- What a hot wallet is and where hot wallets live
- What a cold wallet is and how cold storage works
- Hot wallet vs cold wallet side by side
- Trade-offs between hot and cold crypto wallets
- How people use hot and cold wallets together
- Recovery words, scams and wallet security for both types
- Writing about crypto wallets for a wider audience
- Frequently asked questions
The difference in hot wallet vs cold wallet is internet connection. A hot wallet is software on an online phone, laptop or browser, so it's quick to use but exposed to online threats. A cold wallet keeps private keys offline, usually on a hardware device or paper, which reduces hacking risk but adds steps.
Hot and cold are the two words you'll hear most when people talk about where crypto is kept. The labels sound technical, but the idea underneath is simple: is the thing holding your private keys connected to the internet, or isn't it? That one difference shapes how convenient a wallet is to use and how exposed it'll be to online attacks.
Here's how I'd explain both, drawing on ethereum.org, Ledger Academy, Wikipedia and the UK Financial Conduct Authority. It's a neutral explainer, not financial advice, and nothing here suggests buying, selling or holding any coins.
What a hot wallet is and where hot wallets live
Ledger Academy defines a hot wallet as "a piece of software you install on your smartphone or laptop to store private keys". Because the device is online, the keys sit on something that's connected to the internet. ethereum.org lists the main software formats people use:
- Mobile apps, which let you reach your funds from anywhere. Ledger names the Coinbase Wallet app, available on iOS and Android, as one example.
- Browser extensions, add-ons that connect your account to apps through the browser. MetaMask is the best known example and also comes as a mobile app.
- Desktop wallets, applications for macOS, Windows or Linux.
- Web wallets, which you open in a browser. ethereum.org suggests bookmarking the real site to guard against phishing copies.
Accounts held on a centralised exchange are a different arrangement again. ethereum.org explains that an exchange links your wallet to a username and password, but you're trusting the exchange with custody of your funds, and those funds are at risk if the exchange runs into financial trouble.
What a cold wallet is and how cold storage works
Wikipedia puts cold storage simply: it means keeping the private keys out of reach of hackers by storing or generating them on a device that isn't connected to the internet. Ledger adds a stricter definition, describing a cold wallet as one that keeps keys offline and never interacts with any smart contracts.
- Hardware wallets are small physical devices that sign transactions while keeping the private keys inside the device. ethereum.org names Ledger and Trezor as examples.
- Paper wallets are, in Wikipedia's words, a private key written or printed onto paper and then erased from the computer.
One point people often miss: Ledger says the terms hardware wallet and cold wallet aren't the same thing. A hardware wallet is the device. It only behaves as a cold wallet when you keep that account offline and don't connect it to apps or services.
Hot wallet vs cold wallet side by side
| Feature | Hot wallet | Cold wallet |
|---|---|---|
| Where the keys sit | On an internet-connected phone, laptop or browser | Offline, usually on a hardware device or paper |
| Typical examples | Mobile apps, browser extensions, desktop and web wallets | Hardware wallets kept offline, paper wallets |
| Everyday use | Quick for regular transactions and connecting to apps | Extra steps each time you want to move funds |
| Main exposure | Ledger calls them completely vulnerable to online threats | Physical loss, damage or theft of the device or paper |
| App connections | Built for connecting to decentralised apps | Ledger says a true cold wallet doesn't connect to them |
Trade-offs between hot and cold crypto wallets
Ledger sums up hot wallets as built for convenience rather than security. They're easy to set up on a phone or computer, quick for basic transactions and the natural choice when you want to connect to decentralised apps. The downside is that they sit on devices exposed to malware, phishing sites and hacked computers.
Cold wallets flip that balance. Ledger describes them as the most secure way to store digital assets, and ethereum.org explains that because a hardware wallet keeps the private key offline, it greatly reduces hacking risk even if someone takes control of your computer. The trade-offs are that moving funds takes more effort, you need to buy a device, and a cold wallet can't be used for smart contract interactions if you want it to stay cold.
Neither type makes you immune to mistakes. ethereum.org reminds users that transactions can't be reversed and that you're responsible for keeping your keys secure, whichever wallet you pick.
How people use hot and cold wallets together
Many people don't choose one or the other. Ledger describes a setup where one account acts as "a vault that never interacts with Web3", while a second, clearly named account handles smart contract activity, and only the amount needed is moved into the active account. The broad pattern looks like this:
Want AI doing the heavy lifting in your marketing?
I build the systems that handle the boring 80 percent, so you get your week back. Done properly, with the human kept in.
- Keep the bulk of what you hold in an account that stays offline.
- Use a separate account for day-to-day activity and app connections.
- Move only what you need into the active account when you need it.
- Label each account clearly so you always know which one you're signing with.
Recovery words, scams and wallet security for both types
Hot and cold wallets usually share one weak point: the backup words created when you set them up. ethereum.org says wallets often give you a seed phrase, which is the only way to recover your wallet, and warns you not to store it on a computer. If you'd like the full picture, I've written a separate guide to what a seed phrase is and how to store it.
- Never share your recovery words or private keys. ethereum.org says no legitimate service, support agent or website will ask for them.
- Ignore crypto giveaways. ethereum.org states that giveaways are always scams.
- Be wary of private messages from anyone claiming to be support staff.
- Double-check every address and transaction before you confirm it.
- Remember the FCA's warning that cryptoassets are high risk, largely unregulated in the UK and unlikely to be covered by the Financial Services Compensation Scheme.
Writing about crypto wallets for a wider audience
Wallet security is a subject where plain explanations help people avoid painful mistakes. If you've built up knowledge on hot and cold storage and like explaining it clearly, sharing it on other sites is a good way to reach readers who need it.
Got a wallet explainer of your own to share? Here are crypto sites open to contributor articles.
Frequently asked questions
Is a hardware wallet always a cold wallet?
Not always. Ledger Academy says the two terms aren't the same thing. A hardware wallet is a physical device, and it only works as a cold wallet when that account stays offline and isn't connected to apps or services.
Is an exchange account a hot wallet?
An exchange account is online, but ethereum.org points out a bigger difference: you're trusting the exchange with custody of your funds, and they're at risk if the exchange runs into financial trouble.
Can I use a hot wallet and a cold wallet at the same time?
Yes. Ledger describes keeping one account as an offline vault and a separate account for app activity, moving only what's needed into the active one.
What is a paper wallet?
Wikipedia describes a paper wallet as a private key written or printed onto paper and then erased from the computer. It's a form of cold storage, so the paper itself needs protecting from loss and damage.
Do cold wallets stop all scams?
No. They reduce exposure to online attacks, but anyone who tricks you into revealing your recovery words or approving a transaction can still take your assets. ethereum.org says to never share your keys or seed phrase.


