Hot Wallets vs Cold Wallets
Hot vs cold wallet explained: how each one stores your keys, the security trade-offs, and a simple way to split funds between them for daily use and savings.
The difference between a hot vs cold wallet is whether the private keys live on a device connected to the internet. A hot wallet (a phone app, browser extension or desktop app) keeps keys on an online device, which makes it convenient but easier to attack; a cold wallet (usually a hardware wallet) keeps keys offline, which makes it slower to use but much harder to steal from remotely.
Neither is "better" in every situation. The right choice depends on how much you hold, how often you transact and how comfortable you are managing backups. Most experienced holders end up using both, each for a different job.
What "Hot" and "Cold" Actually Mean
Every crypto wallet is a tool for managing private keys — the secret numbers that authorize spending from your addresses. The coins themselves always sit on the blockchain. What changes between wallet types is where the keys are kept and how exposed they are.
- Hot wallet: the key is generated and stored on a device that is regularly online — your phone, laptop or browser. Examples include mobile wallet apps and browser-extension wallets.
- Cold wallet: the key is generated and stored somewhere that does not connect to the internet in a way that exposes it. Hardware wallets are the most common form; an air-gapped device or a carefully made paper backup are others.
Our guide to software wallets goes deeper into the hot side of the comparison.
Hot vs Cold Wallet Compared
| Factor | Hot wallet | Cold wallet |
|---|---|---|
| Where keys live | Phone, computer or browser | Dedicated offline device or medium |
| Cost | Usually free | Hardware typically costs money |
| Speed and convenience | Fast; good for apps and frequent transfers | Slower; device must be connected and confirmed |
| Remote attack surface | Higher — malware, malicious extensions, phishing | Lower — keys not exposed to the computer |
| Best for | Small, active balances | Long-term holdings |
| Main failure mode | Device compromise or signing a malicious request | Lost backup or being tricked into revealing the seed |
The table hides one important nuance: a cold wallet only protects the key itself. If you approve a harmful transaction on the device screen, the device will sign it. Reading what you sign still matters — see our guide to signing transactions safely.
When a Hot Wallet Makes Sense
Hot wallets are the practical choice when you need to act quickly or interact often:
- Paying someone or moving funds between your own accounts several times a week.
- Using decentralized exchanges, lending apps or NFT marketplaces.
- Holding an amount you could afford to lose if your phone or laptop were compromised.
To reduce risk, keep the hot wallet on an up-to-date device, install wallet apps only from the official source, avoid unknown browser extensions, and regularly review which apps have token approvals. Our article Smart Contract Wallets Explained expands on this point.
When a Cold Wallet Makes Sense
A cold wallet is worth considering once your holdings would hurt to lose, or when you plan to hold for a long time without trading. Because the keys stay on the device, malware on your computer cannot simply copy them. See also: MPC Wallets Explained. For a deeper look, see Multisig vs MPC Wallets.
Cold storage also encourages better habits. Sending from a hardware wallet requires a physical confirmation, which gives you a moment to check the address and amount instead of approving a pop-up on autopilot. Related reading: Hardware Wallets Explained.
Before you buy one, read our walkthrough on how to set up a hardware wallet step by step. Buy only from the manufacturer or an authorized reseller, never second-hand.
A Simple Two-Wallet Setup
Many people use a layered approach:
- 1Cold savings wallet. Holds the bulk of your long-term coins, such as Bitcoin or Ethereum. Rarely connected, never used to sign up for new apps.
- 2Hot spending wallet. Holds a small working balance for swaps, payments and experiments. You top it up from savings when needed.
- 3Exchange account (optional). Used only for buying and selling, with funds withdrawn to your own wallet afterward.
This separation limits the damage of any single mistake. If your hot wallet signs a malicious approval, your savings are not exposed. See also: What Happens If You Lose Your Hardware Wallet?
Where Exchange Accounts Fit
An exchange account is neither your hot wallet nor your cold wallet, because you do not hold the keys at all. The exchange does. It typically keeps some customer funds in its own hot wallets for withdrawals and the rest in cold storage, but how it does that is out of your control. Our article Physical Security for Crypto Holders expands on this point.
That adds a different kind of risk: the platform can freeze withdrawals, be hacked or fail financially. Keeping funds on an exchange can be reasonable for active trading, but it is not a substitute for self-custody. Our comparison of custodial vs non-custodial wallets explains the trade-off in more detail.
Mistakes That Undo Either Choice
Wallet type is only part of security. These mistakes cause losses regardless of whether a wallet is hot or cold:
- Storing the seed phrase digitally — photos, cloud notes, email drafts or password managers synced to the cloud.
- Typing the seed phrase into a website or "support" chat. No legitimate wallet or exchange will ever ask for it.
- Using the cold wallet like a hot one — connecting it to every new app defeats its purpose.
- No tested backup. Write the phrase down carefully and consider a durable option; our article on backing up a seed phrase covers the details.
- Buying a pre-configured device that arrives with a seed phrase already written for you. That is a known scam.
Bottom line
Use a hot wallet for convenience and a cold wallet for anything you would be upset to lose. Keep the hot balance small, keep the cold wallet's seed phrase offline and private, and move funds between them on purpose. Whichever you use, the seed phrase is the real key — protect it above everything else.
Frequently asked questions
Is a hardware wallet a cold wallet?
Yes, in most practical senses. A hardware wallet keeps the private keys on a separate device that does not expose them to your computer or phone. You connect it to sign transactions, but the keys never leave the device, which is why it is usually called cold storage.
Can a cold wallet be hacked?
It is much harder to attack remotely, but it is not risk-free. You can still lose funds by approving a malicious transaction, typing your seed phrase into a fake website, buying a tampered device or losing your backup. Most cold-wallet losses come from the user being tricked, not from the device being broken.
Do I need both a hot and a cold wallet?
Many people use both: a hot wallet with a small balance for everyday transactions and DeFi, and a cold wallet for savings they rarely touch. If you only hold a small amount and rarely transact, a well-secured hot wallet may be enough for your situation.
Is an exchange account a hot wallet?
An exchange account is custodial: the exchange holds the keys, and it keeps part of its customer funds in its own hot wallets. You do not control the keys yourself, so it carries platform risk on top of the usual online risks.