What Is a Bitcoin Wallet?
A bitcoin wallet is software or a device that keeps the secret keys you need to send and receive bitcoin. Here’s the first thing most people get wrong: your wallet does not “hold” any bitcoin. Not a single satoshi (the smallest unit of bitcoin, one hundred-millionth of a coin) lives inside your phone app or hardware device. All bitcoin exists as entries on the blockchain, a shared ledger copied across tens of thousands of computers worldwide, each of which checks new entries against Bitcoin’s rules (Course 1 explains who enforces them). What your wallet holds are the private keys that prove you own specific entries on that ledger and let you move them.
Think of it this way: the blockchain is a huge vault full of locked safety deposit boxes. Your wallet is the keychain with the keys to your boxes. Lose the keychain and you lose access. Copy the keychain and whoever has the copy has the same access you do. The vault never moves; only the record of who controls which box changes when transactions are made.
Most wallets also show you, once, a list of 12, 20 or 24 words called a seed phrase (or recovery words). Those words are the master copy of every key the wallet will ever use: with them you can rebuild the whole keychain on a new device, and anyone else who sees them can too. You’ll meet them properly in the lesson on seed phrases, including why not every list of words restores in every wallet. For now, remember that the words matter more than the app or device that shows them.
This distinction shapes every security decision you’ll make as a Bitcoin holder, so it’s the foundation for the rest of this course.
What Is a Public Key, What Is a Private Key, and What Are Bitcoin Addresses?
Every bitcoin wallet revolves around a pair of mathematically linked numbers, a private key and a public key, plus the addresses made from them.
What Is a Private Key?
A private key is a randomly generated 256-bit number. Written out, it’s a string of 64 hexadecimal characters, something like e9873d79c6d87dc0fb6a5778633389f4453213303da61f20bd67fc233aa33262. This number is your proof of ownership. Anyone who has it can spend the bitcoin it controls. There’s no password reset and no customer support.
Its security comes from the size of the number space: there are about 1077 possible keys (a 1 followed by 77 zeros). To get a feel for that, imagine a billion computers each trying a trillion keys per second. Even at that speed, trying every key would take about 1056 seconds, while the universe is roughly 4 × 1017 seconds old. Guessing a key made from real randomness is, for all practical purposes, impossible.
Your private key must stay secret. If someone sees it, photographs it or copies it, they can take your bitcoin from anywhere in the world. Modern wallets manage keys through a seed phrase, but the private key is the basic unit of control; see the relationship between seed phrases and private keys.
What Is a Public Key?
A public key is calculated from your private key using elliptic curve cryptography (Bitcoin uses a curve called secp256k1). The calculation is one-way: you can always get the public key from the private key, but you can’t work backwards from the public key to the private key. That one-way property is what makes the whole system work.
When you sign a transaction with your private key, anyone on the network can use your public key to check that the signature is valid, without ever learning the private key.
Bitcoin Addresses: What You Actually Share
An address is what you give someone who wants to send you bitcoin. For most address types it’s made from the public key by hashing it (running it through SHA-256 and RIPEMD-160), which makes it shorter and hides the public key until you spend.
Private Key → Public Key → Bitcoin Address
Each arrow is one-way. You can go forward, never backward. The one exception worth knowing: Taproot addresses (starting with bc1p) contain a public key directly instead of a hash of it. That’s still safe to share, because the private key can’t be calculated from a public key.
You’ll see several address formats: Legacy (starting with 1), Nested SegWit (usually starting with 3), Native SegWit (starting with bc1q) and Taproot (starting with bc1p). Newer formats usually cost less in fees, and all of them work on the same network, so you can send from one type to another. Which type to choose, and how to read an address before you pay it, is covered in Bitcoin Address Types and Derivation Paths.
Types of Bitcoin Wallets
Wallets come in a few categories, each trading convenience against security and control.
Hot Wallets (Software Wallets)
A hot wallet is any wallet whose private keys live on a device connected to the internet: a phone app, a desktop program or a browser extension. “Hot” refers to that connection: the keys are on a machine that runs lots of other software and talks to the internet all day.
Hot wallets are the most convenient option. You can send bitcoin in seconds, scan QR codes with your phone camera and check your balance anywhere. For small amounts you plan to spend or experiment with, a hot wallet is perfectly reasonable.
The trade-off is security. Malware, phishing, operating-system flaws and fake apps can all reach a connected device, and an attacker who controls your phone or computer may be able to copy your keys.
Popular hot wallets include:
- Electrum: a veteran desktop wallet with advanced features (covered in our Electrum wallet guide)
- Sparrow Wallet: a privacy-focused desktop wallet with excellent coin control
- BlueWallet: a simple mobile wallet for ordinary (on-chain) bitcoin. Its Lightning feature now needs a server you run yourself, because BlueWallet closed its hosted Lightning service in 2023
- Phoenix: a mobile wallet built for Lightning Network payments, the fast payment layer on top of Bitcoin
Cold Wallets (Hardware Wallets)
A cold wallet keeps your private keys on a device that never exposes them to the internet. The most common form is a hardware wallet: a small, purpose-built device that creates and stores keys and signs transactions itself. When you send bitcoin, your computer or phone prepares the transaction, the hardware wallet signs it, and only the signed transaction comes back. The private key never leaves the device.
Most hardware wallets connect to your computer by USB or Bluetooth to do this, so they aren’t cut off from the computer; what matters is that the keys stay inside and every payment needs your approval on the device’s own screen. Even if your computer is full of malware, the attacker can’t copy the keys out. (Some devices go further and never connect at all, passing data by QR code or memory card; that’s called an air gap, and the lesson on hardware wallets explains it.)
Hardware wallets are the standard recommendation for bitcoin you can’t afford to lose.
Well-known hardware wallets include:
- Ledger: uses a secure element (a tamper-resistant chip), supports many cryptocurrencies; its companion app is now called Ledger Wallet (formerly Ledger Live)
- Trezor: open-source firmware (the software that runs inside the device), strong community trust
- Coldcard: Bitcoin-only, advanced security features, can sign without ever plugging into a computer
- BitBox: Swiss-made and minimalist; the BitBox02 and the newer BitBox02 Nova each come in a Bitcoin-only edition
They’re compared side by side, with prices, in Ledger vs Trezor and Beyond, and the hardware wallet buying guide covers where to buy safely.
Paper Wallets (Outdated)
A paper wallet is a printed private key and its address, usually as QR codes. They were popular in Bitcoin’s early years. Today security experts widely discourage them:
- Address reuse: a paper wallet pushes you to receive everything at one address, which hurts privacy.
- Key exposure when spending: to spend, you have to import the whole private key into a hot wallet, exposing it to any malware there. Spending only part is fiddly and error-prone.
- Hard to make safely: creating one securely needs an offline computer running trusted software, which is harder than buying a hardware wallet.
- Fragile: paper degrades, ink fades, and one coffee spill can destroy access.
A hardware wallet fixes the first three problems: it uses a new address each time, signs without exposing the key, and generates keys for you. The fourth applies to any paper backup, which is why the lesson on seed phrase storage covers paper and metal.
Custodial Wallets
A custodial wallet is one where a company, typically an exchange, holds the private keys for you. When you buy bitcoin on an exchange and leave it there, you see a balance but you don’t control the keys. The exchange can freeze your account, be hacked, go bankrupt or be ordered by a regulator to restrict access. Bitcoiners sum this up as “not your keys, not your coins.” Custodial vs Non-Custodial Wallets covers it in depth, including the exchange failures that cost users billions.
How Bitcoin Wallets Work Under the Hood
Almost every wallet you’ll meet today uses Hierarchical Deterministic (HD) key generation, defined in BIP-32 and BIP-44 (BIP stands for Bitcoin Improvement Proposal, the documents that set shared standards).
HD Wallets: One Seed, Unlimited Keys
An HD wallet starts from a single secret, the seed, usually shown to you as the seed phrase. From it the wallet can calculate an effectively unlimited number of key pairs. “Deterministic” means the same seed always produces the same keys in the same order, so backing up the seed once backs up every key the wallet will ever make.
This solved a real problem from Bitcoin’s early days. The original Bitcoin Core wallet generated keys independently at random. Users had to back up the wallet file again and again, and keys created after the last backup could be lost with the file.
Derivation Paths
HD wallets organise keys in a tree, and a derivation path is the address of one branch of that tree. A typical path looks like m/84'/0'/0'/0/0:
- m: the master key (calculated from your seed)
- 84': the purpose (84 = Native SegWit addresses starting with bc1q)
- 0': the coin type (0 = Bitcoin)
- 0': the account number (you can have several accounts)
- 0: receiving (0) or change (1) addresses
- 0: the address number, which goes up by one for each new address
You don’t need to memorise this; your wallet handles it. When you tap “Receive” and get a new address, the wallet is moving to the next number on that last level. Some wallets keep showing the same address until it receives a payment. Paths matter in one situation: if you restore your seed in a different wallet and see an empty balance, the new wallet may be looking down a different branch. Bitcoin Address Types and Derivation Paths explains what to do.
How Wallets Track Your Balance
Your wallet doesn’t store a single balance number. It looks up the UTXOs (unspent transaction outputs) paid to the addresses it has generated. A UTXO is a chunk of bitcoin sitting at one of your addresses, like a banknote in a drawer, and your balance is the sum of them.
When you send bitcoin, the wallet picks one or more UTXOs, builds a transaction, signs it and broadcasts it. If the UTXOs add up to more than you’re sending, what’s left after the fee comes back to a new address of yours as “change”, like getting change for a banknote. This is why your balance can sit on several addresses at once, why the fee depends on how many UTXOs a payment uses, and why combining coins from different sources can reveal they belong to the same person. Course 1’s lesson on how Bitcoin transactions work goes deeper.
Choosing Your First Bitcoin Wallet
The right wallet depends on what you’re doing with bitcoin.
For Learning and Small Amounts
Start with a free phone wallet and a small amount. BlueWallet is a good first on-chain wallet: you’ll make your seed, receive a payment and watch it confirm. Phoenix is a good first Lightning wallet for small, instant payments. Both are non-custodial: you hold the keys.
For Meaningful Savings
Once your holdings reach an amount you’d be upset to lose, move them to a hardware wallet. A common guideline: if your bitcoin is worth more than the device, it belongs on one. On the makers’ own stores, prices run from $59 (Trezor Safe 3) to $399 (Ledger Stax) as of November 2026, and this course’s pick for beginners, the Trezor Safe 5, costs $129. Every model’s price is in the table in Ledger vs Trezor and Beyond.
For Maximum Security (Later)
People holding large amounts often use multisignature (multisig) setups, where spending needs several keys kept on separate devices in separate places, so no single loss or theft is fatal. It’s more complex and easy to get wrong, so it’s taught in Course 5: multisig wallets explained.
What to Avoid
Don’t keep large amounts on an exchange. Use exchanges to buy and sell, then withdraw to your own wallet. Your First Withdrawal walks you through it step by step.
What You’ll Learn Next in This Course
- Keys and recovery words: who should hold your keys (custodial vs non-custodial) and how seed phrases work.
- Your device and your backup: how hardware wallets work, how to choose one, how to set it up and test your backup, and how to store your words.
- Using it safely: how to read address types and derivation paths, your first withdrawal from an exchange, the scams that empty self-custody wallets, Electrum as a desktop wallet, Lightning wallets for everyday payments, and your own wallet plan.
FAQ
Can someone hack my bitcoin wallet?
It depends on the wallet type. A hardware wallet is very hard to attack remotely because the private keys stay on the device. A hot wallet on a compromised phone or computer is more vulnerable: malware could copy keys or trick you into signing a payment to the wrong address. Almost all bitcoin theft happens at the wallet or exchange, through stolen keys, stolen seed phrases or tricked users, not by breaking Bitcoin’s cryptography. Your best defences are a hardware wallet and a well-protected seed phrase; The Scams That Empty Self-Custody Wallets shows the tricks to watch for.
What happens if I lose my bitcoin wallet?
If you lose the phone or device but still have your seed phrase, you can restore everything on a new device: the words, plus the passphrase if you added one, rebuild every key. If you lose both the device and the seed phrase, the bitcoin is gone for good; nobody, including Bitcoin’s developers, can recover it.
Do I need a bitcoin wallet to buy bitcoin?
Technically, no. You can buy on an exchange and leave it there, but then the exchange holds the keys. Buying and holding are two separate steps: many people buy on an exchange and then withdraw to their own wallet.
Are bitcoin wallets free?
Software wallets (Electrum, Sparrow, BlueWallet, Phoenix) are free to download. Hardware wallets cost $59–$399 on the makers’ stores (November 2026); you’re paying for a dedicated device that keeps the keys off your computer.
What is the safest type of bitcoin wallet?
For most people, a hardware wallet from a reputable maker, bought new from the maker’s own store, with a well-stored and tested seed phrase backup. Multisig removes single points of failure but adds complexity (Course 5). The safest wallet is one whose backup you can reliably restore and whose keys only you control. Our cold vs hot wallet security comparison has more detail.
Check Your Understanding
1. Your phone wallet shows a balance of 0.01 BTC. Where is that bitcoin?
Answer
On the blockchain, recorded as one or more UTXOs paid to your addresses. The phone holds only the keys that can spend them, which is why your seed phrase can rebuild the wallet on another device.
2. Why is it safe to share your address but never your private key or seed phrase?
Answer
The address (or public key) can’t be turned back into the private key; the calculation only runs one way. The private key, or the seed phrase that produces it, is what authorises spending, so anyone who has it controls your bitcoin.
3. What’s the practical difference between a hot wallet and a hardware wallet?
Answer
In a hot wallet the keys sit on an internet-connected phone or computer, where malware can reach them. A hardware wallet keeps the keys inside a dedicated device that signs payments itself and shows you what you’re approving on its own screen, so a compromised computer can’t copy the keys.