Bitcoin Wallets and Staying Secure

FTX collapsed in November 2022. Within days, billions in customer funds were gone. Anyone who bought Bitcoin on FTX and left it sitting in their account lost everything. Anyone who withdrew their Bitcoin to a wallet they controlled lost nothing.

That one distinction, a wallet you control versus an account someone else controls, is the single most important concept in Bitcoin security. This chapter walks you through it.

What is a Bitcoin Wallet?

A wallet does not hold your Bitcoin. Most newcomers get this wrong on day one.

Your Bitcoin never leaves the blockchain. What a wallet holds is your private key, the mathematical proof that you can spend specific coins on the chain.

Picture a safety deposit box at a bank vault. The Bitcoin sits in the vault. Your wallet holds the key. Without the key you cannot open the box. With the key you can. The box never moves. Only the key matters.

So when you keep coins on an exchange, you do not hold the key. The exchange does. You own an account balance, not actual Bitcoin. Move your coins to a wallet you control and you receive the private key. Now you own the Bitcoin directly, with nobody standing between you and it.

"Not your keys, not your coins" gets repeated everywhere for a reason. It describes how ownership actually works.

Hot Wallets vs Cold Wallets

Bitcoin wallets split into two camps depending on whether they touch the internet.

Hot wallets stay online. They live on your phone, your laptop, or in a browser extension. Opening one to pay for coffee takes seconds. The tradeoff is real: anything connected to the internet can be reached by an attacker.

Use a hot wallet for amounts you would not mind losing, roughly what you carry as cash. If CHF 200 in your pocket does not give you anxiety, CHF 200 in a hot wallet is fine.

Cold wallets stay offline. They store your private key on a device that has never touched the internet, or only connects briefly and in a controlled way to sign transactions. A hardware wallet is the most common form.

Use a cold wallet for savings. If you hold CHF 5,000 in Bitcoin, or any amount you would feel sick about losing, you want cold storage.

The rule is simple: hot for spending, cold for saving. Plenty of experienced holders keep a small hot wallet for daily use and a hardware wallet for the bulk. The same way you keep walking-around money in your pocket and savings in the bank, except now the bank is you.

Feature	Hot Wallet	Cold Wallet
Internet connection	Always connected	Offline
Best for	Daily spending, small amounts	Long-term savings, large holdings
Security level	Lower, exposed to online threats	Higher, isolated from internet
Convenience	High, instant access	Lower, requires physical device
Examples	Phoenix, Blue Wallet, Muun	Coldcard, Trezor, Jade, Ledger
Cost	Free	CHF 60 to 250

How to Choose a Wallet

The first call to make is custodial vs non-custodial.

A custodial wallet means a company holds your private keys for you. Exchange accounts are custodial. So are most beginner-friendly apps that quietly handle the keys in the background. They feel easy. They also bring back counterparty risk, the exact thing Bitcoin was built to remove.

A non-custodial wallet hands you direct control. You generate the keys. You store the seed phrase. No company can freeze your funds or lose them in a hack. The tradeoff is responsibility. Lose the seed phrase and nobody can help you.

For anything beyond pocket money, go non-custodial.

Beginners with small amounts (under CHF 500): Start with a simple non-custodial mobile wallet. Phoenix Wallet (Lightning-focused), Blue Wallet, and Muun all work well. Note that Muun uses submarine swaps for Lightning payments, which carries different trust assumptions than a standard Lightning wallet. Each generates a seed phrase you control and stays easy to use.

Larger amounts: Buy a hardware wallet. These are dedicated physical devices, roughly the size of a USB stick, that store your private key offline. They sign transactions inside the device, so the key never touches your phone or computer. The well-established options:

Ledger (based in France, widely used across Europe, connects via USB or Bluetooth) Trezor (based in the Czech Republic, fully open-source hardware and software) Coldcard (Canadian company, considered the most security-focused option, aimed at advanced users)

All three sell directly. Buy from the manufacturer or a verified retailer. Never second-hand. Never from a random online seller. Tampered devices have drained real wallets.

What is a Seed Phrase?

Set up any non-custodial wallet and the first thing it gives you is a seed phrase: 12 or 24 ordinary English words in a specific order.

Words look like abandon, able, about, above, absent, absorb. Yours will be random and unique to your wallet.

The seed phrase is a human-readable encoding of your private key. It contains everything needed to rebuild your wallet on any compatible device. If your phone is stolen, your laptop dies, or the dog eats your hardware wallet, you type the seed phrase into a new device and your Bitcoin is back.

That power cuts both ways. Lose the phrase or share it and the same thing happens to whoever ends up holding it.

Anyone who gets your seed phrase owns your Bitcoin. No grace period. No support line. An attacker with your phrase can drain you in seconds from anywhere on earth. This is exactly why phishing scams target seed phrases. One lapse of attention is the whole heist.

Treat the seed phrase like the only key to a vault holding your life savings. For anyone using Bitcoin seriously, that is what it is.

How to Store a Seed Phrase Safely

Write it down by hand, on paper. Do not photograph it. Do not type it into a phone or laptop. Do not email it to yourself. Do not drop it into a password manager or cloud drive. Every digital surface can be compromised.

Keep two physical copies in two separate locations. Apartment burns down or floods? You need a backup elsewhere. A family member's home, a bank safe deposit box, somewhere you trust.

Consider a metal backup. Paper burns. Steel does not. Devices like Billfodl or Cryptosteel let you stamp or engrave your seed words into stainless steel. For a hardware wallet holding a few thousand francs, CHF 50 to 100 buys real peace of mind.

Never enter your seed phrase on a website. No legitimate wallet, exchange, or support service will ever ask you to. Any site that does is trying to steal from you.

What Happens if You Lose Your Wallet or Seed Phrase?

This scenario keeps newcomers up at night. The answer is cleaner than they expect.

You lose the device but still have the seed phrase: You are fine. Buy a new device, install the wallet software, type in your seed phrase, and your Bitcoin is right there. The coins were never on the old device. They were on the blockchain the whole time. The seed phrase is what matters.

You lose the seed phrase but still have the device: You can still spend, as long as the device works. But do not stall. Generate a new wallet, send the coins to it, and back up the new seed phrase properly. A dead device with no backup means permanent loss.

You lose both: The coins are gone. There is no recovery mechanism. Nobody to call. This is the entire reason you back up before anything breaks.

You shared the seed phrase or entered it on a fake site: Assume the coins are already gone. If you still have wallet access, move everything to a fresh wallet with a new seed phrase right now, before the thief beats you to it.

Security Best Practices

Stick to these habits and you handle the threats that actually matter:

Write your seed phrase on paper, by hand, the moment you set up a wallet. Never store it digitally.

Keep two physical backups in separate locations. Stamp the seed into metal for anything significant.

Use a hardware wallet for any amount you would consider significant. CHF 500 upward is a reasonable personal threshold.

Turn on two-factor authentication for any exchange account you still use. Authenticator app, not SMS. SIM swap attacks are real.

For very high-value holdings, look at multisig: a setup where spending coins requires signatures from two or more separate keys. This removes the single point of failure. Sparrow Wallet, Unchained Capital, and Casa all support multisig self-custody.

Check that you can still access your seed phrase backup every few months. A backup you cannot find or read when you need it is no backup at all.

Setting Up a Hardware Wallet: What to Expect

Knowing what happens during setup keeps you calm and stops you from making mistakes.

Power on a new Ledger or Trezor and it generates a fresh set of private keys inside the device. It then shows your seed phrase, one word at a time, on its own screen. You write each word down in the order shown. After all 24 are down, the device asks you to verify a few of them to confirm you copied them correctly.

This is the most important moment in the entire process. You are receiving the master key to your wallet. Write every word clearly. Check your handwriting. Number the words. Store the paper somewhere safe before you do anything else.

The device will also ask you to set a PIN, a short code you enter every time you use it physically. The PIN keeps a thief from using the device if they steal it. The PIN matters less than the seed phrase. Forget the PIN and you reset the device and restore from the phrase.

Once set up, your hardware wallet talks to your phone or computer through a companion app like Ledger Live or Trezor Suite. These apps show balances and let you send and receive Bitcoin. The point worth understanding: the private key never leaves the hardware. Even when you broadcast a transaction, the signing happens inside the device. Your computer or phone only sees the signed transaction, never the key itself.

Risk Note

Most Bitcoin losses come down to user mistakes: lost seed phrases, phishing attacks, and funds left on exchanges that later collapsed. The Bitcoin protocol itself has never been hacked. Your choices set your security.

A hardware wallet and a properly stored seed phrase remove the most common ways people lose coins. The technology is not hard. The discipline is: set it up properly once, store the backup somewhere you trust, and you are done.

Reader Takeaway

A wallet holds private keys, not coins. Coins live on the blockchain. Hot wallets give you convenience for small amounts. Cold wallets (hardware wallets) give you security for savings. The seed phrase is the master key to your wallet, so guard it with physical copies in secure locations. Most losses are preventable.

Chapter Summary

• A Bitcoin wallet stores your private keys. Your Bitcoin stays on the blockchain. Whoever holds the keys controls the coins.
• Hot wallets (connected to the internet) are for small amounts and daily use. Cold wallets (hardware wallets) are for savings and larger amounts.
• Non-custodial wallets put you in control. Custodial wallets (exchange accounts) hand control to a company and reintroduce counterparty risk.
• The seed phrase is the human-readable master key to your wallet. Write it on paper. Keep two copies in separate physical locations. Never store it digitally or share it with anyone.
• Losing the seed phrase with no device means permanent loss. Losing the device with the seed phrase intact means easy recovery. Protect the seed phrase first.
• Hardware wallets (Ledger, Trezor, Coldcard) are the standard for anyone holding serious amounts of Bitcoin.

References

• Antonopoulos, A. Mastering Bitcoin. O'Reilly
• Bitcoin.org: Choose Your Wallet
• Ledger Academy: Recovery phrase basics
• Chainalysis Crypto Crime Report (loss and scam trends)
• Swiss Financial Market Supervisory Authority (FINMA): guidance on crypto custody