Someone wants to send you a digital asset and asks for your address. A website then asks you to connect a wallet. Do you need a bank account or a copy of the entire blockchain? A wallet is a tool for viewing an account and authorising actions on a compatible network.
After the Web3 foundations, this guide explains what you actually control.
The wallet is an interface
Think of a remote control that lets you consult a shared record and sign an instruction. Tokens are not stored inside your phone: the blockchain records which accounts hold them. Replacing the phone does not move the tokens. What matters is recovering the ability to authorise actions for your account.
A wallet may support several accounts and networks without supporting every asset. An address that looks the same on two networks does not mean a receiving service accepts deposits on both. The Ethereum wallet documentation explains the distinction between the tool and the account.
Three different things
- A public address identifies a receiving account. You can share it to receive a transfer. On a public ledger, it may also reveal the account’s activity.
- A private key produces signatures. For a conventional account controlled by one key, whoever holds it can authorise actions. A recipient does not need it.
- A recovery phrase, where the wallet uses one, can reconstruct keys. It is neither a login name nor a code to give to customer support.
Programmable accounts may use several signers or other recovery mechanisms. Not every wallet depends on a single phrase. Ethereum describes key-controlled and programmable accounts separately.
Who can authorise a transfer?
With a custodial service, a business controls the signing arrangements. You request a withdrawal through its application. Access also depends on that service’s rules and availability.
With a self-custodial wallet, you control the signing arrangements according to the wallet’s design. Greater autonomy comes with a need to understand backup and recovery. A hardware wallet can keep keys in a dedicated device; it cannot make a malicious action harmless if you approve it.
Ask: “Who can sign, and what happens if I lose access?” The application’s logo cannot answer this question.
An example without real money
Lina uses a demonstration account on a test network. Her friend wants to send test tokens. She shares the address and network name, never the recovery phrase.
Later, she deletes the application. The ledger entries remain. Recovering access requires the recovery method provided by her wallet. A local password may unlock the application without being sufficient to restore a lost account. MetaMask’s explanation of recovery secrets describes this distinction for its product.
Connecting is not a blanket authorisation
A connection usually shares your address with a website. Signing a message, granting a spending permission and sending a transaction are separate actions. Some signatures without a fee can authorise later token movements: no immediate payment does not mean no consequences.
Before confirming, you should be able to explain the request. If the screen is unclear, decline it and keep learning without connecting an account.
Check your understanding
Someone claiming to be support asks for your recovery phrase to send a refund. Do they need it? No. A compatible receiving address is sufficient for a transfer; sharing a secret could give them control of the account.
Remember: the wallet displays your account and helps you sign. How the keys are held determines your independence and recovery options.