Hot vs cold wallet: which should you use?

The hot-versus-cold distinction is simpler than it sounds. A hot wallet keeps private keys on a device that is connected to the internet. A cold wallet keeps them on something that is not. Everything else (the security trade-offs, the recommendations, the arguments) follows from that single difference.

What makes a wallet hot

Mobile wallets, desktop wallets, browser extensions and exchange accounts are all hot. The keys sit on hardware that also runs a browser, opens attachments and installs software, so anything that compromises the device can potentially reach the keys.

In exchange you get speed. Sending takes seconds, paying in person works, and there is no extra device to find. For balances you actually use, that convenience is worth real money.

What makes a wallet cold

Cold storage keeps keys on something that never connects: a hardware wallet, an air-gapped computer, a metal seed backup in a safe. Transactions are prepared online, signed offline, then broadcast.

Because the key never touches a networked machine, remote attackers have nothing to steal. Cold storage does not defend against physical theft, fire, or being tricked into revealing your recovery phrase; those need separate answers.

Which threats each one stops

Be specific about what you are defending against. Hot wallets are vulnerable to malware, clipboard hijackers that swap the destination address, phishing sites and stolen unlocked devices.

Cold wallets neutralise all of those, because signing happens on a device with its own screen that malware cannot repaint. What they do not neutralise is social engineering. A phrase typed into a fake “wallet validation” page is gone regardless of how it was stored, which is why the scam patterns are worth learning properly.

A practical split

Treat it like cash. A small amount in a hot wallet is your wallet in your pocket: enough to be useful, not enough to hurt. The rest goes cold, like money in a safe.

Setting a rough ceiling on the hot balance and topping it up when it runs low keeps the decision from being made repeatedly under time pressure. Amounts are personal; the principle is that convenience should be capped, not unlimited.

Backing up either kind

Both types are recovered from the same thing: the recovery phrase generated at setup. Write it on paper or stamp it into metal, keep at least two copies in separate secure locations, and never store it as a photo, a cloud note or a password-manager entry.

Then verify the backup by restoring it into a fresh wallet before you rely on it. An untested backup is a guess. For the wider picture of device options see our wallet types guide, and use the converter to check what a balance is currently worth.