BR Academy
Intro to Blockchain: How It Works and Why It Matters
0%
Exit course
Keys, Wallets, and Ownership·Lesson 10 of 25·12 min

Types of Wallets

Now that you understand public and private keys, the next question is: how do you actually store and use them? A wallet is software or hardware that holds your private keys and lets you sign transactions. But not all wallets work the same way. Understanding the different types will help you choose the right tool for your needs and security posture.

The Concept: Custodial vs. Non-Custodial

The most important distinction in wallets is who controls your private keys.

Custodial wallets are managed by a third party—usually an exchange or service. When you create an account on Coinbase, Kraken, or Binance, the exchange holds your private keys on your behalf. You log in with a username and password, and the exchange signs transactions for you. This is convenient: you can recover your account with email, you don't have to worry about losing a key file, and customer support can help if something goes wrong.

But there's a trade-off: you don't own your keys, so you don't truly own your coins. The exchange can freeze your account, restrict your withdrawals, or lose your funds if they're hacked. The phrase "not your keys, not your coins" captures this risk perfectly. This is not paranoia—major exchanges have been hacked, and users have lost access to their funds. In 2014, Mt. Gox (then the largest Bitcoin exchange) was hacked and lost 850,000 Bitcoin belonging to users and the company. Customers who held Bitcoin on Mt. Gox lost everything, with no way to recover it. This single event shaped how the crypto community thinks about custody.

Non-custodial wallets (also called self-hosted wallets) are software or hardware that you control. You hold the private keys yourself. When you want to send Bitcoin, your wallet signs the transaction with your key—the service never sees it. If your wallet is hacked, only your funds are at risk, not everyone's. But if you lose your private key, it's gone forever. No customer support can recover it. This is the fundamental trade-off: absolute control comes with absolute responsibility.

Most serious crypto users prefer non-custodial wallets for long-term storage, but custodial wallets remain popular for trading and convenience. The choice depends on your use case and risk tolerance.

Worked Example: Comparing Coinbase and MetaMask

Let's compare two real wallets to see this difference in action.

Coinbase (Custodial)

You sign up with your email and password. Coinbase generates a private key for you and stores it in their database, encrypted. When you want to send Bitcoin:

  1. You log into Coinbase and click "Send."
  2. You enter a recipient address and amount.
  3. Coinbase's servers sign the transaction with your private key (which they hold).
  4. The transaction is broadcast to the Bitcoin network.
  5. You see the transaction in your Coinbase account.

You never see or touch your private key. If Coinbase is hacked, your funds are at risk. But if you forget your password, Coinbase can reset it via email. Coinbase also carries insurance on certain holdings, which adds a layer of protection that non-custodial wallets don't offer. However, this insurance is limited and doesn't cover all scenarios (like regulatory seizure or exchange insolvency).

MetaMask (Non-Custodial)

You download MetaMask as a browser extension. When you create a wallet:

  1. MetaMask generates a private key and shows you a 12-word recovery phrase (your seed).
  2. You write down the seed phrase on paper and store it somewhere safe—not on your computer, not in a photo, not in a note-taking app.
  3. MetaMask stores the private key locally in your browser, encrypted with a password.
  4. When you want to send Ethereum, you click "Send" in MetaMask.
  5. MetaMask signs the transaction with your private key (which never leaves your computer).
  6. The signed transaction is broadcast to the Ethereum network.

MetaMask never sees your private key. If MetaMask's servers are hacked, your funds are safe because the servers don't hold your keys. But if you lose your seed phrase and forget your password, your funds are gone forever. MetaMask can't recover them—no one can. This is why seed phrase management is critical. Many users have lost access to their funds by losing their seed phrase, and there's no recovery process.

Hardware Wallets: The Gold Standard

A third category worth mentioning is hardware wallets — physical devices like Ledger or Trezor that store your private keys offline, disconnected from the internet. When you want to sign a transaction, you plug in the device, approve the transaction on its screen (not your computer's screen, which could be compromised), and the device signs it internally. The signed transaction is then sent to the network, but your private key never leaves the device.

Hardware wallets combine the security of cold storage (offline storage) with the convenience of signing transactions without retyping your seed phrase every time. They're the preferred choice for anyone holding significant amounts of cryptocurrency long-term, because they eliminate the risk of malware on your computer stealing your keys. Even if your computer is compromised, the attacker can't access the hardware wallet's private keys. The device itself is designed to be tamper-resistant, and many models include additional security features like PIN codes and passphrase protection.

Exercise: Identify the Trade-Off

Imagine you're a trader who buys and sells Ethereum daily. You also hold a long-term Bitcoin investment that you don't plan to touch for 5 years.

For your daily trading:

  • Should you use a custodial wallet (like Coinbase) or non-custodial (like MetaMask)? Why?
  • What are the benefits and risks of your choice?

For your long-term Bitcoin:

  • Should you use a custodial wallet or non-custodial? Why?
  • What's the biggest risk you're trying to avoid?

Answer key:

For daily trading: Custodial is often the practical choice. You're moving money frequently, and the convenience of a login and password recovery outweighs the custody risk for trading amounts. Coinbase or Kraken let you trade instantly without managing keys. You're also likely to use only a portion of your holdings for trading, so your total exposure to exchange risk is limited.

For long-term Bitcoin: Non-custodial (or hardware wallet) is the better choice. You're holding for years, so convenience doesn't matter. You want to eliminate counterparty risk—the risk that the exchange gets hacked, goes bankrupt, or freezes your account. A hardware wallet (which we'll cover next lesson) or a non-custodial software wallet like Electrum gives you full control and removes the exchange from the equation entirely.

The trade-off is real: convenience vs. control. Most experienced users use both—custodial for active trading, non-custodial for long-term storage. This is called a "ladder" strategy: keep only what you need to trade on an exchange, and move the rest to cold storage.

Recap

  • Custodial wallets (Coinbase, Kraken) hold your private keys for you. Convenient, but you depend on the service's security and policies.
  • Non-custodial wallets (MetaMask, Electrum) let you hold your own keys. Full control, but you're responsible for not losing them.
  • Hardware wallets (Ledger, Trezor) store keys offline and sign transactions securely. The best option for long-term storage of significant amounts.
  • The choice depends on your use case: trading (custodial is often easier) vs. long-term storage (non-custodial or hardware is safer).
  • The phrase "not your keys, not your coins" captures the fundamental principle: if you don't hold the private keys, you don't truly own the cryptocurrency.

Resources

← Public and Private Keys Securing Your Keys →