What is a crypto wallet, and why is the seed phrase everything?
A wallet stores keys, not coins. Hot vs cold wallets, where to keep a 12 or 24 word seed phrase, how wallets get drained, and what happens when the phrase is lost.
A crypto wallet does not store coins. It stores the keys that control coins recorded on a blockchain, and the seed phrase, usually 12 or 24 ordinary words, is the master backup for every key inside. Whoever knows those words owns the money. Not figuratively. The words are the money, and every wallet drainer on the internet is hunting for them.
Banks spoiled us. Forget a password and support resets it. Crypto has no support desk, no undo, and no fraud department. That is the trade: full control, full responsibility. Most crypto losses are not exotic hacks. They are seed phrases typed into fake websites, photographed into cloud backups, or handed to a helpful stranger in a support chat.
What is the difference between hot and cold wallets?
A hot wallet lives on an internet connected device. A phone app, a browser extension. Convenient, free, and exposed to everything that goes wrong on that device: malware, phishing pages, a fake app in the store, clipboard hijackers that swap the address you paste.
A cold wallet keeps keys on a small offline device that signs transactions without revealing the secret. Malware on the computer can beg all it wants, but the key never leaves the hardware, and the transaction shows on the device screen for approval. For small change, a hot wallet is fine, the way a pocket holds lunch money. For savings, cold storage is the difference between a wallet and a bank vault.
Buy hardware wallets only from the manufacturer. Used or discounted devices from marketplace sellers have arrived preloaded with known seed phrases, and the coins evaporate the day they land.
Where should I keep my seed phrase?
On paper or stamped metal, offline, somewhere a burglary or a house fire will not take it. Two copies in two places beats one copy anywhere.
Never in a phone photo. Never in a notes app, a password manager's cloud sync, an email draft, or a screenshot. Phone galleries sync to the cloud, and cloud accounts get phished every day. Thieves who crack an email account search it for the words seed and recovery before anything else. If the phrase has ever touched an online account, treat it as leaked and move the coins to a fresh wallet.
How do wallets actually get drained?
Almost always, the owner signs the theft. A fake airdrop site asks you to connect a wallet and approve a transaction, and the approval quietly grants a contract permission to spend your tokens. A support account that answered your complaint on social media walks you into validating your wallet, which means reading your seed words to a thief. A fake wallet app, ranked by paid ads above the real one, collects phrases at setup.
The pattern underneath is one pattern: something urgent asks, and the owner types or signs. Slow down at exactly the moments crypto makes you feel rushed. No real company, exchange, or wallet developer will ever need your seed phrase. Anyone who asks is a thief, without exception, every single time.
What happens if I lose the seed phrase?
If the wallet still works on your device, nothing is lost yet. Send everything to a new wallet with a fresh phrase you back up properly, and retire the old one. If the device died and the phrase is gone, so are the coins, permanently, and no one on earth can help. An estimated fifth of all bitcoin sits frozen in wallets like that, including a hard drive in a Welsh landfill holding thousands of coins its owner has fought to excavate for a decade.
Write the words down. Check the backup twice a year. It is boring, and boring is what security looks like when it works.