What is the one-sentence takeaway from this lesson?
When you own a crypto asset, you do not own a file sitting in your wallet, you own the private key that alone can sign a transaction on the blockchain. The wallet is just a tool that stores and uses that key.
This is the second lesson in the foundational path of charliedesk Classroom. We will not advise anyone on what to buy. We will explain how the thing works technically and what that means in practice.
So where do my coins "sit" if not in the wallet?
Picture a concrete situation. You send 1 BTC to your own address. That 1 BTC is not a file that gets transferred to your phone. It stays recorded in a ledger (the blockchain) maintained by a network of thousands of computers around the world. In that ledger there is just an entry: "this address holds 1 BTC and it can be moved by whoever proves ownership of the corresponding key."
So your wallet does not hold coins. It holds the key with which you can change that ledger entry (for example, send 1 BTC to someone else). The difference is fundamental: if your phone burned up, the coins would not vanish from the network. Only your key would vanish. And without the key you cannot reach the entry.
What is a private key and what is an address?
Let us distinguish two things that beginners often confuse.
| Term | What it is | Who it is shared with |
|---|---|---|
| Address (public key) | The account number anyone can send funds to | Publicly, no problem |
| Private key | The secret that signs outgoing transactions | Never with anyone |
The address is like an account number: you can give it to anyone who wants to send you something. The private key is like a signature and a PIN combined. Whoever knows it can spend everything at that address. That is why there is only one rule for the private key: it is not shared with anyone and never typed into online forms. You will find the detailed definition in our glossary under the entry private-key.
So what is a seed phrase (recovery phrase)?
A modern wallet usually manages not one key but many keys at once. So the user does not have to remember them one by one, there is the seed phrase: usually 12 or 24 words in an exact order.
Those words are not a password to the app. They are a human-readable form of the master secret from which all your keys are mathematically derived. Concretely: whoever has your 12 words can enter them into any other wallet in the world and thereby gain full control over your funds. They do not need your phone, your app password, or anything else.
Two practical points follow from this, and they are true regardless of which wallet you use:
- Whoever reads your seed phrase takes over control. That is why it is not photographed, not stored in the cloud, not sent in a chat, and not entered on sites that ask for it "for security reasons." This is the most common way people lose their funds.
- Whoever loses the seed phrase loses access. There is no "forgot password," no support team can recover your key. This very impossibility of recovery is the flip side of the fact that no one else controls the funds.
Why is "not your keys, not your coins" a technical description and not a slogan?
This phrase is often said as a catchphrase, but in reality it just describes how the system works.
Let us compare two cases in a concrete situation: you have 1 ETH.
Case A: you hold it in your own wallet, where you know the seed phrase. Only someone who has your key can sign a transaction. No one can freeze it for you or use it. But the responsibility for storing it safely is entirely yours.
Case B: you have 1 ETH in an account on an exchange. On the blockchain, the funds are controlled by a key held by the exchange, not by you. What you see in the app is an entry in the exchange's database: "we owe this user 1 ETH." As long as the exchange operates and allows withdrawals, in practice it is the same. But if the exchange freezes withdrawals, goes bankrupt, or is hacked, your claim depends on whether and how it pays you out. The key that actually moves the funds is not in your hands.
That is where the phrase comes from. It is not a moral appeal or a recommendation. It is a description of who holds the signing right in each arrangement. "Not your keys, not your coins" literally means: if you hold the private key, you control the funds; if someone else holds it, they control them (and bear the risk for them).
Neither approach is objectively "correct." Each shifts the risk somewhere else: self-custody puts all the responsibility on you, third-party custody has you relying on that party being solvent and honest. charliedesk does not tell you which to choose. It tells you what risk each one entails.
What do "hardware" and "software" wallets mean in this picture?
Both types do the same thing: they manage keys and sign transactions. They differ mainly in where the private key lives and when it touches the internet.
- A software wallet is an app on your phone or in your browser. The key is stored on a device connected to the internet, so it is convenient but exposed to malware on that same device.
- A hardware wallet is a standalone device that keeps the key isolated and signs the transaction inside itself. It only sends the finished signature to the computer. Here too the rule holds: a seed phrase backed up outside the device still needs to be protected just as strictly.
What both share is the main thing: security stands or falls with who has access to the seed phrase.
What should I be able to do now and what remains uncertain?
After this lesson you should be able to:
- explain that you own keys, not files containing coins, and that the coins remain in the network's ledger;
- distinguish the address (can be shared) from the private key and the seed phrase (never shared);
- describe why seed phrase = full control, and therefore why it does not go into the cloud or into forms;
- say in your own words who holds the key in the case of self-custody and in the case of an exchange, and what risk follows from that.
What this lesson does not decide for you and what remains open:
- Which custody method is right for you. That depends on your situation, the amount, and your ability to back up securely. charliedesk does not give you a recommendation on this.
- How exactly to back up the seed phrase safely. There are several approaches with different trade-offs; that is a topic for a separate lesson.
- Which specific wallets or exchanges are trustworthy. This changes over time and cannot be guaranteed permanently; it is always an assessment as of a given date, not a permanent truth.