Not a list of recommendations — a map of what each category of tool actually does, so you know what you're looking for before you start comparing options.
Every category below solves a different job: some hold your assets, some just watch them, and some watch the network itself. Picking the wrong category — like treating a portfolio tracker as a wallet — is one of the most common early mistakes.
Software or hardware that holds the private keys controlling your crypto. A hot wallet lives on an internet-connected device — convenient, but exposed to malware and phishing. A cold wallet, usually a dedicated hardware device, keeps keys offline and only signs transactions when physically connected. Exchange custody means a company holds keys on your behalf — simplest to use, but you're trusting their solvency and security instead of your own.
Read-only apps that aggregate balances across wallets and exchanges into one view of your holdings, cost basis and performance over time. Because they only need public addresses or read-only API keys, a well-built tracker never needs the ability to move your funds — treat any that asks for withdrawal permissions as a red flag.
Platforms that display price history, order books and trading volume across exchanges, often with technical-analysis tools layered on top — trendlines, indicators, and candlestick pattern overlays. Useful for understanding market structure; not a substitute for understanding what you're actually holding.
Public interfaces into a blockchain's raw data — every transaction, every contract, every wallet balance, all visible without permission. These are the tools behind the article on on-chain analysis, and they're free to use for anyone willing to learn to read them.
Software that pulls transaction history across wallets and exchanges and calculates gains, losses and income events for tax reporting. Because tax treatment of crypto varies significantly by country, these tools are a starting point for organizing records — not a replacement for a qualified preparer.
Tools that watch for suspicious approvals, flag phishing contracts, or let you revoke a smart contract's permission to move tokens from your wallet — an underused category that catches a large share of preventable losses.
The right custody setup depends entirely on how you plan to use the assets — there's no single correct answer.
| Setup | Best for | Main risk |
|---|---|---|
| Exchange custody | Active trading, small amounts, first-time users | Counterparty risk — you don't control the keys |
| Hot wallet, self-custody | Regular spending, interacting with apps and contracts | Device compromise, phishing, malicious approvals |
| Cold wallet, self-custody | Long-term holding, larger amounts | Physical loss, damage, or losing the recovery phrase |
| Multi-signature setup | Shared funds, organizations, high-value holdings | Coordination complexity; losing too many signers |
No legitimate wallet, exchange or support team will ever ask for your seed phrase or private key. If something asks for it, it is not legitimate — regardless of how official it looks.
A tracker needs read access. A wallet needs to hold keys. Anything asking for more than its category requires deserves a second look.
Open-source projects with public audit history are easier to verify than closed tools that ask you to simply trust the brand.
This applies to new wallets, new exchanges, and new DeFi protocols alike — test small before you commit meaningfully.
Keeping trading funds, long-term holdings and experimental DeFi activity in different wallets limits how much a single mistake can cost you.
The Tech section explains what's actually happening when a wallet signs a transaction or a contract grants an approval.