Mobile wallets
Apps installed on a smartphone. Useful for convenient access, payments and supported applications.
FINTECH DYNASTY · WALLET EDUCATION
Understand how software wallets work, what they are used for, and how to manage the risks of keeping cryptocurrency accessible on an internet-connected device.
No Trading · No Hype
A hot wallet uses private keys on an internet-connected device, such as a smartphone or computer. This makes it convenient for sending crypto and interacting with blockchain applications, but exposes those keys to risks associated with the device and its software.
Many hot wallets are self-custodial: you control the keys and are responsible for securing access. An exchange account is different. The exchange generally controls the keys and processes withdrawals on your behalf.
A wallet app does not have to remain open for you to receive crypto. Transfers are recorded on the blockchain; the app displays the account’s activity when it connects to the network.
Wallets commonly use network nodes or service providers to retrieve balances and submit transactions. The app’s displayed balance is a view of blockchain records.
A hot wallet can act as a working wallet, with a limited balance for planned activities.
Apps installed on a smartphone. Useful for convenient access, payments and supported applications.
Extensions or browser-based interfaces that connect to blockchain websites. Check both the extension’s source and the sites you connect to.
Programs installed on a computer. Features vary, and the computer’s security remains part of the wallet’s security.
Names you may encounter include MetaMask, Xaman, Trust Wallet and Bifrost. Xaman was previously known as XUMM.
These are examples, not rankings or endorsements. Supported assets, networks, hardware connections and features can change. Check each provider’s official documentation before choosing a wallet.
Explore our Popular Hot Wallets & Ecosystems guide for more context.
The important distinction is how the keys are stored and used. A software interface can display a hardware-wallet account without holding that account’s private keys.
| Consideration | Hot wallet | Cold storage / hardware wallet |
|---|---|---|
| Key storage | Keys used on an internet-connected device. | Keys kept isolated from the connected computer or phone. |
| Convenience | Easy access for frequent activity. | Usually involves additional steps to authorize spending. |
| Common role | Everyday use, learning and application interaction. | Longer-term custody and reducing online key exposure. |
| Main concerns | Malware, exposed backups, phishing and harmful signing. | Backup loss, device handling and harmful signing. |
| Responsibility | Protect keys, backups and approvals. | Protect keys, backups and approvals. |
Neither approach removes the need to understand what you approve. Hardware wallets can protect keys from extraction while still signing a harmful transaction if you authorize it.
Read the beginner lesson: Wallets: Hot vs Cold.
A supported hardware connection lets the software prepare transactions while the hardware device signs them. Follow the manufacturer’s official connection instructions.
Wallet recovery methods vary. Some use additional passphrases, multiple backup shares or other arrangements. Understand the method used by your wallet before depositing significant funds.
Uninstalling an app does not erase the blockchain account, but losing the required recovery material can prevent you from accessing it again.
A new account under the same recovery phrase is not independent protection against that phrase being exposed.
Learn more: Private Keys & Seed Phrases .
“Connect wallet,” “approve” and “sign” can represent different actions. Read the request instead of treating every prompt as a routine login.
A basic connection usually shares an account address and allows the site to request further actions. It does not normally give the site unrestricted spending access by itself.
On networks that use token allowances, an approval can let a contract spend a particular token. Check the spender, asset and limit. An unlimited allowance may expose more than the amount needed for your immediate activity.
Disconnecting a website does not necessarily cancel its existing on-chain approvals. Review unused allowances through trusted wallet features or official blockchain tools.
Transactions can move assets or change permissions. Some message signatures can also authorize valuable actions, even when no network fee appears at the time of signing.
If the request is unclear, unexpected or unreadable, stop and verify it through official documentation.
Support for a token’s name does not guarantee support for every network on which it exists. Sending on an unsupported network can make recovery difficult or impossible.
Many networks require their native asset to pay transaction fees, even when you are sending another token. Some also have account reserves, minimum balances or recipient-tag requirements.
Read: Moving Crypto Safely.
Stop interacting with the suspicious site. If only a token approval is unsafe, review and revoke that permission using trusted tools. Revocation does not recover assets already transferred.
If the recovery phrase or private key has been exposed, changing the app password is insufficient. Use a clean device and an official wallet to create fresh keys, then move remaining assets carefully. Seek verified guidance if an attacker is actively moving funds.
Avoid anyone promising guaranteed recovery or asking for your phrase. Learn more about Crypto Scams.
No. They are useful tools with different exposure from offline key storage. Device security, backups, balances and the actions you authorize all affect the risk.
Yes. Learning with a small amount can help you understand addresses, networks, fees and backups before handling larger balances.
Yes. A working wallet can support everyday activity while a separately secured wallet holds assets you use less frequently.
No. Closing the app does not change how its keys were generated, stored or exposed. Switching off the phone alone does not provide the isolation of a purpose-built signing device.
No. An exchange generally controls the keys for deposited assets. With a self-custody wallet, you control the keys or the wallet’s specified authorization mechanism.
A genuinely watch-only setup displays activity using public information. It cannot sign spending transactions by itself.
For a conventional self-custody seed-based wallet, support generally cannot recreate your missing phrase. Understand and protect your wallet’s recovery method before funding it.
Hot wallets make cryptocurrency accessible. Responsible use means understanding custody, protecting recovery material, limiting exposure and checking what you sign.
Convenience and security require deliberate choices. Choose your setup around how you actually use your assets.
Educational information only. Wallet features and network rules vary. Verify current instructions with the official provider.