TL;DR: Crypto is controlled by private keys — whoever holds the key controls the coins. Exchanges hold your keys by default (convenient but risky). Personal wallets give you full control. For large amounts, cold wallets (hardware devices) are the gold standard.
Where Your Crypto Actually Lives
A common misconception: your crypto doesn't "live" on an exchange the way money lives in a bank account. It lives on the blockchain. What exchanges and wallets hold are private keys — the cryptographic passwords that authorise transactions from your address.
This distinction matters enormously. If an exchange holds your keys and gets hacked, you can lose everything. If you hold your own keys and someone steals them, you also lose everything — but at least you're in control of your own security.
Leaving Crypto on an Exchange
When you buy crypto on Coinbase or Binance and leave it there, the exchange holds your private keys on your behalf. This is called a "custodial" arrangement.
Pros: convenient, easy to trade, no technical setup required
Cons: the exchange can be hacked (Mt. Gox lost 850,000 BTC in 2014; FTX lost customer funds in 2022), the exchange can freeze withdrawals, you don't truly own the crypto ("not your keys, not your coins")
For small amounts you're actively trading, leaving funds on a reputable exchange is acceptable. For significant long-term holdings, it's not recommended.
Hot Wallets: Software Wallets
A hot wallet is a software application that stores your private keys on your internet-connected device. Examples: MetaMask (browser extension), Trust Wallet (mobile), Exodus (desktop).
Pros: free, easy to use, full control over your keys, compatible with DeFi applications
Cons: vulnerable to malware, phishing, and device theft; if your device is compromised, your funds can be stolen
Hot wallets are appropriate for active use — interacting with DeFi, making regular transactions — but not for storing your life savings.
Cold Wallets: Hardware Devices
A cold wallet (hardware wallet) is a physical device — similar to a USB drive — that stores your private keys offline. Popular options: Ledger Nano X, Trezor Model T, Coldcard.
Pros: keys never touch the internet (immune to remote hacks), transactions must be physically confirmed on the device, works even if your computer is infected with malware
Cons: costs €50–200, requires some setup, less convenient for frequent trading
For anyone holding more than €500–1,000 in crypto long-term, a hardware wallet is the most secure option available.
What Is a Seed Phrase?
When you create any wallet, you're given a seed phrase — typically 12 or 24 random words. This phrase is the master key to your entire wallet. It can restore access to your funds on any compatible device if your original device is lost, stolen, or broken.
Critical rules:
- Write it down on paper — never save it digitally (photos, notes apps, cloud storage)
- Store it offline, in a secure location — a fireproof safe or a trusted physical location
- Never share it with anyone — no wallet provider, exchange, or support team will ever need it
- Make multiple copies — consider a fireproof envelope in a second location
If you lose your seed phrase and your device breaks, your crypto is gone permanently. There is no password reset.
Which Storage Method Should You Use?
| Method | Best For | Risk Level |
|---|---|---|
| Exchange | Active trading, small amounts | Medium–High |
| Hot wallet | DeFi, regular transactions | Medium |
| Cold wallet | Long-term storage, large amounts | Low |
Key Takeaways
- Crypto is controlled by private keys — whoever holds the key controls the coins
- Exchanges are convenient but custodial — they hold your keys
- Hardware wallets are the safest option for significant, long-term holdings
- Your seed phrase is irreplaceable — store it offline, in writing, in a safe place