What Is an Online Crypto Wallet? How Wallets Work

An online crypto wallet is an app, browser extension, device, or service that helps you access blockchain addresses and approve transactions. It does not usually store cryptocurrency inside the app like a physical wallet holds cash. Instead, crypto assets are recorded on a blockchain, and a wallet manages the cryptographic keys that let someone control them.

A wallet can help you:

• View balances and transaction history associated with your addresses.
• Receive crypto by sharing a public address or scanning a QR code.
• Send assets by signing a transaction with the appropriate key.
• Connect to compatible blockchain apps, sometimes called dApps.

The phrase “online wallet” often means a wallet accessed through an internet-connected phone, computer, or website. Many are software wallets, but the term can also be used loosely for accounts at exchanges. Those accounts and self-custody wallet apps work differently: an exchange may control the keys, while a self-custody wallet leaves key control with you. Knowing which kind you have is essential before depositing funds or relying on a recovery process.

Wallets work with cryptographic keys. A public address is like an account number: you can share it so someone can send you assets. A private key is secret proof of control. It lets the wallet authorize transactions from the address. Anyone who obtains the private key—or a recovery phrase that can recreate it—may be able to move the assets, so it must never be shared.

Many self-custody wallets create a recovery phrase during setup. This is a human-readable backup for the keys. The exact setup varies, but a wallet may use the phrase to restore access on a replacement device. Keep it offline in a secure place, follow the wallet’s backup instructions, and do not enter it into a website or share it with someone claiming to provide support.

A wallet address is not the same as a private key. Sharing an address lets others send assets to it and may let them view its public blockchain activity. It does not, by itself, let them spend the assets. Be aware that public addresses and transaction histories are generally visible, so they should not be treated as private personal information.

The main custody question is who controls the private keys. With a custodial wallet, a company controls the keys and records your balance in an account. This can feel familiar because access may rely on a password, account recovery, and the provider’s support process. The trade-off is that you depend on the provider to maintain access and process withdrawals under its terms. Account requirements and protections vary.

With a self-custody wallet, you control the keys. The wallet software helps you use them, but the provider generally cannot reset your recovery phrase if you lose it. You have more direct control over transactions, along with greater responsibility for backups, device security, and checking what you approve.

Type	Who controls the keys?	Main responsibility
Custodial account	The service	Protect account access and follow service rules
Self-custody wallet	You	Protect keys, recovery phrase, and devices

A self-custody wallet is not automatically safer in every situation, and a custodial service is not automatically safer because it offers account recovery. Consider your ability to protect backups, your need for direct control, and the provider’s terms before choosing.

Wallets can also be compared by how they connect to the internet. A hot wallet is connected to an internet-enabled device or service. Phone apps, browser extensions, and many web wallets are hot wallets. They are convenient for frequent use, but malware, fake apps, phishing, and compromised devices can put access at risk.

A hardware wallet keeps signing keys in a dedicated device and can require physical confirmation for transactions. It is commonly used to reduce exposure of keys to an internet-connected computer, but it does not remove every risk. A user can still approve a harmful transaction, enter a recovery phrase into a scam site, or lose a poorly protected backup. Hardware devices also need to be obtained from a trustworthy source and set up according to their instructions.

“Cold storage” generally means keeping keys offline, while “hot storage” means keeping them accessible through connected software or services. These are broad descriptions, not guarantees of safety. Some people use a hot wallet for smaller, regular transactions and keep longer-term holdings under stronger offline protection. The right arrangement depends on how often you transact, the value at risk, and whether you can reliably manage backups and device security.

Before setting up a wallet, decide whether you need a custodial account or self-custody, which blockchains and assets you plan to use, and whether you need mobile, desktop, browser, or hardware access. A wallet that supports one network may not support another, even if both use assets with similar names. Check the project’s own documentation for supported networks, token standards, backup options, and security features.

For a self-custody software wallet, a typical setup looks like this:

1. Obtain the wallet app or extension through the project’s official distribution channel. Check the developer and app details to avoid impostors.
2. Create a wallet and follow its setup instructions. Never use a recovery phrase supplied by someone else.
3. Write down the recovery phrase if the wallet provides one, and store it offline in a private, secure place.
4. Set a strong device passcode and enable available protections, such as biometric unlocking, where appropriate.
5. Consider a small test transaction before transferring a larger amount.

Do not assume every wallet uses the same setup or backup method. For exchange accounts, read the service’s account recovery, withdrawal, identity-verification, and custody terms. Review these details before depositing funds, not only after a problem occurs.

To receive crypto, open the wallet’s receive screen and select the exact asset and network you expect. Copy the address or display its QR code, then check that the sender is using the same network. Some networks use different address formats; others can share formats while still being incompatible for a particular transfer. A matching-looking address alone does not prove that the asset will arrive in the right place.

To send, select the asset, enter the destination address, choose the network if prompted, and review the amount and fee. Check the first and last characters of a pasted address against the intended destination. Malware can replace copied addresses, and a wrong address may be impossible to recover. If the amount is significant or the destination is unfamiliar, a small test transfer can help identify mistakes, though it may mean paying a fee twice.

Blockchain transactions are generally difficult or impossible to reverse once confirmed. Before approving, make sure you understand the destination, asset, network, and fee shown by the wallet. A wallet’s transaction history may show whether a transaction was submitted or confirmed, but the exact status labels and timing depend on the wallet and blockchain.

A crypto asset exists on a particular blockchain or network, and transactions are processed according to that network’s rules. A wallet may support multiple networks, but support for one does not imply support for every token or network. Always verify the precise network for both the sending and receiving wallet. Sending an asset over an unsupported route can leave it inaccessible or require technical recovery that may not be possible.

Most blockchain transactions require a network fee, often called a gas fee on smart-contract networks. The fee is paid for processing the transaction, not necessarily to the wallet provider. The required fee and payment asset depend on the network and transaction. A wallet may also charge a separate service fee for features such as buying or swapping crypto; these charges should be shown before approval, but their presentation can vary.

If a transfer is delayed or a fee seems different from what you expected, check the wallet’s current fee display and the relevant blockchain’s transaction details. Network congestion can affect confirmation times and fees. Do not rely on an old estimate or a fee quoted for a different network. For changing wallet support and fee policies, consult the wallet provider’s official documentation before moving assets.

Many wallets let you connect to dApps for activities such as trading tokens, lending, gaming, or collecting digital assets. Connecting a wallet can reveal your public address to the app. It does not always move funds, but the next step may ask you to sign a message or approve a transaction. Read the wallet’s prompt closely: it should describe what you are authorizing, although technical wording can be difficult to interpret.

A signature may prove that you control an address, while a transaction can move assets, pay a fee, or grant a contract permission to use tokens. An approval can remain active after the original interaction. Do not sign a request simply because a site says it is needed to receive a reward, fix an account, or verify your wallet. Stop if the action is unclear or the site is unfamiliar.

Use the intended network, check the dApp’s identity carefully, and consider a separate wallet with limited funds for experimentation. Disconnecting a wallet from a site does not necessarily revoke token approvals already granted on-chain. If you use approvals, learn how to review and revoke them using tools appropriate to that blockchain, and verify the transaction details before confirming any change.

The most important wallet security rule is to keep your private key and recovery phrase secret. No legitimate support agent needs them to troubleshoot an account. Treat any request to reveal or enter them into a webpage, chat, or form as a serious warning. Store backups offline, away from cameras and cloud notes, and consider how you would recover access if your device were lost or damaged.

Other practical precautions include:

• Download wallet software only from a source you have independently verified.
• Use device updates, a strong passcode, and reputable security protections.
• Check addresses and transaction details on the wallet’s confirmation screen.
• Ignore unsolicited messages about urgent account problems, giveaways, or recovery help.
• Keep only the funds you need for routine use in a wallet used for frequent dApp connections.

If you suspect a key or phrase has been exposed, act quickly from a clean, trusted device. For self-custody, creating a new wallet and moving assets may be necessary, but only if you can do so safely and on the correct network. If an exchange account is involved, contact its official support channel and secure the account. Never pay a stranger who promises guaranteed recovery; no one can reverse a confirmed blockchain transfer simply by knowing the transaction details.

Start with your intended use. If you mainly buy or sell crypto through a company, an exchange account may be convenient, but it is custodial and governed by that service’s rules. If you need to interact directly with blockchain apps, a self-custody wallet may give you more direct control, but you must safeguard its keys and backups. If you use multiple ecosystems, check that each wallet supports the exact networks, assets, and dApps you need.

Also consider ease of recovery, transaction clarity, device compatibility, and how the wallet explains fees and permissions. Look for clear documentation about custody, supported networks, backup procedures, and security practices. Do not treat a polished interface or a large feature list as proof that a wallet is appropriate for you. Features, supported assets, and terms can change, so verify them with the project before use.

Examples in the wallet category include OKX Wallet, which is described as a self-custody multi-chain wallet, and Talisman, which supports several blockchain ecosystems. Crypto.com’s exchange app is a separate kind of product from a self-custody wallet. These examples illustrate why it is important to check the specific product and its custody model rather than relying on a familiar brand name. No wallet removes the risks of market loss, scams, user error, or blockchain failure.