How to store crypto safely: wallets, seed phrases and hardware wallets explained

Whoever controls the private keys controls the coins. Storing crypto safely comes down to deciding who holds those keys — and protecting them from theft, loss and your own mistakes.

Custodial vs. self-custody

• Custodial (exchange or app): the company holds the keys. Easy, and you can recover access with your ID, but you depend on the company's security and solvency.
• Self-custody (your own wallet): you hold the keys. No company can freeze or lose your funds — but nobody can recover them for you either.

Many people use both: a small balance on a reputable exchange for trading, and savings in self-custody.

Hot wallets vs. cold wallets

• Hot wallets are apps on a phone or computer. Convenient for small, everyday amounts; exposed to malware and phishing.
• Cold wallets keep keys offline. A hardware wallet (Ledger, Trezor, BitBox, Coldcard and others) signs transactions on the device, so the keys never touch your internet-connected computer.

The recovery phrase is everything

When you set up a wallet you get a recovery (seed) phrase — usually 12 or 24 words. Anyone who sees it can take your coins from anywhere in the world.

• Write it on paper or stamp it in metal. Never type it into a computer, phone, cloud note, email or photo.
• Store copies in two secure places (fire and flood are real risks).
• No company, support agent or app will ever ask for it. Anyone who does is a scammer.
• Consider an optional passphrase for extra protection — but if you forget it, the funds are gone.

Buying a hardware wallet safely

The October 2026 CryptoBilis case showed why this matters: devices sold by a third-party reseller contained a hidden implant that read the recovery phrase from the screen and transmitted it over a mobile network.

• Buy directly from the manufacturer or an outlet the manufacturer lists as authorised — and be cautious even then.
• Check the packaging and seals, and run the manufacturer's genuine-device check.
• Never use a device that arrives with a recovery phrase already written on a card. Always generate a new one yourself.
• Update firmware only through the official app.

Extra protection for larger amounts

• Multisignature (multisig): require, say, 2 of 3 keys to move funds, ideally on devices from different makers, so one compromised device can't move money alone.
• Test your backup by restoring a wallet with a small balance before you rely on it.
• Keep holdings private. "Wrench attacks" — physical threats to crypto holders — are rising.

Quick checklist

1. Small amounts: reputable exchange or mobile wallet with 2FA.
2. Savings: hardware wallet bought direct, new seed phrase, offline backup.
3. Large amounts: multisig and a written inheritance plan.