Need advice choosing a safe online crypto wallet

General
1

I’m looking for a secure, easy-to-use online crypto wallet and I’m overwhelmed by all the options and mixed reviews. I want to store a small amount of BTC and ETH, maybe do occasional transfers, but I’m worried about scams, hacks, and losing access to my coins. Which trusted online wallets do you recommend, and what security features or red flags should I look for before I commit?

2

I’d split this into two parts for what you want.

  1. Where to keep BTC and ETH
  2. How to not get wrecked by scams

For a small amount with occasional transfers, a reputable hosted wallet is fine, as long as you treat it like a checking account, not savings.

Good hosted options for US / EU users
• Coinbase

  • Easy UI
  • Big company, heavy compliance
  • Good for beginners
  • Use the main Coinbase app, not Coinbase Wallet for now, that one is self‑custody and more advanced
    • Kraken
  • Older exchange, strong security track record
  • Interface is a bit more “pro”
    • Binance (if allowed in your region)
  • Huge liquidity
  • More features than you need, so take care not to click random stuff

For “online” self‑custody wallet (you hold your keys), look at
• Exodus

  • Desktop and mobile
  • Very simple interface
  • Good for small amounts
    • Blockchain.com wallet
  • Old player in BTC
  • Easy to use
    • MetaMask is more for Ethereum and tokens, but for your use Exodus is simpler

For security, focus on this more than on brand names:

  1. Strong account setup

    • New email only for crypto. Do not reuse your main email.
    • Strong unique password. Use a password manager.
    • Turn on 2FA with an authenticator app, not SMS. Use Google Authenticator or Aegis or Authy.
    • Write backup codes on paper and store away from your PC and phone.

  2. Seed phrase rules (for self‑custody wallets like Exodus, MetaMask)

    • Write the 12 or 24 words on paper.
    • Store in two separate physical locations.
    • Do not take photos.
    • Do not type the seed into websites, forms, or “support chats”. Anyone who asks is a scammer.

  3. Scam red flags

    • Fake support in Telegram, Discord, X replies, Reddit DMs.
    • “Airdrop” link that wants your seed or asks you to “connect wallet to claim” then requests unlimited token approvals.
    • Sites that look similar to Coinbase or MetaMask but with slightly different domain.
    • Browser extensions you do not need. Extra extensions increase risk.

  4. Basic operational habits

    • Keep your device updated.
    • Use an ad blocker so you avoid fake sponsored links.
    • When you move funds, send a $5 test first, confirm it lands, then send the rest.
    • Bookmark official domains for any wallet or exchange and only use those bookmarks.

Given what you described, one simple path:

Phase 1, easy start
• Sign up at Coinbase or Kraken.
• Enable 2FA with an authenticator app.
• Deposit your small BTC and ETH there.
• Use it for a while to learn addresses, fees, and transfers.

Phase 2, slightly more advanced
• Install Exodus on your phone or desktop.
• Write down the seed phrase on paper, twice.
• Send a small test amount of BTC and ETH from Coinbase or Kraken to Exodus.
• When you feel safe using it, keep some funds on Exodus and a smaller working balance on the exchange.

If you ever plan to hold over an amount you would not want to lose under any condition, buy a hardware wallet like Ledger or Trezor, then move long‑term holdings there. Use the online or hosted wallet only for money you plan to move or trade.

Last point, mixed reviews online often come from people who

  1. lost 2FA backup
  2. forgot seed phrase
  3. fell for phishing links
    The core products from big names are usually fine. Focus on your own setup and hygiene more than on chasing the “perfect” wallet.
3

I mostly agree with @himmelsjager, but I’d tweak the approach a bit, especially since you said “small amount” and “scared of scams.”

First, I would not start with multiple wallets and “phases” until you’re actually comfortable. More tools = more ways to screw up. For your use case:

1. Pick ONE main solution for now

For small BTC + ETH and occasional transfers, I’d go with:

  • A simple, self‑custody mobile wallet that supports both BTC and ETH
    Examples: Exodus, Trust Wallet, or similar

Why self custody first? Because:

  • You actually learn what a wallet is instead of just using an exchange account
  • If the exchange freezes, KYC issues, region issues, etc, you’re not stuck
  • For small amounts, the learning experience is more valuable than the extra “safety net” of a custodian

The tradeoff: if you lose your seed phrase, nobody can help you. So you have to be willing to treat that backup like actual money.

2. One-page “safety setup” you actually do

Keep it brutally simple:

  • Use the phone you already use, but:
    • Lock screen with PIN / biometric
    • No jailbroken/rooted stuff
  • Install ONE wallet app from the official app store
    • Double-check the developer name, logo, and reviews
  • When the wallet shows you the seed phrase:
    • Write it on paper, twice
    • Label it clearly like “Crypto wallet seed – do NOT type this online”
    • Put one copy where you keep passports / birth certs
    • Put second copy somewhere separate in the house

No screenshots, no photos, no “I’ll write it later.”

3. Scam-proofing that matters for your level

You do not need to memorize 50 red flags. For your specific use:

If any of these happen, stop immediately:

  • Someone asks you for your seed phrase or “recovery words”
  • A site or person says “support” and asks to “verify your wallet”
  • You clicked a random link from Twitter / Telegram / Discord to “claim” something

You’re not chasing airdrops, farming or DeFi, so you can outright ignore anything that sounds like “free tokens,” “boost your yield,” or “double your BTC.” Mixed reviews usually come from people who went beyond their knowledge level and got wrecked.

4. Custodial exchange, but as a backup not the primary

Here’s where I slightly disagree with using Coinbase/Kraken as step one. I’d use them as step two:

  • Once you are comfy sending and receiving with your self‑custody wallet,
    then open an account on Coinbase or Kraken
  • Use that only to:
    • Buy BTC / ETH with fiat
    • Withdraw to your self‑custody wallet
  • Keep a tiny “checking” balance there if you want, but think of the exchange as:
    • a store, not a wallet

5. Practical workflow example

  • Install Exodus on your phone
  • Back up seed on paper
  • Create accounts on Coinbase or Kraken
  • Buy $50 worth of BTC
  • Withdraw like $5 to your Exodus BTC address first as test
  • Once that arrives and you understand confirmations and fees, move the rest

After you’ve done that 2–3 times, the “online wallet” stuff starts feeling boring instead of scary, which is where you want to be.

If at some point your holdings cross into “I would actually lose sleep if this vanished,” that’s the moment to start thinking about a hardware wallet, not before.