Software wallets

A software wallet holds keys, not coins. Your balance lives on the blockchain; the app stores the private key that authorizes spending it and uses that key to sign transactions on your phone or computer. Ethereum's own documentation puts it plainly: wallet providers do not have custody of your funds.

Most wallets generate those keys from a recovery phrase under BIP39, a Bitcoin standard that turns 128 to 256 bits of randomness into 12 to 24 words. Any BIP39 wallet can rebuild the same keys from the same words, which is what makes leaving a wallet possible. Not every wallet follows it, and that matters more than most reviews admit.

Because the key sits on an internet-connected device, a software wallet is a hot wallet. It is the right tool for money you move often and the wrong one for savings you rarely touch, which belong on a hardware wallet.

Every balance check and every broadcast goes through a server, and whoever runs that server sees your IP address next to your addresses. On Ethereum this is a JSON-RPC endpoint; on Bitcoin it is usually an Electrum server. The wallet does not need to be custodial for this to leak who you are.

This is why privacy carries 20% of our score. MetaMask defaults to Infura, owned by the same parent company. BlueWallet defaults to its own Electrum servers. Phantom offers no supported way to use your own node. At the other end, Sparrow ships with Tor and treats connecting your own Bitcoin node as a normal setup rather than an expert option.

Searches for an anonymous bitcoin wallet usually mean this problem. No wallet makes bitcoin anonymous, since the chain is public. What a wallet can do is stop a company from learning which addresses are yours, and the honest way to do that is your own node, Tor, or both.

Choose by what each criterion protects you from, in the order we weight them.

• Security model and open code (30%): protects you from trusting software nobody outside the company can read. Check the licence file itself; source-available is not open source.
• Privacy (20%): protects you from a vendor linking your IP to your holdings. Look for a custom RPC or node setting and whether using it switches features off.
• Transaction transparency (15%): protects you from signing an approval that drains you. A wallet that simulates the transaction shows the balance change before you confirm.
• Swap cost (15%): protects you from a fee you never see itemized. A published percentage beats a vague promise of no fees.
• Recovery and portability (10%): protects you from lock-in. Electrum's default seed format, Zeus's aezeed and Muun's emergency kit will not restore in an ordinary BIP39 wallet.
• Networks (10%): protects you from a wallet that lists a chain but handles it poorly. Bitcoin-only wallets score low here by design.

For Bitcoin on a desktop, Windows or Mac, the open options in our table are Sparrow and Electrum. For a phone, BlueWallet is the simpler middle ground. For DeFi on EVM chains, simulation and a published fee are what separate Rabby from the defaults; our MetaMask vs Rabby comparison goes deeper.

A free wallet is usually paid through its built-in swap. The service fee is added on top of the exchange rate and gas, so on a $1,000 swap Rabby takes $2.50, Zerion $6.70, Phantom $8.50, MetaMask $8.75 and Coinbase Wallet $10. Safe publishes a tiered schedule that falls from 0.70% to 0.05% as size grows.

Zerion adds a twist: its $99-a-year Premium plan lowers the swap fee from 0.67% to 0.25%. Wallets with no swap at all, such as Sparrow, Frame, Zeus, Electrum and BlueWallet, take nothing beyond network fees.

The two failures in our incident log did not break the cryptography; they broke what the user was shown or installed. In April 2023 Trust Wallet's browser extension was found to generate keys from too little randomness, and about $170,000 was lost before users were reimbursed. In December 2025 a malicious Trust Wallet extension build reached the Chrome Web Store through stolen developer credentials, and about $8.5 million left 2,520 addresses; reimbursement followed.

The largest case involved Safe. In February 2025 attackers injected code into the Safe web interface and Bybit's signers approved a transfer they did not understand, losing about $1.4 billion. The audited contracts worked as written. The lesson for any user is the same at a smaller scale: confirm what you sign on a second screen where you can, and treat any unexpected approval request as hostile. Our guide to token approvals explains how to revoke old ones.

Setting up a wallet takes minutes; the part that matters is the backup. Write the recovery phrase on paper, check it by restoring once before funding the wallet, and never type it into a website.

Leaving is the test of self-custody. With a BIP39 wallet you import the same words into another app and your funds appear. With Electrum, Zeus, Muun, Argent or Safe you need that wallet's own recovery path, so learn it before you need it. When you move funds off an exchange, send a small test amount first and confirm the address on the receiving device.