What Is a Crypto Wallet? Hot Wallets, Cold Wallets and Recovery Phrases
Keys, not coins
Your tokens live on the blockchain. Your wallet holds the secret key that lets you move them. Whoever has the key, or the recovery phrase that restores it, controls the funds.
Hot versus cold
| Hot wallet | Cold wallet | |
|---|---|---|
| Examples | Phantom, Solflare apps | Hardware wallets |
| Best for | Trading and daily use | Long term storage |
| Risk | Exposed to phishing and malware | Lower, but you can lose the device |
Staying safe
Never share your recovery phrase. Use a separate wallet for risky trades. Read common scams and set up Phantom the safe way.
How a wallet works under the hood
When you create a wallet it generates a recovery phrase, usually 12 or 24 words from a list of 2,048 words, following the BIP-39 standard. Each word carries 11 bits, and a short checksum is added. A 12 word phrase encodes 128 bits of randomness plus a 4 bit checksum, and a 24 word phrase encodes 256 bits plus 8. From that phrase the wallet derives private keys, and from each private key a public address you can share. Worked example: 12 words times 11 bits is 132 bits, which is 128 bits of entropy plus the 4 bit checksum. To sign a transaction, the wallet uses a private key on your device to produce a signature, and the network checks that signature against your public address. Your key never needs to leave the device. See How Wallet Signing Works and Why Keys Stay Private and Seed Phrases and Private Keys Explained.
Custodial versus self-custody
| Exchange account (custodial) | Self-custody wallet | |
|---|---|---|
| Who holds the keys | The company | You |
| If you forget your password | Usually recoverable | Recovery phrase is the only way back |
| If the company fails | Your claim may be stuck | Not affected |
| Scam exposure | Phishing of your login | Phishing plus malicious signing requests |
Common mistakes
- Keeping the phrase in a phone photo or cloud note.
- Connecting a main wallet to every new site. Use a spare wallet for experiments.
- Approving a signing request without reading it. See Solana Wallet Safety.
- Assuming a hardware wallet makes every signature safe. It protects the key, not your judgment. See Hardware Wallets for Solana Holders.
Quantum and wallets
Today's wallets sign with elliptic curve cryptography, which a future large quantum computer could in theory attack. That is a long-term research topic, not a reason to panic, and wallets are expected to update when new signature standards arrive. Read What Individuals Can Do About Quantum Risk Today and Post-Quantum Security Review Checklist for Wallets and Dapps.
How to check yourself
Create a test wallet, write down its phrase, then restore it on another device to prove the backup works. Look at your address on an explorer to see it is public. Follow Device and Account Hygiene for Solana Holders for habits worth building. Education only, not financial advice.
Questions to ask before choosing a wallet
- Who makes it, and is the download link from the maker's own site?
- Does it show clear details before you sign, such as what a transaction will do?
- Can it connect to a hardware wallet later?
- Does it support the tokens you hold, including newer standards? See Solana Token Standards.
There is no single best wallet, only a good fit for what you hold and how you use it. Start small, practice with a trivial amount, and build habits slowly.
Sources and further reading
- BIP-39: mnemonic code for generating deterministic keys
- Solana docs: tokens (mint accounts, token accounts, authorities, decimals)
Facts checked 2026-10-09 against the linked pages. Education only, not financial advice. Nothing here predicts the price of any asset, and the QNT memecoin is an independent community token with no link to Quantinuum Ltd or any lab, chain or exchange named on this page.
Frequently asked questions
Who controls my crypto wallet?
Whoever has the private key or recovery phrase.
Is a wallet the same as an exchange account?
No. On an exchange the company holds the keys. In a wallet you hold them.
How many words is a recovery phrase?
Wallets built on BIP-39 use 12 to 24 words, with 12 and 24 the most common.
Can I have more than one address in one wallet?
Yes. A single recovery phrase can derive many accounts, each with its own address.
What happens if my phone breaks?
If you saved the recovery phrase safely offline, you can restore the wallet on a new device. If not, the funds are lost.
Is a browser extension wallet safe?
It is convenient but exposed to phishing and malicious signing requests. Use a separate wallet for risky activity and a hardware wallet for larger holdings.
Do wallets store my coins?
No. The coins stay on the blockchain. The wallet stores keys that prove you may move them.
Keep reading
- How to Set Up a Phantom Wallet for Solana (Beginner Guide)
Learn how to create a Phantom wallet, back up your recovery phrase safely and receive SOL so you can trade Solana tokens. - How to Buy SOL: Beginner Guide to Funding a Solana Wallet
How to buy SOL and move it to your own wallet so you can trade Solana tokens like QUANTUM (QNT). - Memecoin Scams and How to Avoid Them
The most common memecoin scams, from fake contract addresses to wallet drainers and rug pulls, and a simple checklist to stay safe.
All How to buy and stay safe guides | Back to top | Search the site
Main pages: What is QNT? | Token information | How to buy | FAQ