Wallets and self-custody

Your assets live on the ledger, at an address. A wallet is software that stores the private key for that address and signs transactions with it. Nothing is inside the wallet in the way cash is inside a wallet.

The first decision

Custodial. An exchange or app holds the keys. You have an account, a password, a reset process, and someone to contact. You do not hold the asset — you hold a claim on a company.
Self-custody. You hold the keys. Nobody can freeze or seize your balance, and nobody can help you if you lose access.

Interpretation

Neither is correct in general, and the failure modes are opposites
Custodial risk is that the company fails, is hacked, freezes withdrawals, or is compelled to. That is not hypothetical — see Mt. Gox and the 2022 collapses. Self-custody risk is that you lose the key, leak it, or die without your family knowing where it is. Choose according to which failure you are actually more exposed to, which for most beginners with small amounts is the second.

Hot and cold

Hot wallet. Keys on an internet-connected device. Convenient, and exposed to anything that compromises the device.
Cold wallet. Keys on a device that never connects. A hardware wallet signs transactions internally and sends out only the signature, so the key never touches the computer — which is the point of the product.

The sensible arrangement

The same logic as a current account and a safe. Keep a small working balance in a hot wallet for regular activity, and hold the bulk on a hardware wallet you touch rarely. The inconvenience of the second is the security of the second.

Where the money actually goes

Phishing. A convincing site or message asks you to "validate" or "migrate" a wallet by entering your seed phrase. This is theft, always, without exception.
Malicious approvals. You connect to a site and sign a token approval granting a contract unlimited permission to move your holdings. The theft happens later, and looks like nothing at the time.
Fake applications. Wallet apps in app stores and browser extensions that are counterfeit versions of real ones.
Clipboard malware. Software that silently replaces a copied address with the attacker's.
Bought hardware wallets. A device purchased second-hand or from a marketplace reseller may arrive pre-configured with someone else's seed.

Fact

Signing is where the risk is, not connecting
Connecting a wallet to a site reveals your address and nothing more. Signing is what moves money or grants permission. Read what you are signing, be suspicious of any approval for an unlimited amount, and revoke old approvals periodically — several tools exist for exactly this and they are free.

Practical rules

Buy hardware wallets only from the manufacturer, never resold.
Send a small test transaction first, always, for any new address or network.
Verify the full address, not the first and last four characters. Address-poisoning attacks exist precisely because people check only the ends.
Use a separate wallet for experimenting with unfamiliar applications, holding only what you can lose.

No legitimate service will ever ask for your seed phrase — not support, not a migration, not an airdrop claim, not a security check. There are no exceptions to this rule, which is what makes it useful.

Education, not advice. These lessons explain how things work. They do not tell you what to buy, and Wealth Signal does not publish recommendations. Full disclaimer.