Hot and cold describe whether the keys that authorize your transactions sit on something connected to the internet. That single distinction drives most wallet advice. The useful question is not which type is better in the abstract, but which combination matches how much you hold, how often you transact, and what could realistically go wrong for you.
Neither option is universally correct. Hot wallets lose funds to malware and bad approvals; cold setups lose funds to lost backups and tampered devices. Choose against the risks you realistically face.
- Why the only real distinction is internet exposure.
- What exchange custody is, since it is neither hot nor cold.
- How to build a threat list before choosing tools.
- What to verify when setting up a hardware device.
The difference is exposure, not brand
A hot wallet keeps keys on a device that browses, messages, and installs software. A cold setup keeps keys somewhere that does not. Everything else, including the interface, the supported networks, and the vendor, is secondary. When you evaluate any wallet, first establish where the keys are and what has to happen for a transaction to be signed.
This framing avoids a common error: assuming a well-known brand implies a particular security model. Some popular applications are hot wallets, some are interfaces to hardware devices, and some are custodial accounts that are not self-custody at all. The label on the app store tells you very little; the key location tells you almost everything.
What a hot wallet is good at
Hot wallets are convenient, free, and immediate. They are appropriate for small amounts you actually use: paying for something, interacting with an application, testing a new network, or holding an amount whose complete loss would be an annoyance rather than a serious problem. Speed genuinely matters for these activities.
Their weakness follows from the same property. Malware, a malicious browser extension, a compromised application update, a phishing page that captures a phrase, or simply an unlocked phone can all lead to signed transactions you did not intend. Assume any device that runs general software could eventually be compromised, and size the balance accordingly.
What a cold wallet is good at
Cold storage keeps keys away from the environment where most compromises begin. A hardware wallet signs transactions internally and returns only the signature, so the keys are not exposed to the connected computer even when it is used to build the transaction. This resists remote attackers effectively, which is why it is the standard recommendation for longer-term holdings.
It does not resist everything. It does not help if you approve a malicious transaction on the device screen without reading it, if your seed backup is stolen or lost, if you buy a tampered device from an unofficial seller, or if physical coercion is a realistic concern. Cold storage moves the risk from remote attackers to your own procedures.
It is worth being precise about what a hardware wallet does not protect. It does not help if you approve a malicious transaction shown on its screen without reading it, if your written backup is stolen, or if the device came preconfigured from an unofficial seller. It moves the threat from remote attackers to your own procedures, which is a genuine improvement and not an elimination.
Exchange custody is a third category
Leaving assets on an exchange is neither hot nor cold self-custody; it is custody by a provider. You hold an account, and the provider holds the keys. That brings account recovery, familiar support processes, and protection against your own key management mistakes, alongside platform failure, regional restriction, account freeze, and operational risk.
This is a legitimate choice for some purposes and it should be a deliberate one. If assets sit on a platform because you have not decided, that is not a decision. Consider what you would do if the account became inaccessible for a month, and let the answer inform how much stays there.
Three places assets can sit
| Hot wallet | Hardware wallet | Exchange account | |
|---|---|---|---|
| Keys held by | You, on a connected device. | You, on an offline device. | The provider. |
| Resists remote attackers | Weakly. | Strongly. | Depends on the provider and your account security. |
| If you lose access | Seed backup only. | Seed backup only. | Identity-based recovery is usually possible. |
| Suited to | Small, active balances. | Longer-term holdings. | Buying, selling, and amounts you accept a provider holding. |
Start from your own threat list
Write down what could plausibly happen to you. Common entries include phishing, malware on a personal computer, a lost or stolen phone, a house fire, a family member finding a written phrase, an account takeover by someone who knows your details, and your own error under time pressure. Rank them by likelihood and by how much they would cost.
Most people’s realistic list is dominated by phishing, malware, and their own mistakes, not by sophisticated targeted attacks. That points toward straightforward measures: a small hot balance, a hardware device for the rest, tested backups, and a deliberate pause before approving anything. Elaborate schemes you cannot execute reliably are worse than simple ones you can.
Most people’s realistic threat list is dominated by phishing, malware, and their own mistakes rather than by targeted attacks. That points toward simple measures executed consistently: a small hot balance, a hardware device for the rest, tested backups, and a deliberate pause before approving anything. An elaborate arrangement you cannot operate reliably is worse than a simple one you can.
A layered setup most beginners can manage
A workable pattern uses three layers: a modest hot wallet for activity, a hardware wallet for holdings you do not intend to touch often, and, where you choose to use one, an exchange account for buying and selling with its own strong authentication. Keep the layers separate and know the purpose of each.
Move between layers deliberately, verify addresses at both ends, and keep the number of applications small. Every additional wallet, network, and connected application adds something to maintain and something to check. Complexity is a cost paid quietly, usually at the worst moment.
Buying, verifying, and setting up a device
Buy hardware directly from the manufacturer or an authorized reseller. Avoid marketplaces and second-hand units, since a preconfigured device can be a trap. On arrival, generate a new seed on the device itself; a device that arrives with a printed phrase is compromised by definition. Verify firmware through the vendor’s own application.
During setup, write the phrase down yourself, complete any recovery check the device offers, and set a PIN. Then transfer a trivial amount first and confirm it appears before moving anything substantial. Record the model, the firmware version, and the date somewhere with your access notes.
Setting up a hardware device safely
The order matters. Two of these steps are the ones people skip.
Buy from the manufacturer
Or an authorized reseller. Never a marketplace listing or a second-hand unit.
Generate the seed on the device
A device that arrives with a printed phrase is compromised, without exception.
Verify firmware through the vendor’s app
Confirm authenticity before trusting the device with anything.
Write the phrase and run the recovery check
Use the device’s own verification feature if it has one.
Send a trivial test first
Confirm it arrives and can be sent back before moving a real amount.
Reviewing the setup as your situation changes
A wallet arrangement should be revisited when the amount changes materially, when you move house, when a device is replaced or damaged, when you stop using an application, and when a vendor announces a significant change. Review old approvals granted to applications, and remove those you no longer use.
Also rehearse the recovery path occasionally. Knowing that you can restore, that you can locate the backup, and that you remember which software created the wallet turns an emergency into an inconvenience. The point of any of this is not to hold the most secure configuration in theory but to hold one you will still operate correctly when tired.
Revisit the arrangement when circumstances change: a materially different amount, a house move, a replaced device, an application you have stopped using, or a vendor announcement. Rehearsing the recovery path occasionally is what turns an emergency into an inconvenience, and it is the step almost everyone intends to do and almost nobody schedules.
Key terms to keep handy
- Hot wallet
- A wallet whose keys are held on an internet-connected device such as a phone or computer.
- Cold storage
- Keys held on a device or medium that is not connected to the internet.
- Hardware wallet
- A dedicated device that stores keys and signs transactions without exposing the keys to a connected computer.
- Signing
- Authorizing a transaction with a private key.
- Attack surface
- The set of ways an attacker could reach something valuable.
- Self-custody
- Holding your own keys rather than relying on a provider to hold them for you.
Practise the move that matters
The Crypto.com sell & withdraw guide covers selling and withdrawing, which is the same mechanism you use to move assets from a platform into self-custody. The screens are identical; only the destination differs.
Do the first transfer with an amount you would not mind losing, on a network you have confirmed at both ends. A cheap rehearsal now is worth considerably more than confidence later.
Sources and further reading
- Bitcoin: choose your wallet (opens in a new tab)
- Ethereum: find a wallet (opens in a new tab)
- Bitcoin security guidance (opens in a new tab)
Frequently asked questions
Does a hardware wallet store my coins?
No. Assets are recorded on their networks. The device stores the keys that authorize transactions and signs them internally. If the device is lost, your seed backup restores the same keys elsewhere.
Is a hot wallet ever acceptable?
Yes, for amounts you can afford to lose entirely and for activity that requires frequent signing. The risk comes from the balance held, not from using the tool at all.
Can a hardware wallet be hacked remotely?
The design goal is that keys never leave the device, which strongly resists remote attacks. It cannot protect you from approving a malicious transaction shown on the device, from a stolen seed backup, or from a tampered device bought through an unofficial channel.
What happens if the manufacturer stops operating?
Your seed phrase is the recovery mechanism, and it can generally be restored in other compatible wallet software. Record which standards and derivation paths your device uses so a future restore is straightforward.
Should I keep everything in one wallet?
Separating balances by purpose limits the damage of any single mistake and makes each decision smaller. The trade-off is more backups and more things to track, so keep the number of wallets to what you can actually maintain.
What should I read next?
Read the seed phrase guide for backup practice and the two-factor authentication guide for protecting any exchange accounts that sit alongside your self-custody setup.
Crypto can lose substantial value, and transfers may be irreversible. This guide is educational, not financial, legal, or tax advice. Exchange access and features depend on your location.
Independent educational writing. How we research and correct our guides.