A hot wallet is software-based and is connected to the internet, while a cold wallet is hardware-based and keeps the keys to your crypto offline. That one difference drives everything else about the hot wallet vs cold wallet decision: how fast you can transact, how exposed you are to attackers, and how much you should keep in each.
This guide covers what hot and cold wallets are, how a crypto cold wallet works, how the two compare, and when to use them. If digital wallets are new to you, start with our guide to what a digital wallet is.
What Are Cold and Hot Wallets?
A hot wallet, known as a software wallet, holds the private keys to your crypto on a digital wallet that is connected to the internet. A crypto cold wallet keeps those keys offline. The difference comes down to where the keys live and how exposed they are to online threats.
A digital wallet does not store your crypto the way a physical wallet stores cash. Your assets live on the blockchain. The wallet holds the private keys that let you access and move them, and whoever controls those keys controls the assets.
A hot wallet keeps keys accessible in an internet-connected environment so you can transact in seconds. A cold wallet keeps them isolated from the network, so an attacker has to reach the device in person.
Most people don’t pick one. A hot wallet can be useful for smaller balances and frequent transactions, while cold wallet storage is generally better suited to larger or long-term holdings.
What Is a Hot Wallet?
A hot wallet is a crypto wallet whose private keys sit on an internet-connected device: a phone, a laptop, a web service, a browser extension, or an exchange account. Being online is the point. You can send, receive, trade, and connect to onchain apps without extra steps.
Hot wallets come in four common forms:
- Mobile wallets: apps on a smartphone for managing crypto and transacting on the go
- Desktop wallets: software installed on a computer
- Web wallets: browser-based wallets or exchange-hosted accounts where a service holds or manages keys on your behalf
- Browser extension wallets: wallets that connect through a web browser, usually to interact with decentralized applications.
The advantage of a hot wallet is convenience. The cost of that convenience is a larger attack surface. Malware, phishing, a compromised phone, a malicious app, or a breach at the platform holding your keys can all put funds at risk.
“Hot” describes the wallet’s connectivity, not control. A hot wallet can be custodial, where a third party holds the keys for you, as with an exchange account or institutional digital asset custody. It can also be a self-custody crypto wallet, where you hold them yourself. Our guide to custodial vs. non-custodial wallets covers the difference.
What Is a Cold Wallet? Cold Storage Explained
A cold wallet stores your private keys offline and signs transactions off the internet. Cold storage crypto is the practice of keeping keys that way, and a cold storage wallet is any setup built to maintain it.
Like “hot,” the cold wallet meaning describes a state rather than a product. A wallet is cold only while its keys are disconnected from the network. An offline crypto wallet is the same idea under another name.
Crypto cold storage takes a few forms:
- Hardware wallets: dedicated devices designed to isolate private keys and authorize transactions securely.
- Paper wallets: physical records of the information needed to access crypto, kept offline.
- Air-gapped devices: devices deliberately isolated from network connections and used to authorize transactions offline.
Offline isolation works because remote attacks need a route in, and a key that never touches a connected system gives malware nothing to reach.
Spending from a cold wallet crypto setup takes an extra step. You pass the unsigned transaction to the offline wallet, approve it there, then carry the signed transaction back to a connected device to broadcast. The keys never leave the offline device.
Cold Wallet vs Hot Wallet: How They Compare
The hot wallet vs. cold wallet comparison is ultimately a trade-off between accessibility and isolation. Hot wallets prioritize convenience and frequent access, while crypto cold wallets reduce online exposure at the cost of additional steps when you want to transact.
| Feature | Hot Wallet | Cold Wallet |
|---|---|---|
| Connectivity | Always online (internet-connected) | Offline; keys never exposed to the network |
| Security | Larger attack surface; exposed to malware, phishing, and exchange compromise | Minimal remote attack surface; keys isolated from the internet |
| Cost | Usually free | Typically requires a hardware device or setup effort |
| Convenience | Fast, easy, instant transactions | Slower; requires a signing step and a connected device to broadcast |
| Recovery | Often recoverable via seed phrase or account recovery, depending on setup | Recoverable via seed phrase backup; losing both device and seed means loss of access |
| Best use case | Small balances, active trading, everyday transactions | Long-term storage, larger holdings, deep reserves |
For most people, cold wallet vs. hot wallet is not an either-or decision. The two can work together: a hot wallet for assets you need to access regularly and cold storage for assets you plan to hold longer term.
Is a Hardware Wallet the Same as a Cold Wallet?
Not automatically. A hardware wallet is a physical device, and cold is a state. The device is cold only while its keys stay offline, and it behaves like a warm or hot wallet the moment you connect it to a companion app or a decentralized app to approve something.
Hardware wallets are commonly used for cold storage because they are designed to keep private keys isolated and authorize transactions without exposing those keys to the connected computer or phone. But using a hardware device does not make every interaction risk-free. You can be tricked into signing a transaction that drains a wallet while the keys sit safely on the device. Hardware protects the key. Only your own review protects the approval.
Connectivity is better understood as three tiers than as an on/off switch:
- Hot: always connected, built for frequent transactions.
- Warm: connected, but gated behind an extra authorization step.
- Cold: designed to keep private keys offline and highly isolated.
The more accessible a wallet becomes, the more important transaction verification is. A hardware wallet may protect the private key itself, for example, but it cannot protect a user who knowingly authorizes the wrong transaction. This is why carefully reviewing transaction details before signing is an important part of hardware wallet security.
Warm Wallets and Tiered Storage
A warm wallet sits between hot and cold storage. It keeps assets more accessible than a cold storage wallet while adding controls that make moving them more deliberate than with a typical hot wallet.
Those controls might include multiple approvals, transaction policies, spending limits, or other authorization requirements. Multi-signature arrangements are the common version, where one key alone cannot authorize a transfer.
Institutions apply the same logic across a whole balance sheet. Rather than protecting every asset in exactly the same way, institutions can match the level of access and security to how the funds are used:
- Hot tier: smaller operational balances that need to move frequently.
- Warm tier: assets that need to remain accessible but require additional approvals or policy controls
- Cold tier: deep reserves kept highly isolated for long-term safekeeping.
The goal is to keep enough liquidity accessible for day-to-day operations while placing stronger controls around assets that do not need to move as often.
The February 2025 Bybit hack, showed why the approval layer matters as much as the storage layer. Attackers manipulated a signing process and took roughly $1.5 billion without stealing keys outright. Ripple’s digital asset custody service is built on this tiered model with policy controls and approval workflows at each level.
When to Use a Hot Wallet or a Cold Wallet
Use a hot wallet for assets you need to access regularly. Use a cold storage wallet for assets that do not need to move as often and where reducing online exposure is the priority.
The practical split: keep in a hot wallet only what you would be comfortable carrying as cash, and move the rest into a crypto cold storage wallet until you need it. There is no single safest crypto wallet, and for most people the safest way to store crypto is that split rather than any one device.
How much belongs in each depends on how you use crypto and the risks you are comfortable managing. In general, keeping fewer private keys exposed to online environments reduces the opportunities for a remote attacker to reach them.
When evaluating the best crypto cold wallet for your needs, a few criteria matter more than the brand:
- Key isolation: how the device keeps keys away from internet-connected systems.
- Transaction signing: whether you can verify what you are approving on the device’s own screen.
- Recovery options: how you regain access if the device is lost, damaged, or replaced.
- Security design: whether the security model is documented and independently reviewed.
Hardware only does half the job. Even a well-designed cold wallet for crypto fails if your recovery phrase leaks or you approve a malicious transaction. Financial institutions weigh the same trade-off at a larger scale. Ripple’s primer on digital asset protection dives deeper into how to balance institutional-grade security with flexible orchestration options and governance controls.
How to Keep Your Crypto Safe: Best Practices
Keeping a safe crypto wallet comes down to protecting your keys and recovery credentials, verifying what you authorize, and avoiding common scams. The instructions for a secure crypto wallet apply whether you use a hot wallet, a cold wallet, or both.
- Back up your seed phrase: write it down and store copies in more than one secure place. Lose the phrase and the device, and the funds are unreachable.
- Use a PIN and passphrase: protect your wallet with a strong PIN, and consider an additional passphrase layer for hardware wallets.
- Verify receiving addresses: always check the full receiving address on your device screen before sending, not just the first and last characters. Malware can swap addresses on a clipboard.
- Recognize phishing and malicious approvals: never sign a transaction you don't fully understand, since an approval can drain a wallet even when the keys themselves stay secure.
- Never sign a transaction you do not understand: our guide on how to spot and report crypto scams covers the common patterns
- Buy hardware from the manufacturer: A tampered device can arrive pre-loaded with a seed phrase someone else already knows.
The FTC’s guidance on avoiding cryptocurrency scams covers the differences between cash and crypto payments, and how to spot common crypto scam set-ups.
