What a wallet actually is
A crypto wallet does not hold coins. This confuses almost everyone at the start, and getting it straight makes the rest of the subject obvious.
Your crypto exists as entries on a public ledger. A wallet holds the private keys that authorise changes to those entries. Whoever holds the keys controls the asset — that is the entire security model, and it has no exceptions, no appeals process and no customer service department.
In practice you almost never handle raw private keys. Instead you get a recovery phrase — usually 12 or 24 ordinary English words in a specific order, sometimes called a seed phrase. Those words mathematically generate every key in the wallet. Which produces two consequences that people consistently underweight:
- The phrase is the asset. Lose the hardware, buy new hardware, enter the phrase, and your crypto reappears. The device is a convenience; the words are the ownership.
- Anyone with the phrase owns your crypto. Not "can access" — owns. Irreversibly, immediately, from anywhere on earth. This is why nobody legitimate will ever ask for it.
Nobody — not exchange support, not a wallet manufacturer, not the IRS, not a police officer, not a helpful person in a Discord server — ever has a legitimate reason to see your recovery phrase. Any request for it is a theft in progress. There are no edge cases.
The four kinds of wallet, and who each suits
Exchange custody Beginner
Your crypto sits with the exchange; they hold the keys. Convenient, recoverable if you lose your password, and dependent entirely on that company remaining solvent and honest. Fine for a small working balance on a Florida-licensed venue. Not for savings.
Software / hot wallet Spending
An app on your phone or computer where you hold the keys. Good for small amounts you actually use — paying for things, receiving stablecoin transfers. Exposed to malware, clipboard hijacking and phishing because the device is online.
Hardware wallet Recommended
A dedicated offline device that signs transactions without ever exposing the keys to your computer. Roughly $60–$200. This is the right answer for anything you intend to hold for years, and the security improvement over a hot wallet is enormous.
Multi-signature Large holdings
Requires several keys — typically two of three — held in separate locations or by separate people to authorise a transaction. Removes single-point-of-failure risk and can solve succession. Adds real complexity, and must be documented or it becomes the problem it was meant to prevent.
For most Florida readers the sensible architecture is simple: a small hot wallet for spending, a hardware wallet for the rest, and a small balance on a licensed exchange if you buy regularly. Brand choice matters far less than people think — buy from an established manufacturer, buy directly from the manufacturer rather than a marketplace (tampered devices sold through third-party listings are a genuine attack vector), and put your effort into the backup.
Hurricane-proofing a recovery phrase
This is the section that makes this page a Florida guide rather than a generic one, and it is the part that almost no wallet documentation addresses.
Every hardware wallet ships with a card and instructions to write your recovery phrase on it. That advice is written for people who do not live in a hurricane zone. In Florida, "write it on a card and keep it somewhere safe" has a specific and predictable failure mode.
Consider what actually happens here. Roofs fail during named storms and interiors take two days of rain. Storm surge floods ground floors in Pinellas, Lee, Charlotte and Monroe counties. Manufactured homes — of which Largo, Spring Hill and Port Charlotte have thousands — evacuate first and sometimes do not survive. Hurricane Ian left Lee County properties uninhabitable for months. Hurricane Michael flattened parts of Bay County. Monroe County evacuates entirely, on one road.
Now consider that if every copy of your recovery phrase is destroyed and the hardware is destroyed with it, the crypto is permanently gone. Not frozen, not disputed, not recoverable through insurance or probate. Gone, in a way that no other asset in your life can be.
The Florida backup standard
- Steel, not paper. A stamped or engraved metal backup plate costs roughly $30 and survives water, fire and crushing. This is the single best value purchase in crypto security.
- Waterproof container. Even steel benefits from a sealed bag. Note that a "fireproof" document box is frequently not waterproof — check the actual rating.
- In the evacuation kit. Same bag as your passports, insurance policies and medication. If you leave and cannot return for three weeks, it leaves with you.
- A second copy, geographically separated. With a trusted person well inland, or in a safe-deposit box on higher ground. Two copies in the same house is one copy.
- Never digital. No photographs, no cloud notes, no password manager entry, no email to yourself. Every one of those has produced real losses.
- Consider splitting. Some households store half the words in each of two locations. This protects against a single copy being found, at the cost of needing both to recover.
One more Florida-specific point: use an authenticator app, not SMS. After major storms, cellular service across affected counties has been degraded for extended periods. An SMS-dependent login is a login you may not have when you need it, and SIM-swap attacks make SMS the weakest common link even in normal weather.
Setting up a hardware wallet properly
- Buy direct from the manufacturer. Not a marketplace listing, not a third-party seller, not used. Pre-tampered devices with pre-generated recovery phrases are a real and recurring attack.
- Check the packaging and initialise from scratch. The device must generate the recovery phrase itself, in front of you. If a device arrives with a phrase already written on a card, it is compromised — do not use it, and report the seller.
- Write the phrase down on paper first. Carefully, in order, checking spelling. Paper is the working copy while you set up.
- Transfer it to steel. Stamp or engrave the words onto a metal backup plate. Verify each word against the paper twice — a single wrong word makes the whole phrase useless.
- Test the restore before you fund it. This is the step everyone skips and the one that catches mistakes. Wipe the device and restore it from your written phrase. If it restores, your backup is genuinely correct. If it does not, you just discovered that with nothing at stake.
- Send a small test amount, then confirm and scale. Move $20. Confirm it arrives. Then move the rest.
- Destroy the paper copy, store the steel. Waterproof container, evacuation kit, second copy inland. Then write the inventory described in the next section.
Set a PIN and consider a passphrase
A device PIN prevents someone who physically steals the hardware from using it. A passphrase (sometimes called a 25th word) creates a hidden wallet that cannot be accessed with the recovery phrase alone — genuinely strong protection, but if you forget the passphrase the funds are irrecoverable even with a perfect seed backup. Only use one if you have a documented, tested plan for remembering it.
What happens when you die
This deserves its own section because Florida has one of the oldest populations in the country, and because it is the single most common way meaningful amounts of crypto are permanently lost in this state.
The pattern is depressingly consistent. Someone accumulates a substantial position over years. They read — correctly — that leaving it on an exchange is unwise, so they buy a hardware wallet and move it. They tell nobody where the recovery phrase is, because telling people where your recovery phrase is feels like exactly the wrong thing to do. Then there is an illness, a fall, or a sudden death, and the family discovers that a six- or seven-figure asset exists, appears on no statement, is mentioned in no document, and cannot be reached by anyone alive.
Unlike a brokerage account, there is no institution to serve with a court order. Unlike a safe-deposit box, there is no bank to open it. The asset simply ceases to exist.
The fix takes an hour and costs nothing.
- Write an inventory. What you hold, roughly how much, which exchange or device holds each part, and where the key material is physically stored. Not the phrase — the location.
- Lodge it with your estate documents. Give it to your Florida estate attorney, or store it with your will, trust and insurance papers. Tell your executor it exists.
- Never put the recovery phrase in the will itself. Wills become public records at probate. This is the most common serious mistake in crypto estate planning.
- Consider a multi-signature arrangement for large holdings, where a professional fiduciary or trusted family member holds one of several required keys. This solves succession and single-point-of-failure risk together.
- Tell one trusted person that the account exists. Not the password. Just the fact. That alone prevents the most common failure.
Florida is a favourable place for this planning: no state income tax, no state estate tax, and strong homestead protections. Heirs generally receive a stepped-up basis at death, which for a long-held appreciated crypto position can be significant. All of which is worthless if nobody can find the keys. Talk to a Florida estate attorney who has handled digital assets — there are now plenty.
How Floridians actually lose crypto
Not through exotic hacks. Through a short list of ordinary failures, roughly in order of how often we hear about them.
| How it happens | The fix |
|---|---|
| Nobody knew the crypto existed after a death or incapacity | Written inventory lodged with estate documents |
| Recovery phrase destroyed by water, storm or fire | Steel backup, waterproof container, second copy inland |
| Phrase typed into a phishing site or given to "support" | Never enter it anywhere except your own device, during restore |
| SIM swap defeating SMS two-factor authentication | Authenticator app plus a carrier port-out PIN |
| Crypto left in a wallet the kiosk operator controlled | Always withdraw to a wallet whose phrase you hold |
| Phone replaced, app uninstalled, no backup taken | Back up the phrase before funding, and test the restore |
| Sent to a wrong or attacker-supplied address | Verify addresses on your own screen; use address allow-listing |
| Passphrase (25th word) forgotten | Only use one with a documented, tested memory plan |
The Bitcoin Depot bankruptcy in May 2026 provided a live demonstration of row five. Roughly 9,700 machines went offline, about 156 of them in Florida. Customers whose crypto sat in operator-controlled wallets became unsecured creditors. Customers who had withdrawn to their own wallets were entirely unaffected. Same asset, same operator, completely different outcome — and the only difference was who held the keys.
When leaving it on an exchange is actually fine
Self-custody maximalism is bad advice for some people, and it is worth saying so.
Holding your own keys means you carry the entire operational risk: storage, backups, succession, and the possibility of an irreversible mistake. For some households the honest assessment is that a Florida-licensed exchange with strong account security is safer for them than a hardware wallet they will not back up properly.
Exchange custody is a reasonable choice when:
- The balance is small relative to your finances, or genuinely working capital you trade with.
- You are confident you would not maintain a steel backup and an evacuation plan.
- You want your executor to be able to claim it through an ordinary probate process.
- You are holding through a brokerage as a spot exchange-traded product, where self-custody is not an option anyway.
If you take that route, do these four things:
- Use a platform with verifiable Florida money transmitter authority — check it on NMLS Consumer Access.
- Authenticator app for two-factor, never SMS, plus a carrier port-out PIN.
- Enable withdrawal address allow-listing so funds can only leave to pre-approved addresses.
- Document the account's existence with your estate papers so your executor knows to claim it.
The genuinely wrong answer is neither of these: a large balance on an exchange, protected by SMS two-factor and a reused password, that nobody in your family knows about. That is the arrangement we encounter most often, and it fails in both directions at once.
Related guides
How to buy in Florida
The four-step method and what each step costs.
Read →Licensed exchanges
Ten platforms ranked on real fees.
Read →Florida scam guide
Phishing, SIM swaps and the kiosk fraud.
Read →Selling & cashing out
Moving back to dollars from self-custody.
Read →Tax guide
Why wallet-to-wallet transfers are not disposals.
Read →49 city guides
Local guidance including storm-zone considerations.
Browse →