Asset 20 8 2
Does AI recommend your business? Run the free check →

Join 15,000 business owners, marketers and entrepreneurs. The Sunday newsletter you'll be annoyed only arrives once a week.

Article

Hot Wallet vs Cold Wallet: Crypto Storage Explained

The difference in hot wallet vs cold wallet is internet connection. A hot wallet is software on an online phone, laptop or browser, so it's quick to use but exposed to online threats. A cold wallet keeps private keys offline, usually on a hardware device or paper, which reduces hacking risk but adds steps.

Hot and cold are the two words you'll hear most when people talk about where crypto is kept. The labels sound technical, but the idea underneath is simple: is the thing holding your private keys connected to the internet, or isn't it? That one difference shapes how convenient a wallet is to use and how exposed it'll be to online attacks.

Here's how I'd explain both, drawing on ethereum.org, Ledger Academy, Wikipedia and the UK Financial Conduct Authority. It's a neutral explainer, not financial advice, and nothing here suggests buying, selling or holding any coins.

What a hot wallet is and where hot wallets live

Ledger Academy defines a hot wallet as "a piece of software you install on your smartphone or laptop to store private keys". Because the device is online, the keys sit on something that's connected to the internet. ethereum.org lists the main software formats people use:

  • Mobile apps, which let you reach your funds from anywhere. Ledger names the Coinbase Wallet app, available on iOS and Android, as one example.
  • Browser extensions, add-ons that connect your account to apps through the browser. MetaMask is the best known example and also comes as a mobile app.
  • Desktop wallets, applications for macOS, Windows or Linux.
  • Web wallets, which you open in a browser. ethereum.org suggests bookmarking the real site to guard against phishing copies.

Accounts held on a centralised exchange are a different arrangement again. ethereum.org explains that an exchange links your wallet to a username and password, but you're trusting the exchange with custody of your funds, and those funds are at risk if the exchange runs into financial trouble.

What a cold wallet is and how cold storage works

Wikipedia puts cold storage simply: it means keeping the private keys out of reach of hackers by storing or generating them on a device that isn't connected to the internet. Ledger adds a stricter definition, describing a cold wallet as one that keeps keys offline and never interacts with any smart contracts.

  • Hardware wallets are small physical devices that sign transactions while keeping the private keys inside the device. ethereum.org names Ledger and Trezor as examples.
  • Paper wallets are, in Wikipedia's words, a private key written or printed onto paper and then erased from the computer.

One point people often miss: Ledger says the terms hardware wallet and cold wallet aren't the same thing. A hardware wallet is the device. It only behaves as a cold wallet when you keep that account offline and don't connect it to apps or services.

Hot wallet vs cold wallet side by side

FeatureHot walletCold wallet
Where the keys sitOn an internet-connected phone, laptop or browserOffline, usually on a hardware device or paper
Typical examplesMobile apps, browser extensions, desktop and web walletsHardware wallets kept offline, paper wallets
Everyday useQuick for regular transactions and connecting to appsExtra steps each time you want to move funds
Main exposureLedger calls them completely vulnerable to online threatsPhysical loss, damage or theft of the device or paper
App connectionsBuilt for connecting to decentralised appsLedger says a true cold wallet doesn't connect to them

Trade-offs between hot and cold crypto wallets

Ledger sums up hot wallets as built for convenience rather than security. They're easy to set up on a phone or computer, quick for basic transactions and the natural choice when you want to connect to decentralised apps. The downside is that they sit on devices exposed to malware, phishing sites and hacked computers.

Cold wallets flip that balance. Ledger describes them as the most secure way to store digital assets, and ethereum.org explains that because a hardware wallet keeps the private key offline, it greatly reduces hacking risk even if someone takes control of your computer. The trade-offs are that moving funds takes more effort, you need to buy a device, and a cold wallet can't be used for smart contract interactions if you want it to stay cold.

Neither type makes you immune to mistakes. ethereum.org reminds users that transactions can't be reversed and that you're responsible for keeping your keys secure, whichever wallet you pick.

How people use hot and cold wallets together

Many people don't choose one or the other. Ledger describes a setup where one account acts as "a vault that never interacts with Web3", while a second, clearly named account handles smart contract activity, and only the amount needed is moved into the active account. The broad pattern looks like this:

Work with me

Want AI doing the heavy lifting in your marketing?

I build the systems that handle the boring 80 percent, so you get your week back. Done properly, with the human kept in.

  1. Keep the bulk of what you hold in an account that stays offline.
  2. Use a separate account for day-to-day activity and app connections.
  3. Move only what you need into the active account when you need it.
  4. Label each account clearly so you always know which one you're signing with.

Recovery words, scams and wallet security for both types

Hot and cold wallets usually share one weak point: the backup words created when you set them up. ethereum.org says wallets often give you a seed phrase, which is the only way to recover your wallet, and warns you not to store it on a computer. If you'd like the full picture, I've written a separate guide to what a seed phrase is and how to store it.

  • Never share your recovery words or private keys. ethereum.org says no legitimate service, support agent or website will ask for them.
  • Ignore crypto giveaways. ethereum.org states that giveaways are always scams.
  • Be wary of private messages from anyone claiming to be support staff.
  • Double-check every address and transaction before you confirm it.
  • Remember the FCA's warning that cryptoassets are high risk, largely unregulated in the UK and unlikely to be covered by the Financial Services Compensation Scheme.

Writing about crypto wallets for a wider audience

Wallet security is a subject where plain explanations help people avoid painful mistakes. If you've built up knowledge on hot and cold storage and like explaining it clearly, sharing it on other sites is a good way to reach readers who need it.

Got a wallet explainer of your own to share? Here are crypto sites open to contributor articles.

Frequently asked questions

Is a hardware wallet always a cold wallet?

Not always. Ledger Academy says the two terms aren't the same thing. A hardware wallet is a physical device, and it only works as a cold wallet when that account stays offline and isn't connected to apps or services.

Is an exchange account a hot wallet?

An exchange account is online, but ethereum.org points out a bigger difference: you're trusting the exchange with custody of your funds, and they're at risk if the exchange runs into financial trouble.

Can I use a hot wallet and a cold wallet at the same time?

Yes. Ledger describes keeping one account as an offline vault and a separate account for app activity, moving only what's needed into the active one.

What is a paper wallet?

Wikipedia describes a paper wallet as a private key written or printed onto paper and then erased from the computer. It's a form of cold storage, so the paper itself needs protecting from loss and damage.

Do cold wallets stop all scams?

No. They reduce exposure to online attacks, but anyone who tricks you into revealing your recovery words or approving a transaction can still take your assets. ethereum.org says to never share your keys or seed phrase.

Published and maintained by the Lilach Bullock team, covering marketing, AI and business growth.
Your buyers are asking AI who to use. Does it say you?

See for free whether ChatGPT, Claude, Perplexity, Gemini and Google name you, and get the plan to become the answer.

Check my AI visibility →
Sundays only

Get the Sunday newsletter.

One email a week. AI experiments, marketing tactics, and the workflows Lilach is building right now in her own business.

Subscribe free

Let’s get your marketing running on AI.

Book a free 30-minute call

We figure out what you need, where AI fits in, and what working together would look like.

Book the call →

Or take the 30-second calculator

You’ll see the hours and the money quietly leaking out of your week, and the three workflows worth building first.

Take the calculator →

Or grab the free AI resource library

Prompt packs, templates, checklists, and swipe files. The exact tools I build for paying clients. Yours, free.

Get the library →
Keep reading

More from the blog.