WALLET SECURITY & SELF-CUSTODY
Plain English
Owning crypto means owning a 'private key' — a long secret string that controls your funds. Lose it and your crypto is gone forever. Hardware wallets like Ledger and Trezor keep this key offline, away from hackers.
Going deeper
Crypto wallets generate a 12 or 24-word seed phrase that mathematically derives all your private keys. Anyone with the seed can drain your funds; everyone, including you, must protect it. Hot wallets (MetaMask, Phantom) live on internet-connected devices — convenient but vulnerable. Cold wallets (hardware devices) keep keys offline, signing transactions without exposing the key. Best practice: hot wallet for daily DeFi (small balances), cold wallet for long-term holdings, and the seed phrase backed up on metal (not paper) in two separate locations.
Examples
The phishing loss pattern
A user clicks a fake MetaMask popup and signs a malicious transaction. Within minutes their wallet is drained. Hardware wallets prevent this — every transaction must be physically confirmed on the device screen.
Seed phrase backup
Write your 24-word seed on metal plates (Cryptosteel, Billfodl). Paper burns and degrades. Store one copy at home and one at a bank deposit box — both secure, neither catastrophic if one is lost.