Crypto wallets: access to funds and the power to act
Addresses, keys, recovery and permissions: understand what a wallet does, who controls it and what changes when you lose your phone.
On this page
Imagine changing phones. Reinstalling an app does not necessarily restore access to its funds. That depends on how the wallet is controlled and recovered. This is a more useful starting point than sorting wallets by what they look like.
A wallet gives access to an account
A wallet lets you view assets and authorize actions on a blockchain. Funds are not files stored inside the app. Ethereum distinguishes the tool used to access an account from the account itself. [1]
An address identifies an account that can receive funds. A private key signs for an account it controls. A programmable account follows its code’s rules, so control does not always come down to one key. [2]
On the new phone, the first question is how to regain access to that same account. Creating another wallet is not recovering the previous one. An app’s name and logo cannot answer the question.
Who can authorize an action?
A service holding keys for customers and a user-controlled wallet assign powers differently. With the former, access depends partly on the service. With the latter, recovery and protection of authorization methods become central.
An embedded wallet does not imply one control model. Privy documents configurations controlled by a user, a service or several keys. The application’s rules therefore matter when determining who can act. [3]
Control is best described through specific actions: sending funds, approving a contract, adding access or recovering an account. “Your money stays yours” helps little unless it explains those powers.
A permission can outlast the app session
An ERC-20 approval can allow an address to spend up to a specified amount of a token. This differs from transferring funds to a recipient. The permission can be used later within the approved limit. [4]
Closing a page or uninstalling an app therefore says little about permissions already granted. To understand a signature request, identify its effect: which token, which amount, which recipient or authorized contract?
Prepare recovery before changing phones
Depending on the wallet, recovery may use a backup, sign-in methods or an account-specific process. Ethereum’s security guidance stresses protecting secrets and recognizing phishing. Someone asking for a private key or recovery phrase should not be treated as ordinary support. [5]
Make the check concrete: know the official recovery process, the items it requires and where they are kept. Losing a phone, disclosing a key and losing a sign-in method are different problems. No universal ranking makes one of them always less serious.
Choose around the actions you need to understand
A dedicated device, an app and an embedded wallet change how confirmation and recovery work. They do not remove the need to understand an approval. What matters is whether the service explains these actions and makes remaining dependencies visible.
For the phone change at the start, success means more than seeing a familiar logo. It means finding the expected account, its history and the authorized ways to act, without exposing the secrets protecting it.
Read more: custody models · stablecoin card permissions
Sources
Friends first. Enjoy the good times.
