The Basic Definitions
A hot wallet is connected to the internet — a mobile app, browser extension, or exchange account. It's convenient because you can sign transactions in seconds, which makes it the natural choice for everyday spending or active trading.
A cold wallet keeps your private keys offline, typically on a dedicated hardware device. You plug it in or connect it only when you need to approve a transaction, and the keys never touch an internet-connected device in a readable form. It's slower by design. That friction is the entire point.
Both are forms of self-custody once the keys leave an exchange. The real split isn't "hot is bad, cold is good" — it's about matching the wallet to the threat you're actually worried about. Our wallets and self-custody guide covers the mechanics of both in more depth.
Think in Threat Models, Not Vibes
Ask yourself what you're actually defending against:
- Exchange failure or freezes — solved by getting funds into any self-custody wallet, hot or cold.
- Malware or a compromised phone/laptop — a hot wallet on that same device is exposed. Cold storage keeps keys physically separate from the infected machine.
- Phishing links and fake sites — hardware wallets add a manual confirmation step on the device itself, which stops a lot of blind-signing disasters.
- Physical theft or coercion — this is where things like passphrases, multisig, or seed phrase storage strategy matter more than which wallet brand you picked.
Different threats call for different defenses, and most people are only exposed to some of them.
When a Hot Wallet Is Genuinely Fine
If you're actively trading, paying for something in crypto, or just experimenting with small amounts while you learn, a hot wallet is the right tool. Treat it like the cash in your physical wallet: useful for day-to-day amounts, not where you'd stash a down payment. Before you send anything from a hot wallet, it's worth reading our sending transactions guide and gas fees guide so you're not losing money to avoidable mistakes on top of the security tradeoffs.
When You Need Hardware
Once the amount you're holding would genuinely hurt to lose, or you're planning to hold for months or years rather than trade actively, a hardware wallet earns its keep. The device keeps your private key isolated even if your computer is fully compromised. Ledger is one of the more established hardware wallet makers, though the brand matters less than the habit of using one correctly.
Setup Mistakes That Undo the Whole Point
A hardware wallet only protects you if you set it up correctly. The most common ways people wreck it:
- Buying secondhand or "discounted" devices from anywhere other than the manufacturer or an authorized reseller. A tampered device can be preloaded with a compromised seed, and you'd have no way to tell just by looking at it. This one is non-negotiable: always buy new, direct.
- Photographing or storing the seed phrase digitally. A photo in your camera roll defeats the purpose of offline storage the moment that phone is backed up to the cloud.
- Never testing a recovery. If you've never practiced restoring from your seed phrase, you don't actually know your backup works — you're just hoping.
- Leaving the seed phrase on paper forever. Paper burns, fades, and dissolves. For holdings worth protecting with a hardware wallet, a titanium backup like Stamp Seed lets you stamp each word into metal that survives fire and flood — use code CGH at checkout. (Affiliate link — CGH may earn a commission at no extra cost to you.)
- Using the device but still typing the seed phrase into a website "to verify." No legitimate wallet or support team will ever ask for this. It's a scam every time.
A Simple Decision Framework by Portfolio Size
- Small, active, spending money: hot wallet, treated like pocket cash.
- Meaningful savings you're not touching often: hardware wallet, seed phrase backed up offline in more than one physical location.
- Large or long-term holdings: hardware wallet plus consideration of multisig or geographically split backups, so no single point of failure — device, location, or person — can wipe you out.
The exact dollar line where you "graduate" to hardware is personal, but a decent rule of thumb: if losing it would change your month, it belongs in cold storage.
For everything else on securing and managing your holdings, our full guides library is a good next stop.
CGH Take: The wallet that keeps you safe is the one that matches your actual threat model, not the one with the flashiest marketing.