A wallet is not the account
Ethereum.org describes a wallet as a tool for interacting with an Ethereum account. The account is a pair of keys: one you can share as an address, and one you must keep secret because it signs transactions. The ether itself stays on the ledger. You hold keys, not a pile of coins inside an app.
That split matters. You can change wallet software later and still reach the same account if you still control the keys or recovery phrase. A wallet brand is a window, not the funds.
Ethereum has two account types. An externally owned account is controlled by whoever holds the private key. A contract account is controlled by deployed code. Both can hold ETH and tokens. Only an externally owned account can start a transaction on its own.
How people actually hold ETH
Ethereum.org groups everyday wallets by how you reach the keys: hardware devices, mobile apps, browser wallets, browser extensions, and desktop apps. Hardware wallets keep private keys on a dedicated offline device. Software wallets run on a phone or computer that is usually connected to the internet.
A custodial exchange account is different. The platform links access to a username and password you can recover in a conventional way, and it holds the keys. If that business has financial trouble, the funds you see in the app can be at risk. Self-custody removes that counterparty, and it moves backup, phishing, and signing mistakes onto you.
Some wallets are smart-contract accounts rather than a single key. They can require extra signatures or recovery helpers, and they add the risk of bugs in that contract code. Treat that as a different trust model, not as a free upgrade.
For current hardware-device prices, incidents, and setup trade-offs, use the separate Ledger versus Trezor comparison. This page does not rank products.
Recovery phrases, passwords, and private keys
When you create an account, many wallets show a secret recovery phrase, also called a seed phrase or mnemonic. Ethereum.org says it is usually 12 to 24 randomly generated words. Anyone who knows those words can control the funds. There is no customer-support reset.
MetaMask calls this a Secret Recovery Phrase. On MetaMask it is 12 words; some other wallets use 18 or 24. The phrase derives the accounts. A password typically unlocks the app on that device. It does not replace the phrase. If you forget the password, the phrase is what restores the wallet. If you lose the phrase, MetaMask cannot recover the wallet for you.
Each account also has its own private key, derived from the phrase. That key controls one account. Never share it. Ethereum.org also warns against screenshots of seed phrases or private keys, because those images can sync to a cloud account.
Support impersonation and fake giveaways
Ethereum.org documents repeating patterns: Discord or email “support” that asks for a seed phrase, celebrity livestream giveaways, and copycat sites reached from ads or spoofed previews. Staff at real projects do not DM you first and ask for keys. Nobody needs to “upgrade” your ETH to a new token after The Merge.
The U.S. Federal Trade Commission notes that cryptocurrency payments are typically not reversible and that accounts are not backed like insured bank deposits. Save a transaction hash and report through official channels. Treat anyone who promises guaranteed recovery for an upfront fee as another risk.
Six checks before you trust a wallet
01
Install from a site or store you verified yourself
Bookmark the official download page. After a link from chat, search, or an ad, check the domain again before you enter a recovery phrase or password.
02
Write the recovery phrase offline, in order
Ethereum.org and MetaMask both tell you to write the words down and keep them offline. Do not screenshot them, email them, or save them in cloud notes. The order of the words matters.
03
Never share the phrase, a private key, or remote access
No legitimate support agent, giveaway, or website needs your Secret Recovery Phrase. MetaMask says its team will never ask for it. Anyone who does is trying to take the account.
04
Confirm the destination on the device that signs
A sent Ethereum transaction is not reversible. Compare the full address, not only the first and last characters, before you approve. Hardware devices exist so the key never has to leave that device.
05
Limit what apps can spend
Connecting a site is not the same as emptying the account, but an unlimited token approval can outlive the visit. Set a spend limit you actually need, then revoke leftovers later.
06
Keep long-term keys off the daily browsing machine
Ethereum.org calls a hardware wallet the most secure option for storing private keys because those keys stay local. If you use apps often, keep only what you need to spend in a hot wallet.
Continue safely
Ethereum wallet FAQ
Is an Ethereum wallet the same thing as an Ethereum account?
No. An account is the key pair that controls funds on Ethereum. A wallet is software or hardware that lets you view that account, send transactions, and connect to apps. You can change wallet apps if you still control the keys or recovery phrase.
What is a Secret Recovery Phrase?
It is a list of 12 to 24 generated words, also called a seed phrase or mnemonic, that can recreate the wallet. Anyone who has the words in the correct order can move the funds. There is no support reset if it is lost or stolen.
If I forget my wallet password, can I still recover the account?
Often yes, if you still have the recovery phrase. MetaMask explains that the password unlocks the app on that device, while the Secret Recovery Phrase restores the wallet. The password is not a backup of the phrase.
Will MetaMask or Ethereum support ever ask for my seed phrase?
No. Ethereum.org says no legitimate service, support agent, or website will ask for a recovery phrase or private keys. MetaMask says its team will never ask for the Secret Recovery Phrase, even in a support scenario.
Are hardware wallets safer than browser wallets?
Ethereum.org describes hardware wallets as the most secure option for storing private keys because the key stays on the device and never touches the internet. You still have to protect the recovery phrase and confirm each destination on the device.
Can I get ETH back if I send it to the wrong address or a scammer?
Confirmed cryptocurrency transfers are typically not reversible. Save the transaction hash and report the incident through official channels. Treat anyone promising guaranteed recovery for an upfront fee as another risk.
Evidence reviewed September 1, 2026
Primary sources
Claims on this page come from the official documents below. Recheck fees, product names, and support URLs before you act on them; wallet software changes.
- Ethereum.org — wallets, accounts, and key custody
- Ethereum.org — account types and key pairs
- Ethereum.org — how to create an Ethereum account
- Ethereum.org — wallet security, hardware wallets, and common scams
- MetaMask Help Center — Secret Recovery Phrase, password, and private keys
- U.S. Federal Trade Commission — cryptocurrency payments and recovery limits
