Hot Wallet vs Cold Wallet: Which One to Choose?

Hot wallet, cold wallet, platform custody or self-custody: understand the risks of each option and split your crypto intelligently.

Security · Débutant · 10 min read · Publié le October 29, 2026

The essentials

First, what is a wallet?

A wallet doesn't "contain" your crypto: it is recorded on the blockchain. The wallet stores the private keys, the secrets that let you sign transactions and therefore spend the funds. It is generally backed up by a recovery phrase (seed phrase), a list of 12 or 24 words that lets you recreate all the keys.

The "hot or cold" question therefore comes down to one thing: where are your keys at the moment they could be stolen?

Hot wallet: keys on a connected device

A hot wallet is software whose keys are stored on an Internet-connected device. Ethereum.org distinguishes several forms:

the mobile app;
the desktop app (macOS, Windows, Linux);
the browser extension;
the web wallet usable directly in the browser.

Advantages: free most of the time, installed in a few minutes, ideal for payments, small purchases or using decentralized applications.

Limits: if the device is infected with malware, if you sign a booby-trapped transaction or if someone gets hold of your recovery phrase, the funds can leave within seconds, with no way back.

Cold wallet: keys offline

A cold wallet (or "cold storage") keeps the keys on a medium that isn't exposed to the Internet. Bitcoin.org describes it as offering the highest level of security for savings and mentions two main approaches:

the hardware wallet: a small dedicated device that generates and stores the keys, and signs transactions inside the device. The private key never leaves it. According to Bitcoin.org, it is the best compromise between very high security and ease of use;
offline signing on a separate computer: a computer that is never connected holds the keys, and another connected computer prepares and broadcasts the transactions.

Advantages: malware on your computer can't, on its own, extract the key.

Limits: purchase cost, less fluid handling, and a risk that doesn't go away: if you approve on the device a transaction you haven't read, the cold wallet will sign it anyway.

A useful clarification: "cold" describes a practice more than a product. A hardware wallet that is permanently plugged in, whose recovery phrase is photographed on your phone, is no longer really cold.

Platform custody or self-custody

Another distinction overlaps with hot and cold: who holds the keys?

Mode	Who holds the keys	Main risk
Platform custody (custodial)	The platform	Failure, hack or account freeze
Self-custody	You	Loss, theft or error on your part

Ethereum.org sums it up like this: with a centralized platform, you regain access with a username and password, but you trust it with the custody of your funds. With a non-custodial wallet, the provider holds nothing; you are responsible for your keys.

In the European Union, the MiCA regulation governs custody by authorized providers. Its Article 75 notably requires separating clients' crypto-assets from the provider's own, making them legally distinct from its estate (its creditors cannot seize them in case of bankruptcy), providing a statement of positions at least every three months, and provides for the provider's liability in case of loss due to an incident attributable to it, up to the market value of the assets. This is real protection, but it removes neither the risk of a hack or temporary freeze, nor the dependence on a third party.

A balance on a platform is therefore, in practice, a form of hot wallet whose keys you don't hold.

Define your threat model

A threat model is simply the list of what could happen to your funds, and from whom. Ask yourself these questions:

Remote threats: phishing, fake sites, malware, signing a booby-trapped approval. These are the most frequent, and they target hot wallets first.
Third-party threats: hack or bankruptcy of a platform, account freeze.
Physical threats: burglary, loss of the device, fire or water damage destroying the backup. Cybermalveillance.gouv.fr also reports, following data leaks in the crypto sector, cases of violent extortion and kidnappings in January 2026: discretion about your holdings is part of security.
Social engineering: fake bank advisors, fake platform support, fake police officers. Authorities remind us that no legitimate service asks for your recovery phrase or remote access to your device.
Your own mistakes: lost phrase, wrong address, wrong network.
Your disappearance: without a plan for passing things on, your loved ones may never be able to recover the funds.

A cold wallet answers remote threats well. It doesn't protect against a poorly stored backup, physical coercion, or a transaction approved without checking.

How to split your funds between hot and cold

The principle recommended by Bitcoin.org matches common sense: keep only small amounts on your computer or phone for everyday use, and put the rest in safekeeping elsewhere. Like a wallet and a safe.

A simple method, with no magic numbers:

Set a "hot" ceiling: the amount you'd accept to lose without it changing your life. This is your crypto pocket money.
Sort your funds by use: what you use this week (hot), what you keep for months or years (cold), what you plan to trade soon (possibly on an authorized platform, for a limited time).
Top up the hot wallet from the cold one, in small amounts, rather than constantly doing the reverse.
Separate risky uses: a wallet dedicated to decentralized apps and experiments, distinct from the wallet where your savings sleep.
Reassess when amounts change markedly: what was pocket money can become a sum that needs protecting differently.

For large amounts, other tools exist, such as multi-signature (several independent approvals needed to spend) or the BIP39 passphrase: we cover them in dedicated guides.

Air-gapped signing

We speak of air-gapped signing when the device holding the keys has no connection with the connected computer or phone: no Internet, no USB cable, no Bluetooth. The transaction travels via a QR code or a microSD card.

The typical flow:

the connected wallet (called "watch-only," which sees only public addresses) prepares an unsigned transaction;
you transfer it to the offline device, via QR code or memory card;
the device displays the recipient and the amount; you check on its screen, then sign;
the signed transaction goes back to the connected wallet, which broadcasts it on the network.

On Bitcoin, this process often relies on the PSBT format (Partially Signed Bitcoin Transaction), defined by BIP 174. This standard was designed notably so that air-gapped wallets and hardware wallets can sign without direct access to the blockchain and without risk of being fooled, since all the necessary information is included in the file.

Air-gapping reduces the attack surface, but adds extra handling. For a beginner, a well-used hardware wallet already offers strong protection; air-gapping is an option, not an obligation.

And the cost?

Hot wallet: generally free. The cost is elsewhere, in the risk.
Hardware wallet: a one-time purchase, whose price varies by model and features. Buy it new, directly from the manufacturer or an official reseller, never secondhand: a device pre-configured or delivered with a recovery phrase already written down is a scam. Our pick: the OneKey Pro 2 ($299), with air-gapped QR-code signing, fingerprint and Monero support via Monero GUI.
Backup: paper at first; some people choose a metal medium that resists fire and water.
Network fees: each movement between hot and cold is a transaction that costs fees. One more reason not to make pointless round trips.
Time: allow some time for setup, testing and documenting your organization.

This guide is general information, not personalized investment or security advice.

A concrete example

Karim holds crypto on a platform, with a value that now represents several months of savings. He reorganizes:

He buys a hardware wallet from the manufacturer, initializes it himself and writes the 24-word phrase on paper, with no photo or digital copy.
He does a restoration test: he sends a small amount, resets the device, restores it with the phrase, and checks that he finds the same balance and the same addresses.
He transfers most of his savings to this cold wallet, starting with a test transaction, then verifying the receiving address on the device's screen.
He installs a mobile wallet with a small balance for his payments and his tests of decentralized apps.
He leaves on the platform only what he plans to trade in the coming weeks.
He stores the recovery phrase in a safe place, separate from the device, and notes for a trusted loved one how to find this information in case of a problem, without entrusting the phrase itself to them.

He doesn't talk about it on social media.

Mistakes to avoid

Photographing or storing the recovery phrase online (cloud, email, phone notes): this turns a cold wallet into a hot wallet.
Buying a secondhand hardware wallet or accepting a phrase already supplied with the device.
Signing without reading: always check the address and amount on the device's screen, not only on the computer.
Never testing the restoration: an unverified backup is a gamble.
Keeping everything in one place: device and phrase in the same drawer, or all savings on a single hot wallet.
Using the savings wallet to test unknown apps: keep a separate wallet for that.
Answering a "support" that contacts you: no legitimate service asks for your phrase.
Publicly showing your holdings: it makes you a target, including a physical one.

Frequently asked questions

What is the difference between a hot wallet and a cold wallet?

A hot wallet keeps your keys on an internet-connected device: convenient day to day, but more exposed to phishing and malware. A cold wallet keeps them offline, which makes it better suited to savings.

Is a hardware wallet a cold wallet?

It is the most common form of cold wallet: the private key never leaves the device. But "cold" describes a practice: a hardware wallet that is always plugged in, with its recovery phrase photographed, is no longer really cold.

How much should I keep in a hot wallet?

Set a cap: the amount you could lose without it changing your life. Keep the rest in a cold wallet and top up the hot wallet in small amounts.

Is crypto left on a platform safe?

A balance on a platform is a form of hot wallet whose keys you do not hold. MiCA requires licensed providers to segregate client assets, but it removes neither the risk of hacking nor that of a temporary freeze.

Key takeaways

Hot wallet: keys on a connected device, convenient for everyday use, to be reserved for small amounts.
Cold wallet: keys offline, suited to savings, but useless if the recovery phrase is poorly protected or if you sign without checking.
Platform custody and self-custody are two different risks: dependence on a third party on one side, personal responsibility on the other. MiCA governs custody by authorized providers without removing all risk.
Split your funds by use and by a "hot" ceiling you accept to lose, then reassess regularly.
Air-gapped signing (QR code, microSD, PSBT on Bitcoin) reduces exposure further, at the price of extra handling.
Test your backup, stay discreet and plan for passing things on.
To choose, see our crypto wallet comparison.

Sources

Compare services related to this topic

Best crypto wallet: comparison