Intermediate Guides & Tutorials Guide 3 of 5

Hot vs cold wallets: which do you actually need?

The practical difference between online and offline storage, what each protects against, and a simple way to decide how to split your holdings.

Illustration for: Hot vs cold wallets: which do you actually need?

In short

Hot wallets are connected to the internet and convenient; cold wallets are offline and secure. Most people should use both — small spending amounts hot, long-term holdings cold — rather than choosing one.

Key concepts

  • Hot means internet-connected; cold means the key never goes online
  • Hot wallets are exposed to malware and malicious signatures
  • Cold storage moves the risk from remote attackers to physical security
  • The sensible answer is a split, not a choice
  • Both still depend entirely on the seed phrase backup

People often treat this as a binary decision. It is better understood as an allocation question: how much should be immediately accessible, and how much should be deliberately difficult to reach?

Hot wallets

A hot wallet is any wallet whose keys sit on an internet-connected device — a phone app, a browser extension, a desktop wallet.

Strengths: immediate access, easy to use, works with decentralised applications, free.

Weaknesses: the key exists on a device that can be compromised. Malware, a malicious browser extension, or a phishing site that persuades you to sign an approval can all reach it. The wallet is only as secure as the machine it runs on and the judgement of the person using it.

Cold wallets

Cold storage keeps the key on a device that never connects to the internet — most commonly a hardware wallet.

Strengths: remote attacks do not apply, because there is no network path to the key. Transactions are signed on the device, and you confirm the destination on its own screen — which also defeats clipboard-swapping malware.

Weaknesses: costs money, adds friction to every transaction, and shifts your risk to physical security and backup discipline. A hardware wallet does not protect you from typing your seed phrase into a phishing site.

What each actually protects against

Threat Hot wallet Cold wallet
Malware reading your device Vulnerable Protected
Clipboard address swapping Vulnerable Protected (confirm on device)
Exchange failure Protected Protected
Phishing for your seed phrase Vulnerable Vulnerable
Signing a malicious approval Vulnerable Partly — you still approve it
Losing your seed phrase Vulnerable Vulnerable

Note the bottom rows. Cold storage is not a substitute for judgement, and neither form protects a phrase you have given away or lost.

A simple way to decide

Think of it as a wallet and a safe. You carry some cash for daily use and keep the rest somewhere secure.

  • Small amounts you actively use — a hot wallet is fine. Treat the balance as money you could afford to lose.
  • Holdings you would be upset to lose — cold storage. The friction is a feature.
  • Amounts that would materially affect your life — cold storage, metal seed backup, two locations, and a documented plan.

A reasonable starting rule: if losing the balance would ruin your month, it does not belong in a hot wallet.

Using both together

Most experienced users run a hot wallet for interacting with applications and a cold wallet holding the bulk, moving funds across as needed. This limits what any single mistake can cost: a bad signature in the hot wallet cannot touch the cold one.

What to read next

Next: how to use a hardware wallet.

Sources

Not financial advice

This article is educational and general in nature. Crypto is volatile and high-risk, and you can lose the whole of any amount you put in. Nothing here is a recommendation to buy, sell or hold any asset. Always do your own research and consider speaking to a qualified, regulated adviser in your country.

Join the discussion

Comments are open to members. An account is free and takes an email address and a password — nothing else.

Join free Sign in