What is a digital wallet?

Why wallets matter for the agentic economy

In a traditional digital transaction, a human enters a credit card number or clicks ‘Pay Now.’ In an agentic economy, an AI agent needs to initiate, sign, and settle transactions autonomously — often across multiple blockchains and payment rails. The digital wallet becomes the agent’s identity and authorization layer: it proves who the agent is, what it is allowed to spend, and that the transaction was genuinely authorized by whoever delegated that authority. Without wallets, agents cannot participate in commerce. The wallet is the bridge between autonomous software and trust-based financial systems.

How a digital wallet works

Every blockchain wallet is built on asymmetric cryptography: a mathematically linked pair of keys. The public key derives a shareable address (like an account number) that others can send assets to. The private key is the secret that authorizes outgoing transactions — anyone who holds the private key controls the account. A wallet application does not actually ‘store’ cryptocurrency the way a leather wallet holds cash. Instead, it stores the private key and provides an interface to read balances on-chain and sign transactions that move assets. The assets themselves live on the blockchain ledger; the wallet is the keyring that proves control.

Types of digital wallets

Digital wallets differ primarily in who holds the private key and how much control the user retains.

Custodial wallets

Custodial wallets are operated by a third party — typically a centralized exchange like Coinbase or Binance — that holds the user’s private keys on their behalf. The user authenticates with a username and password, much like a traditional bank account. Custodial wallets are easier to set up and offer recovery options if credentials are lost, but they require trust in the custodian. If the custodian is hacked, goes bankrupt, or freezes the account, the user may lose access to their funds. The collapse of FTX in November 2022 demonstrated custodial counterparty risk at scale.

Non-custodial wallets

Non-custodial wallets (also called self-custody or Web3 wallets) give the user sole control of the private key. MetaMask, Coinbase Wallet, and Ledger are popular examples. The user generates a seed phrase (typically 12 or 24 words) during setup and is solely responsible for securing it. If the seed phrase is lost, the assets are irrecoverable — there is no customer support to call. Non-custodial wallets maximize sovereignty and censorship resistance, but they shift all security responsibility to the user.

Smart contract wallets

Smart contract wallets use programmable on-chain logic instead of (or in addition to) a traditional private key. ERC-4337, deployed to Ethereum mainnet in March 2023, introduced account abstraction — a framework that enables smart contract wallets with features like gasless transactions (via paymasters), social recovery (trusted contacts can restore access), session keys (limited-permission keys for specific dApps), and batched multi-operation transactions. By mid-2026, over 26 million smart contract accounts had been deployed, processing over 170 million UserOperations. Coinbase’s Smart Wallet, launched in 2024, is built on ERC-4337 and uses passkey authentication instead of seed phrases, making it the first mainstream consumer wallet to eliminate the seed phrase entirely.

Self-sovereign identity (SSI) wallets

Self-sovereign identity (SSI) wallets hold verifiable credentials — digitally signed attestations about the holder’s identity, qualifications, or permissions — instead of (or alongside) financial assets. SSI wallets let users prove specific attributes (e.g., ‘I am over 18,’ ‘I hold a valid license’) without revealing unnecessary personal data. The EU’s eIDAS 2.0 regulation (Regulation (EU) 2024/1183), which entered into force in May 2024, requires all 27 EU member states to provide at least one European Digital Identity (EUDI) Wallet to citizens by December 2026. This is the largest regulatory deployment of identity wallets to date. In the US, adoption is led by state mobile driver’s licenses (mDLs), NIST digital identity guidelines, and verifiable credential pilots rather than a federal mandate.

Wallets and agent payments

AI agents operating in the agentic economy need wallets to participate in commerce. When an agent makes a payment via the Agentic Commerce Protocol (ACP), the Universal Commerce Protocol (UCP), x402, or the Machine Payments Protocol (MPP), the wallet is the mechanism that signs and authorizes the transaction. Unlike human users, agents cannot click buttons or enter passwords interactively — they need programmatic access to wallet keys, either through embedded wallets (managed by the agent’s runtime) or through delegated authority from a human principal’s wallet. This delegation model raises fundamental questions about authorization, spending limits, and accountability that the emerging agent identity standards are still working to resolve.

Key security considerations

The most common attack vectors for digital wallets include: seed phrase compromise (phishing, social engineering, or malware that captures the recovery phrase), smart contract vulnerabilities (bugs in wallet logic that allow unauthorized access), approval exploits (granting unlimited token spending permissions to malicious dApps), and supply chain attacks (compromised wallet software updates). Best practices include hardware wallet storage for significant holdings, limited and time-bound token approvals, regular revocation of unused approvals, and — for organizations — multi-signature (multisig) wallets that require multiple key holders to authorize transactions.

Frequently asked questions

What is the difference between a digital wallet and a bank account?

A bank account holds fiat currency managed by a licensed financial institution that can freeze, reverse, or block transactions. A digital wallet holds cryptographic keys that control on-chain assets directly. With a non-custodial wallet, no third party can freeze your funds or prevent a transaction — but no one can help you recover access if you lose your keys either. The tradeoff is sovereignty versus safety net.

Can AI agents have their own wallets?

Yes. An AI agent can be assigned a wallet (either a dedicated key pair or a delegated authority from a human principal) that it uses to sign and authorize transactions. This is the foundation of agent-to-agent commerce: the agent’s wallet proves its identity and authorization to pay. The challenge is managing delegation — ensuring the agent can only spend within defined limits and that every transaction is traceable back to whoever authorized the agent.

What happens if I lose my seed phrase?

If you lose the seed phrase to a non-custodial wallet, the assets in that wallet are permanently inaccessible. There is no recovery mechanism — no central authority, no customer support, no reset password. This is the fundamental tradeoff of self-custody: you have full control, but you also bear full responsibility. Smart contract wallets with social recovery (ERC-4337) reduce this risk by allowing trusted contacts or devices to restore access without exposing the seed phrase.

What is the difference between a custodial and non-custodial wallet?

In a custodial wallet, a third party (like a centralized exchange) holds your private keys and manages your assets on your behalf. You trust them with custody. In a non-custodial wallet, you hold your own private keys and interact directly with the blockchain. You have full control, but also full responsibility for securing your keys. Custodial is easier to use; non-custodial is harder to lose but impossible to recover if keys are lost.

Sources

[1] Ethereum.org, “Ethereum Wallets” (2025)

[2] ERC-4337 Team / Ethereum.org, “Account Abstraction (ERC-4337)” (2025)

[3] European Commission, “eIDAS 2.0 / European Digital Identity Wallets” (2024)

[4] Forvis Mazars, “Digital Asset Custody: Custodial vs Non-Custodial Wallets” (March 2025)