TL;DR: There are various types of Bitcoin wallets with different security and ease of use tradeoffs. Web wallets run in a browser, are highly insecure, and it’s best to avoid them. Mobile wallets are phone apps with private keys stored on the phone, offering more security than web wallets. Desktop wallets run on an application on your computer and provide increased security when paired with a hardware signing device (hardware wallets). Bitcoin nodes have a built-in wallet allowing you to connect directly to the Bitcoin network and pair them with other wallet types for added flexibility and security.
Web wallet: The wallet software runs in a web browser, with your private key stored in the browser or on a web server. This is highly insecure and should be avoided because it is constantly connected to the internet. Your private key might leak, allowing someone to steal your bitcoin.
Examples: none
Mobile wallet: The wallet software is a phone application with your private key stored on the phone. A mobile wallet is safer than a web wallet because a web wallet carries the additional risk of browser exploits, which are more simple to enact. A browser must always be considered compromised. In contrast, most phones have some form of a secure element for private key protection, but there may still be some risk involved because the keys for your mobile wallet are kept on an internet-connected device, meaning the keys are "hot." If the wallet software is fully open source, like with the Blockstream app, users can personally verify and audit the code and check whether or not their private keys are exposed to developers.
Examples: the Blockstream app, BlueWallet, Muun
Desktop wallet: The wallet software runs as an application on your computer, storing your private key either in the filesystem or externally on a specialized signing device, also called a hardware wallet. Since a computer tends to be connected to the internet, and has a large attack surface, storing the private key in the file system still comes with risk. Any virus or other malware could steal your key, and the bitcoin will move to the attacker's wallet. Using a desktop wallet with an external signing device, or hardware wallet, on the other hand, is highly recommended.
Examples: the Blockstream app, Specter, Electrum
Bitcoin node: The Bitcoin Core node software contains wallet functionality and has the advantage of connecting to the Bitcoin network as a peer among other peers, not as a somewhat limited client for sending requests, like most web, phone, or desktop wallets. Using a vanilla Bitcoin Core node correctly can be somewhat intimidating, but there are several free (and often open source) bundles that install with very few clicks and integrate a lot of ancillary functionality. As in the case of the desktop wallet, you should be wary about storing too much bitcoin if the private key resides in the file system. The Bitcoin node wallet can work with a hardware signing device, although it is not trivial to set up. If you want to run your own node and use a hardware signing device, take a look at the desktop wallets the Blockstream app or Specter, which can connect to your node and handle signing devices with great ease.
Hardware wallet (signing device): This is usually a small, limited computer with minimal external interfacing that securely stores your private key. Though it lacks much of the functionality of the other wallet types, it makes up for it with simplicity and improved security. When it cooperates with one of the other wallet types, it acts as an external device that basically does nothing but create private keys, create Bitcoin addresses (to receive), and sign transactions (to spend). Everything else is handled by the software on the other wallet type.
Examples: Blockstream Jade, Coldcard, BitBox02
In short: Bitcoin wallets fall into a few main types that trade convenience against security. Web wallets run in a browser and are the least secure. Mobile and desktop wallets keep keys on your phone or computer and suit everyday use. Hardware wallets keep the private key on a dedicated offline device for the strongest protection. Bitcoin node software also includes a wallet that connects you directly to the network. The safest setups pair a software wallet with a hardware signing device so the key stays offline.
Two Ways to Categorize a Bitcoin Wallet
Beyond the form a wallet takes, two questions decide how safe it is. The first is custody: a self-custodial wallet puts the private keys on your own device, while a custodial wallet, usually an exchange account, holds the keys for you. Self-custody removes the risk of a provider freezing or losing your funds. The second is exposure: a hot wallet keeps the key on an internet-connected device, and a cold wallet keeps it offline. Most of the wallet types described above differ mainly along these two axes, and the strongest combinations are self-custodial and cold.
Matching a Wallet Type to How You Use Bitcoin
For small amounts you spend often, a self-custodial mobile wallet balances convenience and safety. For savings you rarely touch, a hardware wallet keeps the signing key off the internet, and you can pair it with a desktop or mobile app that watches your balance without ever holding the key. People running their own node can connect a desktop wallet to it for direct network access plus hardware-device signing. The Blockstream app covers the everyday mobile and desktop case and pairs with the Blockstream Jade hardware wallet when you want cold storage for larger holdings.
Frequently Asked Questions
What are the main types of Bitcoin wallets?
The common types are web wallets, mobile wallets, desktop wallets, the wallet built into Bitcoin node software, and hardware wallets. Web wallets are the least secure, mobile and desktop wallets suit daily use, and hardware wallets offer the strongest protection by keeping the private key on a dedicated offline device.
Which type of Bitcoin wallet is the most secure?
A hardware wallet is the most secure type because it keeps the private key on a device that never connects to the internet, so malware on a phone or computer cannot reach it. Pairing a hardware signing device with a software wallet gives you offline key protection while still letting an app build transactions and track your balance.
What is the difference between a hot and a cold wallet?
A hot wallet keeps the private key on an internet-connected device such as a phone or laptop, which is convenient but exposed to online threats. A cold wallet keeps the key offline, usually on a hardware device, which is far safer for storing larger amounts. Many people use both: hot for spending, cold for savings.
Are custodial wallets a type of Bitcoin wallet?
Yes. A custodial wallet, typically an exchange account, holds your private keys for you, so the provider controls the funds. It is convenient but introduces the risk that the provider is hacked, freezes withdrawals, or fails. A self-custodial wallet keeps the keys on your own device, giving you sole control.
Should beginners use a software or hardware wallet?
A self-custodial software wallet on a phone is a sensible starting point: it is free, easy to set up, and good for learning to send and receive. As holdings grow, adding a hardware wallet to keep the signing key offline is the standard next step. The two work together rather than being an either-or choice.