Types of Crypto Wallets Compared

The only question that matters

Every wallet type answers one question differently: where is the private key when you use it, and what else can touch it at that moment? A key that never leaves dedicated hardware is exposed to far less than a key held by software on an internet-connected phone.

Comparison by category

• Hardware wallet — key generated and stored on a dedicated device; transactions are signed on-device and confirmed on its own screen. Strongest against malware. Costs money, needs careful backup, and can still be defeated by approving a malicious transaction.
• Desktop wallet — key stored in software on a computer. Full featured; exposed to anything that compromises the computer, including info-stealers.
• Mobile wallet — key in a phone app, often protected by the phone's secure storage. Convenient for payments and QR codes; exposed to malicious apps, device loss and SIM-linked account recovery weaknesses.
• Browser extension wallet — key in the browser profile, designed for interacting with web applications. The most convenient for on-chain apps and the most exposed to phishing sites and malicious signature requests.
• Paper or metal backup — the recovery phrase written offline. Not a wallet you transact with; a backup medium. Immune to malware, vulnerable to fire, water, loss and being read by anyone who finds it.
• Custodial account — a company holds the keys and you hold a login. Password recovery exists and support exists, but the assets depend on that company's solvency, policies and security.
• Multi-signature wallet — several keys required to approve a transfer. Removes the single point of failure; more setup and more to maintain.
• Watch-only wallet — holds a public address only. Can monitor balances, cannot spend. Useful for checking cold storage without exposing keys.

A common practical split

• Long-term holdings on a hardware wallet, with an offline backup of the phrase in a separate physical location.
• A small, separate hot wallet for day-to-day interaction with web applications, funded only with what you are willing to lose.
• A watch-only setup to check the cold wallet without connecting it.
• Anything on a custodial platform treated as a balance at a company, not as self-custody.

Never use the same wallet for long-term savings and for connecting to unfamiliar applications. Separation limits the damage of a single mistake.

Failure modes to plan for

• Device lost, stolen or broken — recoverable from the phrase, which is why the backup matters more than the device.
• Backup lost — unrecoverable. No provider can restore a self-custodial wallet without the phrase.
• Backup found by someone else — equivalent to handing over the funds.
• Malicious approval or signature — possible on every category, including hardware; read prompts.
• Custodian failure, freeze or account closure — outside your control entirely.

How to choose a specific wallet safely

1. Decide the category first, based on purpose and amount.
2. Get the download link from the network's or the project's own official documentation, then bookmark it.
3. Check the app listing's developer name and history before installing; look-alike apps appear periodically.
4. Buy hardware only from the manufacturer or an authorised reseller, and never use a pre-filled recovery phrase supplied with a device.
5. Set it up offline, verify the backup by restoring it, and test with a small amount before moving anything significant.

Sources

• Bitcoin.org: choosing a wallet
• Ethereum.org: wallets