What is a crypto wallet, really?

Think of a blockchain as a giant public ledger of who owns what. Your crypto isn't stored in your wallet — it's a balance assigned to an address on that ledger. A wallet is a piece of software (or hardware) that holds the private key needed to sign transactions from that address.

If you have the key, you can spend the crypto. If someone else gets the key, they can spend it too. That's why wallets are sometimes described as "keys, not coins."

Public addresses vs private keys

Public address — like an email address. Share it to receive funds.
Private key — like a password to your email. Never share it. Anyone who has it controls the funds.
Seed phrase — a human-readable backup of your private keys. Twelve to twenty-five words. Losing it = losing the funds. Sharing it = giving the funds away.

Hot wallets vs cold wallets

Hot wallets are connected to the internet. Desktop apps like XELIS Wallet, mobile apps, and browser extensions are all hot wallets. They're convenient — but the device they run on is connected and therefore exposed.

Cold wallets keep keys offline. A hardware wallet (Ledger, Trezor) is the most common form. A paper backup of a seed phrase is also a form of cold storage. Cold wallets are inconvenient to use, but very hard to compromise remotely.

A common pattern: keep a small "spending" balance in a hot wallet and the bulk of your holdings in cold storage.

Software wallets vs hardware wallets

Software wallet — runs on a computer or phone you already own. Free or low cost. Examples: XELIS Wallet, MetaMask, Phantom.
Hardware wallet — a dedicated device that signs transactions offline. Costs $50–$200. Examples: Ledger, Trezor, Coldcard.

Custodial vs self-custodial

An exchange account is a custodial wallet — the exchange holds your keys. A self-custodial wallet means you hold the keys. We covered the trade-offs in self-custody explained.

What to look for in a wallet

Open source. You (or the community) can audit the code.
Self-custodial. Keys stay on your device.
Signed releases. You can verify the binary you downloaded is the one the developers built.
Good backup workflow. Standard BIP-39 or equivalent seed phrase, with a clear backup prompt.
Reasonable defaults. Privacy on by default. Encryption on by default. Auto-update on by default.
Active maintenance. Recent commits, fast security response, accessible team.

Wallet security basics

Never type your seed phrase into anything connected to the internet that isn't an actual wallet.
Never share your seed phrase, ever, for any reason.
Only download wallet software from the official site or verified GitHub releases.
Use a password manager for wallet passwords (but never store the seed there).
Keep your computer's OS and antivirus up to date.

Wallet types by use case

There's no single "best" crypto wallet — the right one depends on what you're trying to do.

Long-term storage of significant funds. Hardware wallet, ideally with a passphrase, kept in a safe. Backup seed in a separate location, ideally on metal.
Daily spending / small balances. A mobile or desktop hot wallet on a clean device. Convenience matters; the small balance bounds the risk.
Privacy-first holdings. A wallet on a confidential chain like XELIS Wallet, so the balance and transaction history aren't public to begin with.
Active DeFi / trading. A browser-extension wallet (MetaMask, Phantom). Keep it on a dedicated browser profile and only hold what you're actively using.
Multi-user / business custody. A multi-sig setup that requires multiple parties to sign — eliminates single-point-of-failure key loss.

The wallet selection checklist

Before you trust a wallet with real money, walk through this checklist. Most rugged wallets pass all of it; most flashy new ones fail at least one.

Is the source code public? If you can't read the code (or pay someone to), you're trusting marketing claims.
Are the binaries signed and reproducibly built? Without signing, you have no way to verify what you downloaded matches the source.
Are seed phrases standard? Standard BIP-39 (or comparable) means you can recover the wallet in other software if this one disappears.
Where does the wallet store keys? Locally, encrypted with your password, ideally never leaving the device.
Who funds the project? A wallet maintained by volunteers may be slower; one maintained by a venture-backed company may pivot toward custodial products. Both can be fine — knowing matters.
How does it handle privacy? Does it leak addresses to a remote server? Phone home? Use a privacy-respecting wallet on a privacy-first chain when that matters.
How active is the project? Recent commits, responsive security disclosures, real documentation.

Anatomy of a wallet file

Most modern desktop wallets, XELIS Wallet included, keep a single encrypted file on disk. That file contains:

The encrypted private key material.
Metadata: addresses, labels, transaction history cache, settings.
Nothing else of value — no logins, no IP records.

The encryption is unlocked by your password each time you open the wallet. If an attacker gets the file but not the password, they have ciphertext. If they get both, they have your funds. That's why long passwords and a clean machine matter.

Mobile vs desktop wallets

Mobile wallets are convenient and usually safer than people assume — modern phones have hardware-backed key storage and tightly sandboxed apps. They're a strong default for small to moderate balances.

Desktop wallets like XELIS Wallet give you better screen real estate, easier backups, easier file management, and usually a more complete feature set. They're the better choice for managing your "main" stash and for running anything that needs serious throughput, like merchant-style payment processing.

How to set up your first wallet (in 4 steps)

Pick the wallet. For privacy and self-custody, XELIS Wallet is a strong default. Download only from the official site.
Verify the source. Make sure the file came from xeliswallet.com or the official GitHub release page before running the installer.
Install and create. Run through the wizard, set a strong password, and write the seed phrase on paper. Do not photograph it, do not paste it anywhere.
Test your backup. Install the wallet on a second machine (or a clean profile), restore from your written seed, and verify the receive address matches.

Crypto wallet FAQs

Can I use the same wallet for multiple cryptocurrencies?

Some wallets are multi-chain (Trust Wallet, Exodus). XELIS Wallet is dedicated to XELIS, which is the right choice when you want a wallet optimised for one chain's privacy guarantees rather than broad compatibility.

What happens if I forget my password?

If you still have your seed phrase, you restore the wallet from seed and set a new password. If you've lost both the password and the seed, the funds are unrecoverable. There is no support line that can help.

Is a browser-extension wallet safe?

Reasonably, with caveats. Use a dedicated browser profile, never install other extensions on that profile, and never paste your seed into a website even when prompted. For larger holdings, prefer a desktop or hardware wallet.

Do I need a hardware wallet?

For amounts you'd be devastated to lose, yes. The $50–$150 cost is trivial insurance. For small amounts you actively spend, a well-maintained hot wallet on a clean machine is fine.

Where to go next

If you want to try a privacy-first, self-custodial desktop wallet, download XELIS Wallet and follow the setup guide. It walks you through every step, including the backup that you really should not skip. From there, the security guide and self-custody explainer are the natural next reads.