mistakes beginners make cover the rest.
Sources
- SEC Investor.gov — crypto fraud patterns and wallet security guidance
- FCA Register — UK crypto firm registration, and why it isn’t consumer protection
- FDIC — confirmation that crypto is not covered by deposit insurance
- CIRO — Canadian crypto trading platform registration
Wallet features and security models come from each provider’s own documentation. We have no affiliate relationship with any wallet or exchange named.
Last reviewed: 15 August 2026. Wallet products and crypto regulation change — we review this article when they do.
Information only, not investment or security advice. Wallet products and regulations change; verify current details with providers and regulators. We have no affiliate relationship with any wallet or exchange mentioned. Crypto is not covered by FDIC, FSCS or CDIC protection.
