Every month, thousands of people lose crypto because they skipped basic wallet setup steps. Not because crypto is complicated — because they rushed and ignored the boring parts. This guide covers the boring parts. The boring parts are what keep your money yours.
What a Wallet Actually Is
A crypto wallet doesn't hold your coins the way a leather wallet holds cash. Your coins live on the blockchain. Your wallet holds the private keys that prove you own them. Lose the keys, lose the coins. It's that simple.
There are two types:
- Hot wallets — software that runs on your phone or computer (MetaMask, Phantom, Trust Wallet). Connected to the internet. Convenient but more exposed.
- Cold wallets — hardware devices that keep keys offline (Ledger, Trezor). Slower to use, much harder to steal from.
If you're holding more than you'd be comfortable losing, you need a cold wallet. No exceptions.
Step 1: Download From the Official Source
This is where most people get wrecked before they even start. Scammers build fake wallet apps and websites that look identical to the real thing.
Rule: Never download a wallet from a Google ad, a DM, a Telegram link, or a Discord message. Go directly to the official website by typing the URL yourself.
For MetaMask, that's metamask.io. For Phantom, phantom.app. Bookmark it. Only install from there.
Step 2: Create Your Wallet and Write Down the Seed Phrase
When you create a new wallet, it generates a seed phrase — usually 12 or 24 random words. This is the master backup for everything in that wallet. Whoever has those words has your crypto.
What to do:
- Write the words down on paper. Not on your phone. Not in a screenshot. Not in a notes app. Not in an email draft.
- Write them in order. Number each word.
- Check each word twice. A typo in your backup means your backup is worthless.
- Store the paper somewhere safe — a fireproof box, a safe, or a locked drawer. Ideally two copies in different physical locations.
What NOT to do:
- Don't take a photo of it
- Don't screenshot it
- Don't store it in cloud storage (Google Drive, iCloud, Dropbox)
- Don't send it to anyone for any reason
- Don't type it into any website unless you are explicitly restoring a wallet you already trust
If someone asks for your seed phrase, it's a scam. Always. No exceptions. No "wallet verification," no "airdrop claim," no "support ticket." It is always a scam.
Step 3: Set a Strong Password
Your wallet password protects the app on your device. Your seed phrase protects everything if you lose the device. You need both to be strong.
Use a unique password — not one you've used for email, Netflix, or anything else. A password manager (Bitwarden, 1Password) makes this painless.
Step 4: Test With a Small Amount First
Before you send your life savings to a new wallet, test it. Send $5 worth of crypto. Confirm it arrives. Then practice sending it back out. This verifies:
- You have the right address
- You understand how to send transactions
- The wallet actually works
This 10-minute test has saved more money than any piece of advice in this article.
Step 5: Understand What You're Signing
When you interact with DeFi apps, NFT marketplaces, or any dApp, your wallet will ask you to "sign" or "approve" transactions. Read what you're approving.
A malicious approval can give a contract the ability to drain your wallet later. Tools like revoke.cash let you review and revoke old approvals. Use them.
Common Mistakes That Cost People Thousands
- Storing seed phrases digitally. If your phone gets compromised, your crypto is gone. Paper doesn't get hacked.
- Signing random approvals. "Claim free airdrop" usually means "give us permission to drain your wallet."
- Falling for fake support. Real support never DMs you first. Real support never asks for your seed phrase.
- Not checking addresses. Clipboard malware swaps the address you copied with the attacker's address. Always verify the first and last 6 characters.
- Using one wallet for everything. Use a "hot" wallet for daily activity and a "cold" wallet for savings. Keep them separate.
The 60-Second Security Checklist
- Wallet downloaded from official source only
- Seed phrase written on paper, stored safely
- Seed phrase NOT stored digitally anywhere
- Unique strong password set
- Tested with small amount first
- Hardware wallet ordered (if balance is significant)
- Bookmark revoke.cash for approval management
The boring version of crypto security is the version that works. Write things down. Test before committing. Never share your seed phrase. Keep your savings offline. That's 90% of it.
Want more like this?
Get the free Crypto Starter Kit — wallet setup, DEX basics, common mistakes, and a security checklist. No spam, no "alpha calls."
Get the Free Kit