Skip to content

What Is a Crypto Wallet? Types, Security & Tax Implications

Last updated: April 3, 2026 11 min read

Key Takeaways

  • A crypto wallet stores private keys that prove ownership of cryptocurrency — the actual coins live on the blockchain, not in the wallet itself.
  • Hot wallets (software, internet-connected) are convenient for trading; cold wallets (hardware or paper, offline) offer stronger security for long-term storage.
  • Custodial wallets let exchanges hold your keys; non-custodial wallets put you in control — "not your keys, not your coins."
  • Transferring crypto between your own wallets is not a taxable event. CoinTracking helps you track wallet activity and identify which transactions are actually taxable.

Your crypto doesn't live in your wallet. That surprises most beginners — and it's the single most important thing to understand before you touch anything else.

Every unit of Bitcoin, Ethereum, or any other coin exists on a blockchain: a public ledger maintained by thousands of computers around the world. What a crypto wallet stores is the private key — the cryptographic password that proves you own those assets and authorizes you to move them. Lose the key, and you lose access to your crypto. Permanently. No matter how much is sitting on the blockchain.


What Is a Crypto Wallet?

A cryptocurrency wallet is a software application or physical device that stores the private keys needed to access, send, and receive cryptocurrency on a blockchain. Think of it like your email client: your emails live on a server (the blockchain), but your email app (the wallet) holds the credentials that let you read and send messages.

Every crypto wallet manages two types of keys:

  • Private key — Your secret signing key. Anyone with your private key can spend your crypto. Guard it like cash — because it basically is.
  • Public key / wallet address — Your receiving address, similar to a bank account number. You share this freely so others can send you funds.

According to NIST's cryptography standards, a public key in asymmetric cryptography is designed to be shared openly while the corresponding private key stays secret. Crypto wallets apply this same system to prove ownership of blockchain assets.

Most wallets also generate a seed phrase — a backup list of 12–24 random words that can regenerate your private keys if you lose access to your device. Write it down on paper. Keep it offline. Anyone with your seed phrase has full access to your funds.

If you already own crypto and need to understand which transactions create taxable events, knowing how wallets work is the foundation.


How Does a Crypto Wallet Work?

When you send cryptocurrency, the wallet uses your private key to sign the transaction — a cryptographic proof that you authorized the transfer. That signed transaction broadcasts to the blockchain network, where nodes verify the signature and record it permanently.

Here's how it works, step by step:

  1. Initiate a send — enter the recipient's public address and amount
  2. Your wallet signs using your private key (which never leaves your device)
  3. The signed transaction broadcasts to the network
  4. Miners or validators confirm it and add it to the blockchain
  5. The recipient's balance updates — usually in seconds to minutes

Your private key never travels over the internet in this process. Only the signed transaction does. That's why protecting your private key — and your seed phrase — is the whole game.

Per CISA security guidance, protecting the cryptographic credentials behind digital assets is foundational security practice, not optional.

And modern wallets do more than just send and receive. Many let you interact with DeFi protocols, manage NFTs, and earn staking rewards directly from the interface.


Types of Crypto Wallets

Wallets get classified two ways: by internet connection (hot vs cold) and by who controls the keys (custodial vs non-custodial). Both distinctions matter — for security and for your taxes.

Hot Wallets (Software Wallets)

A hot wallet is always connected to the internet. Convenient for frequent trading. More vulnerable to hacking than an offline option.

Mobile wallets are apps on your phone — Coinbase Wallet, Trust Wallet, and MetaMask mobile are common examples. Good for small amounts you transact regularly.

Desktop wallets install on your computer. Exodus and Electrum are popular choices. More control than browser-based options, but if your computer gets malware, your wallet is at risk.

Browser extension wallets like MetaMask run inside your web browser and are the standard for interacting with Ethereum-based DeFi applications. Convenient, but exposed to browser-based attacks. (Yes, even well-known extensions have been targeted by phishing sites.)

The most widely used hot wallets include:

  • MetaMask — The dominant browser extension wallet for Ethereum and EVM-compatible chains. Used by most DeFi participants. Available as a Chrome/Firefox extension and mobile app.
  • Phantom — The leading wallet for Solana, now also supporting Ethereum and Bitcoin. Browser extension and mobile.
  • Trust Wallet — Binance's official mobile wallet. Supports 100+ blockchains, widely used for BNB Chain and multi-chain DeFi.
  • Coinbase Wallet — Distinct from a Coinbase exchange account. A self-custody mobile wallet where you control the private keys, unlike your Coinbase account.

Note: Coinbase Wallet and a Coinbase exchange account are different things. Your exchange account is custodial — Coinbase holds your keys. Coinbase Wallet is a separate app where you hold your own keys. This distinction matters for taxes: exchange account transfers are trackable by Coinbase; wallet-to-wallet movements require you to track yourself.

A software wallet is the most common starting point for beginners. The trade-off is simple: convenience vs. exposure.

Cold Wallets

A cold wallet stores your private keys offline — physically disconnected from the internet. Because attackers can't reach an air-gapped device, cold wallets are significantly more secure.

Hardware Wallets

A hardware wallet is a physical device, roughly the size of a USB drive, that stores your private keys offline. Ledger and Trezor are the most recognized brands. When you authorize a transaction, the device signs it locally — your private key never touches your computer or the internet.

Hardware wallets support thousands of cryptocurrencies and typically run $50–$200. For anyone holding meaningful value in crypto, a hardware wallet is worth every dollar. It's the gold standard for cold storage.

Paper Wallets

A paper wallet is your public and private keys printed on paper — often as QR codes. Completely offline. Immune to digital attacks.

But paper comes with real risks. It can burn, get wet, or simply fall apart over time. Paper wallets are largely outdated today — a hardware wallet offers the same offline security with far better usability. If you do use one, store it in a fireproof, waterproof container. And make a second copy.


Custodial vs Non-Custodial Wallets

Hot and cold describe the connection. Custodial vs non-custodial describes who actually holds your keys. This distinction matters most for security — and it has tax implications too.

Custodial Wallets (Exchange Wallets)

A custodial wallet is managed by a third party — typically a cryptocurrency exchange like Coinbase, Kraken, or Binance. Buy crypto on an exchange and leave it there? You're using a custodial wallet. The exchange holds your private keys on your behalf.

The convenience is real: forget your password and the exchange can help you recover access. No seed phrase to lose. No key management headaches.

But so is the risk. "Not your keys, not your coins" is crypto's most-repeated warning for a reason. When FTX collapsed in 2022, customers couldn't withdraw billions in crypto stored in FTX custodial wallets — because FTX controlled the keys. When it went bankrupt, customers became unsecured creditors. Some recovered pennies on the dollar. Many recovered nothing.

Custodial wallets are a sensible starting point for beginners. Just don't store more there than you'd be comfortable losing in a worst-case scenario.

You can import your exchange transaction history into CoinTracking regardless of which custodial wallet or exchange you use.

Non-Custodial Wallets (Self-Custody)

With a non-custodial wallet, you — and only you — control the private keys. No exchange, no third party. That's the self custody crypto model.

The upside is real: zero counterparty risk. Even if every exchange in the world collapsed tomorrow, your crypto is safe as long as you have your seed phrase.

The downside is equally real. Lose your seed phrase and lose your device? Your crypto is gone. No password reset. No support ticket. No recovery. When you're the only custodian, you're fully responsible for backup and security.

Most hardware wallets are non-custodial. Many software wallets (MetaMask, Trust Wallet) are too. For tax purposes, importing transactions from multiple non-custodial wallet addresses requires a tool built for that complexity.


Tax Implications of Crypto Wallets

Here's what most beginner guides skip entirely. The tax angle.

The IRS treats cryptocurrency as property, not currency. That classification determines exactly when wallet activity creates a taxable event — and when it doesn't.

Moving crypto between your own wallets is not a taxable event. Transfer Bitcoin from Coinbase to your Ledger hardware wallet? You're just moving your own property from one place to another. No sale occurs. No gain or loss is realized. Nothing to report.

What IS taxable:

  • Selling crypto for fiat (USD, EUR, etc.) — triggers a capital gain or loss
  • Swapping one crypto for another — treated as a sale of the first asset at fair market value
  • Spending crypto on goods or services — also treated as a sale
  • Receiving staking rewardstaxable as ordinary income when received

Per the IRS Virtual Currency FAQ, transferring cryptocurrency between wallets you own does not trigger a taxable event. The key word is "own" — it has to be your wallet on both ends.

The practical challenge: once you have multiple wallets — a Coinbase account, a MetaMask wallet, a Ledger — tracking which transactions are taxable gets complicated fast. Good record-keeping isn't optional. It's the only way to file accurately. A dedicated crypto tax calculator does the heavy lifting.

Outside the US, the rules differ significantly — check the US crypto tax guide for domestic rules or your country's local guidance.


How to Secure Your Crypto Wallet

Security isn't complicated. But most people skip the basics until it's too late.

Your Seed Phrase: The Master Key

When you set up any non-custodial wallet, you receive a seed phrase (also called a recovery phrase or mnemonic) — a sequence of 12 or 24 random words generated by your wallet software.

This seed phrase is your wallet's master key. Anyone with your seed phrase has complete, irreversible access to every asset in that wallet — on every blockchain the wallet supports. There's no "forgot password" option. There's no customer support recovery. There's no blockchain-level protection if someone gets your words.

The one rule that matters: Write it on paper and store it offline. Never photograph it. Never type it into any website, app, or message — including MetaMask support pages, "wallet recovery" tools, or anything asking for it for any reason. 100% of "enter your seed phrase" requests are scams.

If you lose your seed phrase and lose access to your device, your funds are gone permanently. If someone else gets your seed phrase, your funds are gone permanently. This is the tradeoff of self-custody: complete control, complete responsibility.

Protect your seed phrase above everything else. Write it on paper — never type it, never photograph it, never store it in a cloud service. Keep multiple physical copies in separate secure locations. A fireproof safe is not overkill. Seriously.

Use a hardware wallet for significant holdings. The inconvenience of plugging in a Ledger every time you want to transact is a feature, not a bug. It creates friction against impulse moves and protects against malware that could otherwise drain a software wallet silently.

Enable 2-factor authentication on custodial wallets. Exchanges support authenticator apps (Google Authenticator, Authy). Use one. SMS-based 2FA is better than nothing but weaker — SIM swapping is a real attack vector.

Watch for phishing. Most crypto thefts don't involve breaking cryptography. They involve tricking users into entering seed phrases on fake websites. No legitimate service will ever ask for your seed phrase. If anyone asks — online or in person — it's a scam.

Never share your private key or seed phrase. Not with customer support. Not with your accountant. Not with anyone.


How to Choose the Right Crypto Wallet

The right crypto wallet depends on how you use crypto, how much you hold, and how much complexity you want to manage.

Your Situation Recommended Wallet Type
New to crypto, small amounts Custodial wallet on a reputable exchange
Active trader, moderate holdings Non-custodial software (hot) wallet
Long-term holder, significant value Hardware wallet (cold storage)
Maximum security, large holdings Hardware wallet + offline seed phrase backup in separate location

A practical approach for serious holders: use a hot wallet or custodial account for day-to-day trading amounts, and move larger holdings to a hardware wallet for cold storage. You get the convenience of both without putting everything at risk.

Use CoinTracking's portfolio tracker to monitor holdings across all wallet types from a single dashboard.


How CoinTracking Helps You Track Crypto Wallets for Tax Purposes

The more wallets you use, the messier your tax records get. Every transaction across every wallet and every exchange needs to be accounted for when you file.

CoinTracking, trusted by over 1.6 million users since 2012, supports 300+ exchanges and wallet integrations. Import from Coinbase, MetaMask, a Ledger hardware wallet via public address — it all flows into one dashboard. CoinTracking automatically calculates your capital gains, tracks cost basis across wallet transfers, and correctly treats wallet-to-wallet moves as non-taxable events.

Track Your Wallets and Calculate Crypto Taxes — Free Import up to 200 transactions free. CoinTracking handles FIFO, LIFO, HIFO, and more — automatically. Get Started Free →


Frequently Asked Questions

Coinbase the exchange is not a traditional crypto wallet — it's a custodial platform. When you hold crypto on Coinbase's exchange, Coinbase holds the private keys on your behalf. You have an account balance, not wallet ownership in the technical sense. Coinbase Wallet (a separate, free mobile app) is a crypto wallet — self-custodial, with your own private keys and seed phrase. The practical difference: crypto held on Coinbase exchange can be recovered if you lose your password (Coinbase has your keys). Crypto in Coinbase Wallet cannot be recovered if you lose your seed phrase (you have the keys). For tax purposes, moving crypto from Coinbase exchange to Coinbase Wallet is a wallet transfer — not a taxable event, but it needs to be tracked to maintain accurate cost basis records.
No. Transferring cryptocurrency from one wallet you own to another — say, from Coinbase to a Ledger hardware wallet — is not a taxable event. No sale occurs, so no gain or loss is realized. The IRS taxes crypto when you sell, swap, spend, or receive it as income. Moving it is not selling it.
You permanently lose access to the funds in that wallet. There's no recovery. No company, bank, or support team can help — because the seed phrase is the only way to regenerate your private keys. Write it down offline, make copies, and store them securely. This is the single most important thing you can do to protect your crypto.
Yes, as many as you want. Many experienced users maintain several — a custodial exchange account for trading, a non-custodial software wallet for DeFi, and a hardware wallet for long-term storage. CoinTracking can track transactions across all of them in one place.
Not exactly. An exchange like Coinbase or Binance provides a custodial wallet as part of its service, but it also manages order books, trading pairs, and other financial services. When you leave crypto on an exchange, you're using their custodial wallet. A dedicated wallet (MetaMask, Ledger) is purely a key management tool — no trading, no exchange.
For maximum security, a hardware wallet kept in cold storage — offline except when you're authorizing a transaction. Your private keys live on the device, never touching the internet. For significant holdings, hardware wallets are the standard recommendation. Pair it with an offline seed phrase backup stored in a separate physical location.
You don't report the wallets themselves, but you do need to report any taxable transactions that occurred through them. That includes sales, swaps, and receiving crypto as income. Wallet-to-wallet transfers between wallets you own are not reportable. For the current guidance, see the [IRS Virtual Currency FAQ](https://www.irs.gov/businesses/small-businesses-self-employed/virtual-currencies).
A hot wallet connects to the internet (software wallets, exchange wallets). Convenient but more vulnerable to online attacks. A cold wallet keeps keys offline (hardware wallets, paper wallets). Less convenient, significantly more secure. Most serious crypto holders use both: a hot wallet for active trading amounts and a cold wallet for long-term storage.
Yes. CoinTracking supports public address tracking for major blockchains. Add your hardware wallet's public address and CoinTracking automatically imports all associated on-chain transactions. No private keys required — just the public address.

Start Tracking Your Crypto Taxes Today

Experience why 2.2 million users trust CoinTracking — sign up today for a seven-day free trial!

4.6 on Trustpilot 4.7 on ProvenExpert 2.2M+ users