Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Clear out junk files and repair common Windows errors3Fix the driver behind crashes, sound loss and screen glitchesBuying ETH safely means choosing both where to buy it and who will control its private keys afterward. An exchange can hold ETH for you, or you can withdraw it to a self-custody wallet and take responsibility for access and backups. Neither option removes risk: check the provider and fees available where you live, protect your recovery phrase if you self-custody, and treat transfers as effectively irreversible.
Understand what you are buying and where it will be held
ETH is Ethereum’s native crypto. Buying ETH and deciding how to store it are connected decisions, but they are not the same: you can buy through a service and later choose whether to leave the ETH there or move it to a wallet you control. Ethereum.org’s wallet guide explains the distinction.
A wallet is a tool for interacting with an Ethereum account. The important security question is who controls the private keys that authorize transactions. With exchange custody, the platform holds crypto for you. With self-custody, you control the keys, usually backed up by a recovery phrase.
Choose between exchange custody and self-custody
| Question | Exchange custody | Self-custody |
|---|---|---|
| Who controls the keys? | The provider holds the crypto in custody; you use a platform-managed account. | You control the private keys or recovery phrase. |
| Who can restore access? | You rely on the provider’s account controls and recovery process. | You must protect the recovery phrase and follow the wallet’s recovery method. There is no Ethereum-wide support desk that can reset a self-custody wallet. |
| Main responsibility | Protect your account and assess the provider’s custody and operational risks. | Secure your phrase, devices and transaction decisions; losing or disclosing the phrase can mean losing the ETH. |
| Main exposure | Provider failure, account access problems and custody risk. Ethereum.org cautions that customer funds are at risk if an exchange has financial trouble. | Loss, theft or exposure caused by mishandling keys, devices, addresses or approvals. |
| Fees to check | Trading, asset-based, transfer, setup and closure fees may apply; exact charges depend on the provider and current terms. | Wallet software may be free, but on-chain transactions can involve network fees; check the wallet and service terms before acting. |
| Direct on-chain access | May be less direct while assets remain on the platform. | You interact with your account and authorize on-chain transactions directly. |
These arrangements are not an all-or-nothing choice. A hybrid approach is possible, but how much to keep in either arrangement depends on your needs and risk tolerance; the cited guidance does not establish a universally suitable split. For an additional plain-language explanation of the distinction, see Coinbase’s wallet guide; it describes the company’s explanation, not independent proof of any provider’s security.
#1 Best Overall
- Proven security at scale: Over 9 years and millions of cards issued with no known remote hacks, while military‑grade EAL6+ security keeps your private keys locked inside the chip. Your cryptocurrencies stay strongly protected from online attackers.
- Tap once to manage your entire crypto wallet across 90 blockchains - no USB cables or Bluetooth, no batteries, no setup. Access 14,100+ coins & tokens, DeFi, NFTs, and staking instantly from your phone
- Smart backup: Use your second Tangem Wallet as your Backup keys with end‑to‑end encryption; no more papers, pictures. If one card is lost, the remaining can still restore full access, with an optional seed phrase available for advanced users.
- Engineered to last up to 25 years: Waterproof (IP69K), shockproof and tested for extreme temperatures from −25°C to 50°C. A durable cold wallet with long‑term protection and independently audited security.
- Trusted by 6 million users worldwide - buy, sell, swap, stake, and spend cryptocurrency directly. The secure offline storage wallet designed for how people actually use crypto wallets
How to buy ETH and decide where to keep it
- Find a service available where you live. Check that the exchange or purchase service is legitimately available in your jurisdiction and review its identity requirements, payment methods, custody terms and account recovery process. Availability and protections vary by location and provider.
- Review the costs before funding an account. Look beyond a displayed trading charge: ask about asset-based, transaction, transfer, setup and account-closure fees. Investor.gov recommends asking about crypto wallet and transaction costs in its custody bulletin. Fees and terms can change, so verify them with the provider before purchase or withdrawal.
- Buy ETH through the provider’s verified process. Use the provider’s genuine website or application and follow its current account and purchase steps. Do not rely on links sent in unsolicited messages or on search advertisements you have not verified.
- Choose custody deliberately. You may leave ETH in exchange custody, accepting reliance on the provider’s account controls and custody, or withdraw it to a self-custody wallet, accepting responsibility for keys and backups.
- If withdrawing, verify the wallet and transfer details. Confirm that the wallet supports the relevant network and asset, and check the exact destination address and any network or minimum-withdrawal requirements shown by the service. Send only after you understand the displayed fees and destination.
There is no universally best exchange established by the cited sources. Compare providers using current local availability, custody arrangements, fee schedules, account security and support channels rather than assuming a service is appropriate because it is familiar.
Protect a self-custody wallet and its recovery phrase
The recovery phrase is effectively the master key to a self-custody wallet. Ethereum.org’s security guidance is direct: “Never, for any reason, share your recovery phrase or private keys!” Keep the phrase secure and offline. Do not type it into a website, send it to support, or disclose it to someone who claims they need it to verify, restore or protect your account. Anyone who obtains it may be able to take the funds.
Rank #2
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
- Enjoy Bluetooth connectivity, iOS access, and hours of battery use with this mobile-first, secure backup signer. Freedom you can depend on.
- Genuine Check: confirm your signer is authentic during setup with the Ledger Wallet app.
- Protect your signer: keep it in mint condition at all times with a bespoke Pod or Case to avoid scratches and everyday wear and tear.
A hardware wallet stores private keys offline and may be an option for self-custody. Ethereum.org names Ledger and Trezor as examples, but a hardware device does not prevent every loss or eliminate risks involving device provenance, setup or user mistakes. Before choosing one, compare:
- Supported networks and assets, including the ones you actually need.
- Security model and available security reviews or audit information.
- How the recovery process works and what happens if the device is lost or damaged.
- Usability, maintenance, official support and whether updates are available.
- Seller authenticity and whether the purchase comes through a trusted source.
Ethereum.org’s wallet directory says listings are assessed against published criteria, including security review, maintenance, Ethereum focus and support for Ethereum Mainnet transactions. The directory reports an update on July 8, 2026, and says its listings are informational rather than endorsements. Verify current compatibility and buy only from a source you trust.
Recommended Free Tools
Rank #3
- All your digital assets in one place. You can manage thousands of crypto including Bitcoin, Ethereum, Solana, Tether and more.
- Defend your identity against hackers: secure your online accounts with passwordless, hardware backed, 2FA logins for all your favorite apps and websites.
- Connectivity: USB-C cable connection only. No Bluetooth.Compatible with the Ledger Wallet crypto app, both desktop (Windows, macOS, Linux) and mobile (Android only). Not compatible with iOS.
- Protect your digital assets with the industry's best security: keep your private keys offline in your private signer, battle-tested by the Donjon's white hat hackers, CC EAL 6+ certified Secure Element, constantly updated Ledger OS.
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
Common risks and how to reduce them
Phishing, fake sites and fake wallet apps
Scammers imitate exchanges, wallet providers and support staff to steal login details or recovery phrases. Check the exact domain, use a bookmark for a service you have already verified, and obtain apps through a source you trust. Never enter a recovery phrase into a website. A real support interaction should not require your seed phrase or private keys.
Impersonation and recovery scams
Ethereum has no company-wide support desk that can reset a self-custody wallet. Ignore unsolicited messages claiming to be Ethereum support, a wallet agent or a fund-recovery specialist. Be especially wary of anyone who asks for an upfront fee to retrieve stolen ETH: a confirmed blockchain transfer is not ordinarily reversible, and recovery promises can be a second scam. Use only the designated support channels of your wallet or exchange provider.
Rank #4
- Proven security at scale: Over 9 years and millions of cards issued with no known remote hacks, while military‑grade EAL6+ security keeps your private keys locked inside the chip. Your cryptocurrencies stay strongly protected from online attackers.
- Tap once to manage your entire crypto wallet across 90 blockchains - no USB cables or Bluetooth, no batteries, no setup. Access 14,100+ coins & tokens, DeFi, NFTs, and staking instantly from your phone
- Smart backup: Use your second Tangem Wallet as your Backup keys with end‑to‑end encryption; no more papers, pictures. If one card is lost, the remaining can still restore full access, with an optional seed phrase available for advanced users.
- Engineered to last up to 25 years: Waterproof (IP69K), shockproof and tested for extreme temperatures from −25°C to 50°C. A durable cold wallet with long‑term protection and independently audited security.
- Trusted by 6 million users worldwide (4.9 App Store, 4.8 Google Play) - buy, sell, swap, stake, and spend cryptocurrency directly. The secure offline storage wallet designed for how people actually use crypto wallets
Fake giveaways and “send ETH to get more back” offers
Treat promises to multiply ETH or return more than you send as scams. Urgency, celebrity imagery or a convincing-looking account does not make a giveaway genuine. Do not send funds to participate.
Mistaken transfers
Blockchain transfers are final in the ordinary case. Check the destination address carefully, character by character, before confirming, and ensure you are using the network the receiving wallet supports. Ethereum.org’s guidance states: “No one can reverse blockchain transactions.”
Best Value
- READY IN 3 MINUTES – Set up your ELLIPAL X Card crypto wallet on the offline Starter device, then tap to the ELLIPAL mobile App and start using it. This 100% offline crypto wallet is a no battery crypto wallet with no charging, no firmware updates, and no complicated setup.
- TURN ANY WALLET INTO A CARD – Already have a wallet? Import your recovery phrase from MetaMask, Trust Wallet, Ledger, Trezor, or any compatible seed phrase wallet. X Card works as a backup wallet and physical twin of your existing bitcoin wallet, ethereum wallet, NFT wallet, or altcoin wallet — no transfers, no new accounts, no starting over.
- BUILT ON AN EAL6+ SECURE CHIP – Designed as a secure crypto wallet and private key wallet, X Card generates and stores your private keys inside the EAL6+ secure chip. Your keys never reach your phone, the App, USB, Bluetooth, or the internet, making it a true no bluetooth hardware wallet and no USB crypto wallet.
- ONE APP, EVERYTHING CRYPTO – Manage more with one cold storage wallet. Buy, sell, swap, send, spend, and earn across 45+ blockchains and 10,000+ tokens. Use X Card as your cryptocurrency wallet, coins and tokens wallet, DeFi wallet, and staking wallet for everyday crypto management.
- TAP TO CRYPTO – Carry your crypto cold wallet on a card and secure every transaction with one NFC tap. ELLIPAL X Card combines the simplicity of a crypto wallet with the protection of a cold storage hardware wallet.
Malicious token approvals
When interacting with a smart contract, an approval can allow it to spend tokens. Avoid unlimited spending approvals when a smaller amount will do, and be cautious about signing requests you do not understand. If you suspect a wallet is compromised, revoke token approvals and move remaining funds to a new secure wallet.
Provider and custody risks
Leaving ETH on an exchange means trusting the provider to safeguard it and maintain account access. Self-custody removes that provider custody arrangement but transfers key security and recovery responsibilities to you. Neither choice is risk-free, and no claim that an exchange is risk-free or that crypto is protected like a bank deposit is established by the sources cited here.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What to do if you suspect a wallet or account is compromised
Act promptly, but do not give a recovery phrase to anyone offering help. Ethereum.org’s scam help and reporting guidance recommends steps including moving remaining funds to a new secure wallet, revoking token approvals, changing passwords on linked exchange accounts and enabling two-factor authentication. Preserve transaction hashes, addresses and communications for reporting.
Quick Recap
- Use a clean, secure device and create a new wallet. Do not reuse a phrase or device you believe is compromised. Secure the new recovery phrase offline and never share it.
- Move any remaining funds you can safely access. Verify the new destination address before sending. A transfer that has already been confirmed generally cannot be undone.
- Revoke approvals that may expose tokens. Use a trusted wallet or service path and verify what you are approving or revoking before signing.
- Secure linked accounts. Change passwords for associated exchange accounts and enable two-factor authentication. Contact the provider through its designated support channel if the platform account is affected.
- Keep records and report the incident. Save transaction hashes, addresses, messages and other relevant communications. Ignore anyone who later promises reversal or recovery for an upfront payment.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Free tools Windows power users keep installed
One-click scans. No signup required.
