A crypto wallet is one of the most misleading terms in the space. It doesn't hold your coins. The blockchain holds your coins. What your wallet actually holds is the **private key** — a very large number — that lets you move them.
If you have the private key, you have the coins. Lose the private key, lose the coins. Someone else gets the private key, they have the coins. There is no customer support hotline. There is no "forgot password" link. There is no FDIC insurance. The math is the only thing that matters.
This is why wallet design is so obsessed with key management. Every other question — open source vs closed, hardware vs hot, recovery options, secure element vs not — is downstream of this one question: **where does the key live, and how do you keep it safe?**
The two halves of a wallet
Every wallet, hardware or software, has two parts:
- **The key management layer.** Where the private key is generated, where it's stored, and how it's used to sign transactions. This is the security-critical half. In a hardware wallet, the key never leaves the device. In a hot wallet, it lives on your phone or computer, which means your security is also your operating system's security.
- **The interface layer.** The app, the screen, the buttons. This is what you actually use. In a hardware wallet, the interface is mostly the companion app on your computer or phone. In a hot wallet, the interface and the key management layer are the same thing — and that's the trade-off.
When someone says "I have a Trezor," they usually mean the small device with a screen. The Trezor doesn't actually hold their Bitcoin. The Trezor holds a key. The Bitcoin is on the blockchain. The Trezor's job is to use that key to sign transactions without ever exposing it to the computer it's plugged into.
What a wallet address actually is
A wallet **address** is a public, shareable string that's mathematically derived from your private key. It's safe to share — like an email address. You give it to people who want to send you crypto. The blockchain uses it to record who owns what.
A wallet **seed phrase** (12 or 24 words) is the human-readable backup of your private key. If your hardware wallet gets lost, the seed phrase is what you type into a new wallet to recover your funds. **Anyone with your seed phrase has all your crypto.** Treat it like a key to a vault that contains everything you own.
What this means in practice
The whole industry is built around one question: how do you keep a very valuable secret (the key) safe, while still letting you use it conveniently? Every wallet design — hardware, hot, multi-sig, MPC, custodial — is a different answer to that question with different trade-offs.
The rest of the Learn hub is a guided tour of those trade-offs.