Hot Wallet vs Cold Wallet: Key Differences

A hot wallet keeps the private keys to your crypto on a device connected to the internet, such as a phone, computer or browser extension. A cold wallet keeps them offline, usually on a hardware device or paper. Hot wallets are more convenient for everyday use; cold wallets reduce exposure to online attacks but take more effort.

Every crypto wallet stores the private keys that let you spend your crypto. Whether a wallet is hot or cold depends on where those keys are kept: on a device connected to the internet, or offline. If wallets are new to you, start with our guide to what a crypto wallet is and how it works.

Crypto is delivered to the wallet address you provide, so it helps to choose a wallet before you buy crypto on Coinmama. This guide compares hot and cold wallets side by side, explains how custody fits in and ends with a security checklist you can use with either type.

What is the difference between a hot and a cold wallet?

A hot wallet keeps your private keys on a device that is connected to the internet. A cold wallet keeps them offline. That single difference drives most of the trade-offs in the table below.

Feature	Hot wallet	Cold wallet
Where the keys are kept	On an internet-connected phone, computer or browser	On a device or on paper that stays offline
Common forms	Mobile, desktop and browser-extension wallets	Hardware wallets, air-gapped devices and paper wallets
Main risks	Malware, phishing websites and fake wallet software	Loss, damage, theft or a tampered device
Convenience	High: you can send from your phone or computer	Lower: you need the device to approve each payment
Cost	Often free to download	Hardware devices usually cost money
Often used for	Smaller amounts you spend or move often	Larger amounts you plan to hold

Last checked: September 2026. Sources are listed below.

Whichever type you use, sending crypto usually costs a network fee, a small payment to the network that processes the transaction. Neither type removes every risk, as the sections below explain.

What is a hot wallet?

A hot wallet is a crypto wallet whose private keys are stored on an internet-connected device. In a December 2025 investor bulletin, the U.S. Securities and Exchange Commission (SEC) describes hot wallets as a convenient way to make transactions, but notes that being online also exposes them to cyberthreats.

Common kinds of hot wallet:

Mobile wallets: wallet software on your phone.
Desktop wallets: programs installed on a computer.
Browser-extension wallets: add-ons for your web browser, often used to connect to crypto websites.
Accounts that hold crypto for you: you log in online, but the company behind the account holds the keys. This makes it a custodial option (see below).

The main risks are malware, phishing websites and fake wallet software. Microsoft security researchers have documented malware that watches what you copy and swaps a wallet address for the attacker’s own when you paste it, and fake programs that imitate real hot wallets to steal private keys.

What is a cold wallet?

A cold wallet keeps the private keys on something that is not connected to the internet. Payments are approved (signed) offline, and only the signed transaction is passed to an online device to be sent to the network.

Common kinds of cold wallet:

Hardware wallets: small devices built to create and store keys. You confirm each payment on the device itself.
Air-gapped setups: a device or computer that never goes online and passes data by QR code or memory card.
Paper wallets: keys printed or written on paper. They are fully offline but easy to lose or damage, and spending from one usually means importing the key into software, which makes it hot.

The SEC notes that cold wallets are generally less convenient but more secure from cyberthreats. It also warns that the devices can be lost, damaged or stolen, which may mean a permanent loss.

“Cold” describes where the keys are kept, not the coins. The coins are recorded on the blockchain either way. You can receive crypto to a cold wallet’s address without plugging the device in; you only need the device to send.

Is hot vs cold the same as custodial vs non-custodial?

No. Hot and cold describe whether the keys are online. Custodial and non-custodial describe who holds the keys. The SEC points out that hot and cold options exist for both.

Non-custodial (self-custody): you hold the keys and the recovery phrase. You have full control and full responsibility. If they are lost or stolen, you may lose access for good.
Custodial (third-party custody): a company holds the keys and may keep them in hot storage, cold storage or both. If the company is hacked, shuts down or goes bankrupt, you may lose access.

So a phone wallet with your own recovery phrase is hot and non-custodial. A hardware wallet you set up yourself is cold and non-custodial. An account with a company that holds your crypto is custodial, however the company stores its keys.

Which should a beginner use?

There is no single right answer, and this guide does not recommend one. These questions can help you decide what fits you:

How much will you keep, and how often will you move it? Frequent, small payments favor convenience. Savings you rarely touch put more weight on security.
Are you comfortable being solely responsible for a recovery phrase? With self-custody, no one can reset it for you.
Would you rather rely on a company? If so, research how it stores customer assets, what happens if it fails and what it charges.
Is a hardware device in your budget? And are you willing to learn how to use it?

Many people use both: a hot wallet for small, everyday amounts and cold storage for larger amounts they plan to hold. Bitcoin.org gives similar advice: keep only small amounts on a computer or phone for everyday use. Either type can give you a receiving address. To move crypto from one wallet to another, see how to send bitcoin to a wallet.

How should you protect your recovery phrase?

Write it down by hand, keep it offline and never share it. A seed phrase (also called a recovery phrase) is a list of words, commonly 12 or 24, that can restore a self-custody wallet on a new device. Anyone who has it can take the funds.

It also decides whether a cold wallet stays cold. If you type a hardware wallet’s recovery phrase into a phone, computer or website, or photograph it, the keys are effectively online again.

Create it yourself. Let the wallet generate a new phrase during setup. Never use a phrase that comes pre-printed in the box or that someone gives you.
Write it down by hand. Keep the words in order and check the spelling of every word.
Keep it offline. No screenshots, cloud notes, emails or chat messages.
Store it somewhere safe and private. Protect it from fire and water. Some people keep a second copy in another secure place.
Enter it only to restore your own wallet. Use a device you trust. No genuine support team will ask for it.

How do I keep my wallet secure?

Keep your recovery phrase offline, protect your accounts with app-based two-factor authentication and check every address and request before you approve it. This checklist works for hot and cold wallets alike.

Keep the recovery phrase offline. Follow the steps above. Never type it into a website or message.
Use app-based two-factor authentication (2FA). Turn it on for crypto accounts and for the email account behind them. The U.S. Federal Trade Commission (FTC) warns that codes sent by text message can be stolen through a SIM swap, where a scammer takes over your phone number. Bitcoin.org suggests an authenticator app or a hardware security key instead, and asking your mobile carrier to add a port-out PIN.
Use a strong, unique password for every account. A password manager makes this easier. A reused password lets one data breach open several accounts.
Keep wallet software and devices up to date. Updates bring security fixes.
Check the whole address before you send. In address poisoning, scammers send tiny payments from addresses that look like ones you use, hoping you will copy theirs from your history later. Clipboard malware can also swap an address you paste. Compare every character, or use a saved address book.
Treat unexpected contact as a warning sign. Scammers pose as support staff, often after someone posts a question in public. Learn how to spot Coinmama employee impersonators and phishing attacks.
Keep only spending money in a hot wallet. Larger sums have less online exposure in cold storage.
Plan for the unexpected. For larger amounts, some people use a multi-signature (multisig) setup that needs more than one key to approve a payment. Also think about how a trusted person could recover your crypto if something happened to you.

What scams and mistakes should you watch for?

Watch for fake wallet software, requests for your recovery phrase, websites that ask you to sign transactions and tampered hardware. These affect hot and cold wallets alike:

Fake wallet software. Scammers publish look-alike programs and buy sponsored search results. Download a wallet only through links on the maker’s official website.
Recovery-phrase phishing. Pop-ups, emails or websites that ask you to “verify”, “sync” or “unlock” your wallet with your recovery phrase are scams.
Wallet drainers. Fake websites ask you to connect a wallet and sign a transaction that lets them move your assets. Read every prompt before you sign it.
Tampered or second-hand hardware wallets. Counterfeit devices are sold on third-party marketplaces, sometimes with a recovery phrase the scammer already knows. Buy from the manufacturer or an authorized reseller.
Storing the recovery phrase digitally. Photos and cloud notes can leak through hacked accounts or malware.
Assuming cold means safe from everything. A cold wallet will not stop you from sending to a wrong address or approving a scam transaction, and crypto transactions generally cannot be reversed.

For more everyday habits, see how to protect yourself from fraud.

No. It reduces exposure to online attacks, but the device can be lost, damaged or tampered with, and you can still send to a wrong address or approve a scam transaction.

An account that holds crypto for you is often grouped with hot wallets because you reach it online. The bigger point is that it is custodial: the company holds the keys, and it may store them in hot storage, cold storage or both.

Yes, many people do: a hot wallet for small, everyday amounts and a cold wallet for larger amounts they plan to hold. Moving crypto between them usually costs a network fee.

If you still have your recovery phrase, you can usually restore the wallet on a new compatible device or in compatible wallet software. Without the phrase, the funds may be lost for good. Read more about what happens if you lose your private keys.

No. The sender only needs your receiving address. When you can, check that address on the device’s own screen before you share it.

Sources