A hot wallet keeps private keys on an internet-connected device, such as a phone app or browser extension; a cold wallet keeps them offline, usually on a hardware device. Hot wallets are free and convenient but more exposed to remote attacks; cold wallets cost money and take longer to use but resist malware. Many people use both.
What is the difference between a hot wallet and a cold wallet?
The difference is where the private keys are stored and used. The US SEC's custody bulletin puts it simply: hot wallets are convenient but expose your crypto to cyber threats, while cold wallets are less convenient and generally more secure from cyber threats, although the devices can be lost, damaged or stolen.
| Feature | Hot wallet | Cold wallet |
|---|---|---|
| Where the keys live | On a phone, computer or browser connected to the internet | On an offline device, usually a hardware wallet |
| Cost | Usually free to install | A one-off device purchase |
| Speed and convenience | Send or connect to apps in seconds | Plug in or scan a QR code and confirm on the device |
| Main threats | Malware, phishing, malicious extensions, device theft | Lost or damaged device, lost backup, tampered device from an unofficial seller |
| If the device is lost | Restore from the seed phrase | Restore from the seed phrase |
| Best for | Small balances, payments, decentralized apps | Long-term savings you rarely move |
| Examples | MetaMask, Trust Wallet, Phantom | Ledger, Trezor, Coldcard, Keystone |
Both are usually self-custody wallets backed up by the same kind of seed phrase. For other categories, such as exchange accounts and multi-signature wallets, see types of crypto wallets.
Which threats does each wallet type protect against?
A cold wallet solves one specific problem, keys being copied off an online device, and nothing else. Most real-world losses involve tricking the user, which no device prevents on its own.
| Threat | Hot wallet | Cold wallet |
|---|---|---|
| Malware or a keylogger on your computer | Exposed | Protected: keys never leave the device |
| Typing the seed phrase into a fake website | Exposed | Exposed: the phrase controls the same keys |
| Approving a malicious transaction | Exposed | Exposed, unless you check the details on the device screen |
| Stolen phone or laptop | Exposed if the device is unlocked | Device PIN required; the backup still needs protecting |
| Tampered device from a reseller | Not applicable | Exposed: buy directly from the manufacturer |
When should you use a hot wallet?
A hot wallet makes sense for amounts you actively use: paying, trading, or trying decentralized apps. Keep the balance to what you could afford to lose, install the wallet only from its official site or app store, and consider a separate "burner" wallet with a small balance for unfamiliar apps, so a malicious approval there cannot reach your main funds.
When should you use a cold wallet?
A cold wallet suits savings you plan to hold for months or years and rarely move. Hardware wallets connect by USB or Bluetooth only to send a transaction; air-gapped models such as Keystone or Coldcard can sign via QR codes or a memory card without ever connecting. Whatever the model, the device's screen is the only display you should trust: check the address and amount there before approving. Buy from the manufacturer, set a PIN, and back up the seed phrase on paper or metal.
How do you use hot and cold wallets together?
- Keep long-term holdings in the cold wallet and a small working balance in the hot wallet.
- Top up the hot wallet from the cold wallet when needed, sending a small test amount first on the correct network.
- For apps that need a browser wallet, connect the hardware wallet to it as the signer, so every transaction still needs a button press on the device.
- Write down each wallet's seed phrase separately and never store any of them digitally.
Our step-by-step wallet setup guide covers installing both kinds, and the wallet security checklist adds passphrases and multi-signature options for larger holdings.
Are exchange accounts hot or cold?
Neither, from your point of view. An exchange account is custodial: the exchange holds the keys and splits customer assets between its own hot and cold wallets. You cannot see that split, so you are trusting its controls. Some exchanges publish a proof of reserves; our explainer on proof of reserves shows what one can and cannot prove. See also custodial vs non-custodial wallets.
Where Wealtii fits: Wealtii is custodial, so you need neither a hot nor a cold wallet to invest. Fund assets are held 1:1 in a Gnosis Safe multi-signature vault on BNB Smart Chain that requires all three of its three signatures to move funds, and anyone can check its balances on BscScan via the Transparency page. You will need a wallet that supports USDT on BNB Smart Chain (BEP-20) to withdraw. Wealtii is not regulated.
Frequently Asked Questions
Is a cold wallet worth it for small amounts?
Often not. A hardware wallet is a one-off purchase that pays off when the amount it protects is large compared with its price and with what you could afford to lose. For small balances, a reputable hot wallet with a well-protected seed phrase, or a custodial account with app-based 2FA, is usually enough.
Can a cold wallet be hacked?
Its keys are hard to steal remotely because they never touch an internet-connected device. Cold wallet users still lose funds by typing their seed phrase into phishing sites, approving malicious transactions without reading the device screen, or losing their only backup.
Is an exchange account a hot wallet?
An exchange account is a custodial wallet: the exchange holds the keys and decides how much of its customers' crypto sits in hot wallets for withdrawals and how much in cold storage. You cannot see that split directly, so you rely on the exchange's controls and any proof of reserves it publishes.
How do I move crypto from a hot wallet to a cold wallet?
Copy a receiving address from the cold wallet and confirm it on the device screen, send a small test amount from the hot wallet on the correct network, check that it arrives, then send the rest. Each transfer pays a normal network fee.
📚 Sources & References
- U.S. SEC, Investor.gov — Crypto Asset Custody Basics for Retail Investors: hot vs cold wallets (12 Dec 2025) (accessed 21 Oct 2026)
- Bitcoin.org — Secure your wallet (offline wallets, backups, multi-signature) (accessed 21 Oct 2026)
- ethereum.org — Ethereum security and scam prevention (accessed 21 Oct 2026)
- ethereum.org — Ethereum wallets (accessed 21 Oct 2026)
Disclaimer: This content is for educational purposes only and does not constitute financial, tax, or legal advice. Digital assets are volatile and you can lose some or all of the money you invest. Never share your private keys or seed phrase with anyone, including people claiming to be support staff. Wealtii is not registered or licensed with any financial regulator; see our Regulatory Status page.
