BTC 10m settlement ETH 12s contracts USDT 12s stable LTC 2.5m low fee SOL 0.4s throughput XRP 4s transfer DOGE 1m attention USDC 12s stable TRX 3s low fee ADA 20s contracts

Academy

How to Create a Cryptocurrency Wallet, Step by Step

The installation takes two minutes. The part that decides whether you still have access in three years takes five more, and it is the part every rushed guide compresses into a single sentence.

A blank paper card and a mechanical pencil on a dark desk

Editorial team

What you are actually creating

A wallet does not hold coins. It holds a key, and the key authorises moving balances that live on the network. Installing wallet software generates that key from a large random number, and then shows you the number encoded as an ordered list of ordinary words: the recovery phrase.

That phrase is the wallet. Anyone who has it has your funds, on any device, without needing your phone or your password. Anyone who does not have it cannot help you recover, including the company that wrote the software. Both halves of that sentence explain every precaution below.

  1. Choose the type before the brand

    A phone or browser wallet is convenient and connected to the internet. A hardware device keeps the key offline and signs transactions on the device itself. For small amounts and learning, software is fine. For a sum you would be upset to lose, the offline option is the reason hardware wallets exist.

  2. Download from the source, not from a search result

    Fake wallet applications are a standing problem, and paid search results are where they appear. Type the project's domain in directly, or reach it from a link you already trust. A convincing clone that generates a phrase the attacker already knows is the whole attack.

  3. Write the recovery phrase on paper, in order

    Not a screenshot, not a note application, not an email to yourself. Paper, or a metal backup plate if the amount justifies it. The order matters as much as the words, and one transposed pair produces a valid but different wallet with nothing in it.

  4. Verify the backup before funding it

    Most wallets ask you to re-enter a few words. Do that honestly, from the paper rather than from memory. Better still, delete the wallet and restore it from the phrase before sending any real amount. A backup you have not tested is a hypothesis.

  5. Send a small test amount first

    Then check it arrived and that you can send it back out. This catches the wrong network, the unsupported asset and the mistyped address while the sum is trivial, which is the only time those mistakes are cheap.

Where to keep the phrase

The requirements pull against each other: it has to survive fire, flood and time, and it has to be somewhere a burglar will not find it. A single copy in one location fails the first test. Copies in several locations fail the second. Most people settle on two copies in places with different failure modes, which is a reasonable compromise rather than a solved problem.

Splitting the phrase across locations sounds clever and usually is not. Common schemes reduce the security less than people assume, and every added step is another way for the recovery to fail when it is actually needed, frequently by someone else, years later, working from notes you are no longer around to explain.

Nobody will ever ask for it

No legitimate support agent, exchange, project or wallet developer needs your recovery phrase, ever, for any reason. There is no diagnostic that requires it and no migration that needs it. A request for the phrase is definitionally an attempt to take your funds, and it does not matter how plausible the surrounding conversation is.

One wallet, many addresses, and why that is normal

A modern wallet generates a fresh receiving address each time you ask for one, and the old ones keep working. The first reaction is usually that something has gone wrong, so it is worth saying plainly that this is the intended behaviour.

All of them derive from the same recovery phrase, which is why the phrase alone restores everything without any list of addresses. The reason for generating new ones is privacy: an address reused across several payments links those payments to each other and to whoever knows any one of them.

Two things follow. Funds sent to an older address still arrive and still appear in the balance, so nothing is stranded. And a balance that looks wrong is far more often a wallet showing one account rather than all of them than it is a missing payment.

After it exists

Two things are worth doing once the wallet is working. Learn how to check an address before pasting it, because clipboard-hijacking malware substitutes addresses and the substitution is designed to look similar at a glance. And learn where the network selector is, because sending on the wrong chain is the second most common irreversible mistake after losing the phrase.

From there the wallet is infrastructure rather than a project. It needs updating occasionally and reviewing when you grant an approval to a contract, and otherwise it should be boring. A wallet you think about often is usually one that is holding more than it should.

Questions this raises

Is a screenshot of the recovery phrase good enough?

No, and it is one of the most common ways funds are lost. A screenshot sits in a photo library that syncs to a cloud account, which means the phrase is now protected by an email password rather than by you. Anything that puts the phrase on an internet-connected device defeats the purpose of having it.

Can I change the recovery phrase later?

Not for the same wallet. The phrase is the wallet: the keys are derived from it mathematically, so a different phrase is a different set of addresses. If you believe a phrase has been exposed, the fix is to create a new wallet and move the funds to it, immediately and before anything else.

Do I need a different wallet for each coin?

Often not. Most modern wallets handle several networks from one recovery phrase, deriving separate addresses for each. But support varies, and an asset the wallet does not list is an asset you cannot see even if it technically arrived. Check before sending rather than after.

What does the passphrase option do?

It adds a word of your own to the recovery phrase, producing a completely different wallet. It is genuine additional protection because the phrase alone is then not enough. It is also an additional thing to lose, and losing it is as final as losing the phrase, so it suits people with a specific reason for it rather than everyone.

Primary sources

Read next

Type to search the site.