Private Keys, Seed Phrases and Wallets
Whoever controls the private key controls the assets. Everything else in this guide follows from that sentence.
A crypto wallet does not contain coins. It manages keys: a public key that others can send to, and a private key used to sign transfers. The assets remain in the blockchain's ledger – the key is the proof that you are allowed to move them.
What a seed phrase is
A seed phrase, often 12 or 24 words, is a human-readable encoding of the secret value from which all your keys are derived. With the words, the wallet can be recreated in any compatible software. That makes them a complete copy of your control – and the only thing an attacker needs.
Three ways to hold custody
- Custodial storage: a platform holds the keys on your behalf. Easier to get started, but you depend on the company's security, licensing and continued existence.
- Self-custody in software: the app on your phone or computer holds the keys. Convenient for smaller amounts, but exposed to malware.
- Self-custody in hardware: the keys reside on a separate device and signing happens there. A higher barrier to entry, but the private key never leaves the device.
Common mistakes
- Photographing the seed phrase or saving it in a cloud service, email or password manager connected to the internet.
- Giving the words to anyone claiming to be support, an auditor or a regulator – legitimate parties never ask.
- Keeping a single copy that could be destroyed by fire or water, with no plan for family members.
- Never testing a recovery, only discovering during a crisis that the note was written down incorrectly.
Do a small test transfer and a test recovery before moving larger amounts.
03 · SCOPE
This content does not cover
- Recommendation of a specific wallet, manufacturer or service.
- Instructions for recovering lost assets.
- Assessment of individual products' security audits.
04 · SOURCE REGISTER
Sources and check dates
05 · CORRECTIONS AND UPDATES
Correction and update history
No corrections or material updates have been made since publication. Corrections are logged here and in the corrections log.
06 · RELATED NODES
Read on
Common Crypto Scams and Red Flags
Scams follow a handful of patterns that recur year after year. This guide describes the most common setups, the concrete warning signs, and what you can do if you have already been affected.
Centralised or Decentralised Exchange?
The difference comes down to who holds the assets and who you can hold accountable. This guide covers how the two models work, how their risks differ, and what you should check before using either of them.
EU Authorities Warn of Limited Consumer Protection for Certain Crypto-Assets
The European supervisory authorities have issued a joint warning that many crypto-assets are high-risk products and that consumers often lack the protection that applies to regulated financial services. Here is how the warning should be read – without exaggeration.