Where Are Your Bitcoins, Actually?

On wallets, keys, and the difference between a broken device and lost money

Imagine your phone falls into water. The screen stays black. Your Bitcoin wallet was on it. Are your bitcoins gone too?

With a traditional wallet, the situation is clear: if it contains 50 euros and you lose it, the banknotes are gone. The word “wallet” suggests that Bitcoin works in a similar way — as though the digital wallet were a container in which your bitcoins are stored.

That picture is misleading. With a self-custodial Bitcoin wallet, losing your bitcoin does not depend solely on whether the device still works. What matters is whether you still have the information needed to spend it.

To understand this, we need to distinguish three things:

• the records in the Bitcoin network,
• the keys used to spend, and
• the software that makes both accessible to you.

What the blockchain records

When you receive bitcoin, no file containing a coin is pushed onto your device. A transaction is created and, once confirmed, becomes part of the blockchain — the shared, publicly verifiable transaction history stored on many computers.

Bitcoin does not work with personal accounts. Instead, it uses amounts from earlier transactions that have not yet been spent. These are called UTXOs: unspent transaction outputs.

Each such amount comes with conditions that must be met to spend it. With a simple wallet, this generally requires a valid digital signature made with the corresponding private key.

Your wallet finds the amounts associated with it and shows you a balance. What looks like a single number can consist of many UTXOs. When you pay, existing transaction outputs are spent and new ones are created.

The blockchain therefore records which amounts remain available to spend and under what conditions. In that sense, your bitcoins “reside” on the blockchain — not on the device.

What your wallet actually does

The wallet is the tool you use to work with this information. It generates receiving addresses, displays payments, and prepares transactions. A simple software wallet also manages the private keys and uses them to sign.

A private key is a secret number. It can generate a digital signature whose validity the network can verify — without the key itself ever needing to be published. The network does not ask for your name. It checks only whether the transaction meets the spending conditions and the other rules.

A number visible on a screen does not, however, automatically mean that the app can spend. A watch-only wallet has only the information needed to observe. It can display balances and incoming payments but does not know the private keys. To spend, it needs another device or wallet that signs.

An app can therefore show you which bitcoins are associated with your wallet without being able to spend them itself.

An address is not a container

A receiving address simply describes a payment destination. It allows the sending wallet to set the appropriate spending conditions. Your wallet can generate many different addresses.

You can share an address to receive a payment. On its own, it does not give anyone spending access to your bitcoin, although it can reveal information about the associated transactions. The private key stays secret.

An address is therefore more like a payment instruction than a safe-deposit box. There is no little digital room where your coins wait to be collected.

Copying an address or the blockchain does not give anyone extra bitcoin, either. Visible records can be duplicated — doing so does not meet the conditions for spending.

Why a hardware wallet does not store coins

A hardware wallet is a specialized device that protects private keys and signs transactions. During signing, the private keys stay on the device. What comes back is the signed transaction, which can then be relayed to the network.

The computer prepares the payment. You check the payment details on the hardware wallet's display and confirm them there. This separation makes it harder for malware on the computer to obtain the private keys.

The device is therefore not a USB stick full of bitcoin. Its job is to protect access to the keys. It does not even need to be switched on to receive a payment to an address that has already been generated. The transaction is processed by the network; your wallet recognizes the incoming payment later.

If the device breaks, the bitcoin is therefore not yet lost — provided you have a complete backup and can restore access using compatible software or a suitable replacement device.

What recovery words back up

Many wallets show you an ordered list of words during setup. Often there are twelve or twenty-four, although other methods and lengths exist. This list is called a seed phrase, recovery phrase, or wallet backup.

The words contain neither coins nor a copy of the blockchain. With widely used methods, they provide the basis from which the wallet can reproduce the same keys according to a defined procedure. You therefore do not have to back up every newly generated key separately.

After a correct recovery, the same keys are available again. The wallet software can use them to find the associated transactions and display the balance. No bitcoin is transferred out of the broken phone.

Important: Recovery does not invalidate the previous keys. Anyone else who has the complete recovery information can reproduce the same access. You restore your own access, but doing so does not revoke anyone else's.

The words are not always the entire backup, either. If you use an additional BIP39 passphrase, you need that as well. It is different from the PIN used to unlock the device. A different passphrase produces different keys and therefore a different wallet.

Multisignature wallets, which require multiple signatures to authorize spending, may need additional keys and configuration information. The recovery software must also support the backup method and the wallet structure being used.

A complete backup must therefore match your particular setup. The blanket claim that “twelve words are always enough” is wrong.

Why a photograph of the words is a problem

With a simple wallet, anyone who obtains the complete recovery information can reproduce access on their own device — without possessing or unlocking your original one.

A photograph of the seed phrase can therefore be a copy of the power to spend. If it ends up in cloud storage, an email, or a chat, the security of your bitcoin also depends on those systems.

The opposite problem is permanent loss: if neither working keys nor a sufficient backup remain, there is no central authority that can reset access. The network has no customer service that issues new keys after checking your ID.

Backing up therefore means both things: you must be able to regain access to the necessary information — and others must not obtain unauthorized access to it. A backup kept only on your phone is of little help if that very phone fails.

What changes when you use an exchange

With a custodial exchange, the provider controls the private keys. The balance shown to you is recorded in its internal system. When you request a withdrawal, the provider has to execute the corresponding transfer.

Your login details give you access to your customer account, not directly to the keys. A withdrawal therefore also depends on the provider being operational and on its decisions.

Self-custody shifts this responsibility to you: you can sign yourself, but you must also ensure that the necessary keys remain secure and available.

The crucial question is therefore not simply: which app shows me bitcoin? It is: who can actually authorize the payment?

Back to the broken phone

Bitcoin transactions do not disappear from the blockchain just because your phone breaks. What may have been lost is your access to the corresponding keys.

If you have a complete and correct backup, you can restore access. If you have permanently lost the necessary information, even a transaction history that remains visible does not help you spend.

Your bitcoins are not coins sitting inside your phone. The network records amounts and the conditions under which they can be spent. The wallet helps you read that information and prepare payments. The private keys enable the necessary signatures.

The question “Where are my bitcoins?” therefore leads to another, crucial question:

Who controls access — and can I restore it if my device stops working tomorrow?

Sources and further reading

• Bitcoin.org — How does Bitcoin work?: the blockchain, balances, and the role of private keys.
• Bitcoin Developer Guide — Transactions: transaction outputs, spending conditions, and signatures.
• Bitcoin Developer Guide — Wallets: the functions of wallet software and the separation of observation and signing.
• BIP32 — Hierarchical Deterministic Wallets and BIP39 — Mnemonic code for generating deterministic keys: key derivation, recovery words, and additional passphrases.
• BIP380 — Output Script Descriptors: the importance of wallet structure and configuration information for complete backups.
• Bitcoin.org — Securing your wallet: backups, custodial services, and protection against loss.
• Bitcoin.org — Protect your privacy: public transaction data and the handling of receiving addresses.
• Trezor — What is a hardware wallet? and How to use a wallet backup: how hardware wallets work and how to handle recovery information. Manufacturer documentation, not a product recommendation.