Choosing a crypto wallet
Custodial vs non-custodial, five beginner-friendly wallets compared, step-by-step MetaMask setup, and what 'not your keys, not your coins' actually means.
Picking your first wallet is the single most important decision in self-custody. The wrong choice usually means losing money — either to an exchange failure, a phishing site, or simply forgetting how to recover your funds. This guide explains the two big categories, compares five real wallets, walks you through installing MetaMask, and unpacks the most repeated piece of crypto advice: 'not your keys, not your coins'.
Custodial vs non-custodial — what's actually at stake
A custodial wallet is one where a company holds your private keys for you. Coinbase, Binance, and most exchange wallets are custodial. You get the convenience of a forgotten-password reset, but you do not control the actual coins. The company can freeze the account, get hacked, get sued, or go bankrupt — and your funds go with them.
A non-custodial wallet means you hold the private keys (usually in the form of a 12 or 24-word seed phrase). MetaMask, Phantom, Trust Wallet, Ledger and Trezor are non-custodial. No one can freeze you, no one can lock you out, and no one can pay you back if you make a mistake. The trade-off is responsibility: if you lose the seed phrase, the money is gone forever.
Most people end up using both: a small custodial balance on an exchange for trading and on-ramping fiat, and a non-custodial wallet for everything else.
Five beginner-friendly wallets compared
| Wallet | Type | Cost | Ease of use | Best for | Main risk |
|---|---|---|---|---|---|
| MetaMask | Hot, browser + mobile | Free | Medium | Ethereum and EVM chains, DeFi, NFTs | Browser malware, phishing pop-ups |
| Trust Wallet | Hot, mobile | Free | Easy | Multi-chain mobile use, BNB Chain, Solana | Mobile malware, lost recovery phrase |
| Ledger Nano S Plus / X | Cold, hardware | $80–150 | Medium | Long-term holdings across many chains | Phishing during 'firmware updates', physical loss |
| Trezor Model One / T | Cold, hardware | $70–220 | Medium | Open-source-first Bitcoin and EVM holdings | Physical loss, supply-chain tampering |
| Coinbase Wallet | Hot, mobile + browser | Free | Easy | Beginners already using Coinbase | Confusion with custodial Coinbase app |
Hot wallets are connected to the internet (apps, extensions). Cold wallets are not (hardware, paper). Hot is for spending and small DeFi; cold is for the bulk of your holdings.
Setting up MetaMask, step by step
- 1Download from the official source
Go directly to metamask.io — never click a search ad. Install the browser extension or the official mobile app from your platform's app store. Verify the publisher is 'MetaMask' or 'ConsenSys'.
- 2Create a new wallet
Click 'Create a new wallet'. Decline the optional metrics if you prefer maximum privacy.
- 3Set a strong password
This password unlocks the wallet on this device only. It is not your recovery — it does not protect anyone who gets the seed phrase.
- 4Reveal your secret recovery phrase
MetaMask shows 12 words. Write them on paper, in order, and do not store them digitally. This is the only true backup.
- 5Confirm the phrase
MetaMask asks you to retype the words in order. This forces you to actually write them down rather than skip the step.
- 6Pin the extension
In the browser toolbar, pin the MetaMask icon so phishing fake-MetaMask sites have a harder time fooling you.
- 7Send a tiny test deposit
Send a small amount of ETH from your exchange to your MetaMask address. Confirm it arrives before sending anything substantial.
- 8Bookmark trusted dApps
Bookmark Uniswap, OpenSea, or whichever apps you use and always go through your bookmarks — never click random links in DMs or social posts.
- 9Add networks carefully
When a site asks to add a new network (Polygon, Arbitrum, etc.), check the chain ID and RPC URL against a trusted source like chainlist.org.
- 10Lock the wallet when done
Click the avatar and choose 'Lock'. A locked wallet cannot sign transactions even if the browser stays open.
What 'not your keys, not your coins' really means
The phrase was coined after the Mt. Gox collapse of 2014 and repeated again at every exchange failure since: QuadrigaCX, Celsius, Voyager, FTX. In each case, users had a 'balance' inside an app, believed it was theirs, and woke up one day to discover the company had lost or stolen the underlying coins.
The lesson is mechanical, not philosophical. If you cannot personally produce the private key (or seed phrase) that signs transactions for your balance, then someone else can — and they may not be there tomorrow. A user-facing balance number is not the same thing as control.
This does not mean you should empty every exchange today. It means that the moment your holdings start to matter to your life, you move the bulk of them to a wallet you control, and leave only what you actively trade on the exchange. Treat the exchange like a debit card; treat the wallet like the vault.
Educational content. Not financial advice.