Blockchain Wallets

Every person who participates in the blockchain ecosystem needs a wallet. A blockchain wallet is the primary tool for storing, sending, and receiving cryptocurrency and interacting with DApps. Understanding wallets — especially the difference between types and the critical importance of the private key — is one of the most practical skills for anyone working with blockchain.

What Is a Blockchain Wallet?

A common misconception: a blockchain wallet stores cryptocurrency. It does not. Cryptocurrency never leaves the blockchain — it always exists as a record on the distributed ledger. A wallet stores the private key — the cryptographic secret that proves ownership and authorizes spending. Whoever controls the private key controls the funds.

Real-Life Analogy – The Locker and the Key

Imagine a public locker room where lockers are numbered and visible to everyone. Anyone can see how many items are in locker #247 (your address). Only the person holding key #247 (your private key) can open it and access the contents. The wallet is simply the keychain that holds key #247. Lose the key with no backup — the locker and its contents are locked forever.

The Three Core Components of a Wallet

+---------------------------------------------------+
|                 BLOCKCHAIN WALLET                 |
+---------------------------------------------------+
|                                                   |
|  PRIVATE KEY                                      |
|  A secret 256-bit number                          |
|  5HueCGU8rMjxECkjT... (never share this)          |
|  Controls all funds associated with this key      |
|                                                   |
|  PUBLIC KEY (derived from Private Key)            |
|  04a1b2c3d4e5f6...                                |
|  Generated mathematically from the private key    |
|  Safe to share publicly                           |
|                                                   |
|  WALLET ADDRESS (derived from Public Key)         |
|  1A1zP1eP5QGefi2DMPTfTL5SLmv7Divf...              |
|  Like a bank account number -- share freely       |
|  Others use this to send you cryptocurrency       |
|                                                   |
+---------------------------------------------------+

Types of Wallets

Hot Wallets – Connected to the Internet

Hot wallets stay connected to the internet at all times. They offer convenience for frequent transactions but carry higher security risk because online devices are targets for hacking.

Cold Wallets – Offline Storage

Cold wallets store private keys on a device or medium that never connects to the internet. They provide maximum security for long-term storage of large amounts but are less convenient for frequent transactions.

Custodial vs Non-Custodial Wallets

CUSTODIAL WALLET (e.g., Coinbase, Binance exchange account)
  - Company holds your private keys
  - Company has control over your funds
  - Company can freeze your account
  - Convenient -- no key management required
  - Risk: Company hack or bankruptcy = your funds at risk
  - "Not your keys, not your coins"

NON-CUSTODIAL WALLET (e.g., MetaMask, Ledger)
  - You hold your own private keys
  - Nobody can freeze your funds
  - Nobody can access your funds without your key
  - Responsibility: You must secure your own keys
  - Risk: Lose your key = lose your funds permanently
  - Full self-sovereignty

The Seed Phrase – The Master Backup

Modern wallets use a seed phrase (also called a recovery phrase or mnemonic phrase). A seed phrase is a set of 12 or 24 ordinary English words that can regenerate all private keys associated with a wallet. The seed phrase IS the wallet — anyone who has it controls all the funds.

EXAMPLE SEED PHRASE (12 words -- never use this real-looking example)
word1 word2 word3 word4 word5 word6
word7 word8 word9 word10 word11 word12

From this 12-word seed, the wallet can regenerate:
  --> Private Key 1 --> Public Key 1 --> Bitcoin Address 1
  --> Private Key 2 --> Public Key 2 --> Ethereum Address 1
  --> Private Key 3 --> Public Key 3 --> Solana Address 1
  ...and potentially thousands more addresses

This is called a Hierarchical Deterministic (HD) Wallet
One seed backs up an entire portfolio across multiple blockchains

Seed Phrase Security Rules

• Never store digitally – Never type or photo your seed phrase. No cloud backups, no email drafts, no screenshots.
• Write on paper – Keep physical copies in multiple secure locations.
• Never share – No legitimate service ever needs your seed phrase. Anyone asking for it is attempting theft.
• Use metal backups – Consider engraving seed words on fireproof steel plates for long-term security.

How a Hardware Wallet Works

HARDWARE WALLET TRANSACTION SIGNING

Normal wallet (hot):
  Transaction data ---> Private key in device memory ---> Signed transaction
  RISK: Malware can read private key from memory

Hardware wallet:
  Step 1: Computer creates unsigned transaction
  Step 2: Sends to hardware device via USB/Bluetooth
  Step 3: Hardware device shows details on its own screen
  Step 4: User physically confirms on device (press button)
  Step 5: Private key NEVER leaves the hardware device
  Step 6: Device returns ONLY the signed transaction
  Step 7: Computer broadcasts signed transaction to network

Even if the computer has malware, the private key stays secure
inside the hardware device where no software can access it

Multi-Signature (Multi-Sig) Wallets

A multi-signature wallet requires multiple private key approvals before a transaction can be executed. This protects large holdings against a single point of failure — whether that is a compromised key, an insider threat, or a stolen device.

MULTI-SIG EXAMPLE: 2-of-3 Wallet

Three key holders: Alice, Bob, Carol
Any 2 of the 3 must sign to send funds

Transaction proposed:

Alice signs --> 1 of 3
Bob signs   --> 2 of 3 --> Transaction executes

Carol did not sign -- but 2 of 3 is enough

If Alice's key is stolen:
  Attacker has 1 of 3 -- not enough to steal funds
  Alice + Bob can generate a new wallet and move funds safely

Wallet Security Best Practices

• Use a hardware wallet for holdings above a small daily-use amount
• Store seed phrase offline in two separate physical locations
• Never enter seed phrase on any website — legitimate wallets never ask for it
• Enable PIN protection on hardware wallets
• Use different wallets for DeFi interaction (hot) and long-term holding (cold)
• Verify recipient addresses byte-by-byte before confirming any transaction

Summary

• A blockchain wallet stores private keys, not cryptocurrency directly
• The private key generates the public key, which generates the wallet address
• Hot wallets are internet-connected and convenient; cold wallets are offline and secure
• Custodial wallets are managed by companies; non-custodial wallets give full self-control
• A seed phrase backs up all keys in a wallet — protect it as the highest-priority secret
• Hardware wallets sign transactions offline, keeping private keys completely isolated from the internet
• Multi-sig wallets require multiple approvals, eliminating single points of failure