Hot Wallet vs Cold Wallet: Which Should You Use?

Last updated: 13 November 2026

A hot wallet keeps its private keys on a device connected to the internet, such as a phone app, while a cold wallet keeps them offline, usually on a hardware device. Hot wallets are easier to use. Cold wallets are harder to attack remotely, and many people use both.

In practice, the choice comes down to which money sits where. This guide compares hot wallet vs cold wallet setups side by side, sets out what can go wrong with each, and walks through moving funds from one to the other.

Hot wallet vs cold wallet at a glance

A hot wallet signs transactions on an online device, so it's quick to use and exposed to online attacks. A cold wallet signs on a device that keeps its keys offline, so it's slower to use and much harder to reach remotely.

	Hot wallet	Cold wallet
Where the keys live	On an internet-connected phone or computer, or with an exchange	On a device that keeps them offline
Internet exposure	Always or often online	Keys never leave the device
Typical forms	Mobile app, desktop app, browser extension, exchange account	Hardware wallet, air-gapped device, written or steel backup
Best for	Spending money and funds you move often	Savings you rarely touch
Main risks	Malware, phishing, a lost or compromised phone, a platform failing	Losing the recovery phrase, fake devices, approving a transaction you didn't read
Cost	Usually free	You buy a device
Sending	A few taps	Connect the device and confirm on its screen
Recovery	Recovery phrase, or the provider's account recovery	Recovery phrase

What is a hot wallet?

A hot wallet is any wallet whose private keys are used on a device that's connected to the internet. The private key is the secret that authorizes spending, and a hot wallet keeps it where an online app can reach it.

That covers most wallets people start with. Ethereum.org lists mobile apps, desktop apps, browser wallets and browser extensions as wallet types, and all of them run on online devices. An exchange account is hot too, with one difference: the exchange holds the keys, not you.

Hot wallets win on convenience. Paying someone, moving funds to an exchange or connecting to an app takes seconds, and the wallet itself usually costs nothing.

Passkey-based mobile wallets

Some newer mobile wallets open with a passkey, meaning your face, fingerprint or device PIN, instead of asking you to type a password or recovery phrase. That changes how you get in and how you recover a lost phone. It doesn't change where the keys are used. They're still on an online phone, so a passkey wallet is still a hot wallet.

If your wallet also gives you a recovery phrase, it needs the same care as any other. Our guide covers how to store a recovery phrase safely.

What is a cold wallet?

A cold wallet is a wallet that keeps its private keys on a device that never exposes them to the internet. It signs transactions inside the device, so the keys don't leave it, even when it's plugged into a computer. Cold storage is the same idea applied to savings you rarely move.

There are three common forms. A hardware wallet is a small device that connects by USB or Bluetooth to a computer or phone. An air-gapped device never connects at all and passes transactions by QR code or memory card. And an offline backup, such as a recovery phrase written on paper or stamped into steel, is cold storage of the keys themselves. Paper wallets, where a key is printed on paper, are an older method that few people set up today.

The point most explainers get wrong: a hardware wallet does talk to an online computer. "Cold" means the keys never leave the device, not that the device never connects. Your laptop prepares the transaction, the device signs it, and the signed result goes back out.

So what's the point of a cold wallet? An attacker who takes over your laptop still can't sign with keys that never touch it. Bitcoin.org puts it this way: "An offline wallet, also known as cold storage, provides the highest level of security for savings."

Hot or cold is not the same as custodial or not

Two separate questions get mixed up here. Hot or cold is about where the keys are. Custodial or not is about who holds them: you, or a company acting for you.

Put the two together and you get four combinations. An exchange account is custodial and hot. A phone wallet you control is self-custodial and hot. A hardware wallet you set up yourself is self-custodial and cold. And some companies offer custodial cold storage, where they keep your keys offline on your behalf.

Most arguments about "the safest wallet" mix these up. If you're still deciding who should hold the keys: custodial vs non-custodial, settle that first. Hot or cold comes second.

The real risks of each

Neither setup is free of risk. They fail in different ways.

Hot wallet risks

Are hot wallets safe? For spending amounts, they can be, if you control the recovery method and keep the device clean. The risks are mostly about the device and the people around it:

Malware and fake apps. A compromised computer or a copycat wallet app can read what you type or swap the address you paste.
Phishing. Fake sites and fake support accounts ask for your recovery phrase or trick you into approving a transaction.
A lost or stolen phone. Without a working backup, the funds go with it.
The platform itself. For exchange accounts, the company can fail or be hacked. The FTC notes that cryptocurrency held in accounts is not insured by a government the way bank deposits are, and that if the company storing your crypto goes out of business or is hacked, the government has no obligation to help you get it back.

Large platforms aren't exempt. The FBI attributed the theft of about $1.5 billion in virtual assets from the exchange Bybit, on or about 21 February 2025, to North Korea.

Cold wallet risks

What are the disadvantages of a cold wallet? Most of them come back to the owner:

Losing the recovery phrase. If the device breaks and the phrase is gone, nobody can restore the wallet.
Fake or tampered devices. A device bought from an unofficial seller, or one that arrives with a recovery phrase already filled in, may be set up to steal from you.
Approving a transaction without reading it. The device screen shows what you're signing. If you confirm without checking, the device's protection does nothing.
Physical theft of the device together with the written phrase.
Inconvenience. Cold storage takes longer to use, which tempts people to leave too much in a hot wallet.

Is it better to keep crypto in a wallet or on an exchange? An exchange carries platform risk you can't control. A wallet you control moves that risk onto you. Neither is free of it.

Which should you use?

For most people, the answer is both, split by how often the money moves. Bitcoin.org suggests keeping "only small amounts of bitcoins on your computer or mobile device for everyday use", and the same logic applies to other assets.

A simple way to divide it:

Spending money and funds you move often: a hot wallet. Speed matters more than extra protection here.
Money in transit to an exchange, a merchant or another person: a hot wallet, for as short a time as possible.
Long-term savings you rarely touch: cold storage.
Large or shared holdings: cold storage, possibly with multisig, which bitcoin.org describes as requiring "multiple independent approvals" before funds can be spent.

We don't set a money threshold for switching, because the right split depends on your situation, not on a number.

One habit makes the split easier to live with: top up the hot wallet from cold storage now and then, instead of spending straight from the cold wallet. Each trip out of cold storage is a transaction you sign on the device, so fewer, larger top-ups mean fewer chances to approve something by mistake.

Do you need a hardware wallet? Not everyone does. If you hold small amounts and move them often, a well-secured hot wallet may be all you need. A hardware wallet starts to make sense when you hold savings you don't plan to touch for a long time, and when you're confident you can keep a recovery phrase safe offline. If you can't keep the backup safe, the device adds a new way to lose funds rather than removing one.

How to move crypto from a hot wallet to a cold wallet

The first transfer is the one that needs care. After that it's routine.

Buy the device from the manufacturer or an authorised seller, not a marketplace listing or a second-hand seller.
Set it up so it creates a new recovery phrase, and write the phrase down offline. Never use a phrase that came printed in the box.
Check the receiving address on the device's own screen, and compare it with the address your computer or phone shows. If they differ, stop.
Send a small test amount on the right network. Our guide shows how to check an address and network before you send.
Send the rest once the test arrives.
Keep a little in your hot wallet for network fees, so you can still move funds later.
Confirm the transfer on a block explorer using the transaction ID.

Step 3 is the one people skip. Malware that swaps addresses works on your computer screen, not on the device screen, so the device is the copy to trust.

Expect the first transfer to feel slow next to a phone wallet. You connect the device, enter its PIN, open the right app on it and confirm each detail on a small screen. That friction is part of the protection.

Buying and selling when your savings are in cold storage

Many on-ramps let you paste your own wallet address at checkout, so you can buy straight to a cold wallet's address. Ramp Network lets you buy crypto to your own wallet address. Check the network shown at checkout.

Selling works the other way. You connect the device, sign a send to the service you're selling through, and confirm it on the device screen.

Explore Ramp Network Wallet
See how Ramp Network Wallet works. Explore Ramp Network Wallet

Frequently asked questions

Can you lose crypto in a cold wallet?

Yes, if you lose both the device and the recovery phrase, or if someone else gets the phrase. The coins stay on the blockchain. What you lose is the ability to move them. Keep the phrase offline, in a safe place, and read our guide to what a seed phrase is for storage options.

What happens if my hardware wallet is lost or breaks?

Your funds aren't stored on the device. They're on the blockchain, and the device only holds the keys. You can restore access on a new device or another compatible wallet using your recovery phrase. Without the phrase, there's no way back, so test your backup before you rely on it.

Can a cold wallet be hacked?

Remote attacks on the keys are much harder, but you can still be tricked. The realistic risks are fake or tampered devices, phishing that gets you to approve a transaction you didn't mean to sign, and a stolen recovery phrase. Always read what you approve on the device screen before you confirm.

Is a mobile crypto wallet safe?

Reasonably safe for spending amounts, if you control the recovery method, keep the phone updated and locked, and install the app only from the official app store. It's still a hot wallet, so its keys are used on an online device. That's why many people keep large long-term savings in cold storage instead.

Can I buy crypto straight to a cold wallet?

Yes. Show the receive address on the device, copy it, and paste it into an on-ramp that lets you send to your own address. Compare the pasted address with the one on the device screen, and check that the network at checkout matches the network your cold wallet uses for that asset.

---

Ramp Swaps (Ireland) Limited trading as Ramp Network is regulated by the Central Bank of Ireland.

Using Top up, Buy or Sell services:

Warning: If you invest in this product, you may lose some, or all, of the money you invest.
Warning: The value of your investment may go down as well as up.

Using self-custodial wallet including send feature:

Warning: The provision of this service does not require licensing, registration or authorisation by the Central Bank of Ireland, and as a result is not covered by Central Bank of Ireland rules designed to protect consumers or by a statutory compensation scheme.