A hot wallet is connected to the internet and ready for immediate transactions (phone apps, browser extensions). A cold wallet is kept offline and only connects briefly to sign transactions (hardware devices, paper wallets, air-gapped computers). The tradeoff is convenience versus security, hot for spending, cold for saving.
What Is a Hot Wallet vs. a Cold Wallet?
3 min read
The short version
Hot wallets are like your physical wallet in your pocket: convenient for daily spending but risky if stolen. Cold wallets are like burying gold in a locked bunker: inconvenient for quick purchases but far harder for a thief to access. Most people benefit from having both: a small hot balance for daily use and cold storage for their savings.
How It Works
Hot wallets (MetaMask, Trust Wallet, Coinbase Wallet) store private keys in software on internet-connected devices. They are vulnerable to: malware that extracts key files, phishing attacks that trick you into signing malicious transactions, browser vulnerabilities, and clipboard hijacking. Cold wallets (Ledger, Trezor, Coldcard, paper wallets) store keys on devices that are either permanently offline or only briefly connected during signing. The key distinction is not the form factor but the exposure: a hardware wallet plugged into a computer is technically "warm" during the transaction, but the keys remain isolated in the secure element, making it functionally cold even when connected.
A practical hot/cold setup for $50,000 in crypto
You hold $50,000 in various crypto. Setup: (1) Cold storage, Ledger Nano S Plus holding $47,000 across ETH, BTC, and stablecoins. Seed phrase stamped on steel plate, stored in a home safe. Device kept in a drawer, only plugged in when moving funds. (2) Hot wallet, MetaMask on your phone with $3,000 for DeFi interactions and occasional payments. You accept that this $3,000 is at higher risk. If the hot wallet is compromised, you lose at most $3,000. Your $47,000 is safe because those keys never existed on any internet-connected device.
What People Get Wrong
Cold wallets cannot interact with DeFi
You can connect a hardware wallet to DeFi interfaces (MetaMask + Ledger, for example). The interface runs in your browser, but signing happens on the cold device. This gives you DeFi access with cold-storage security.
An exchange account is a hot wallet
An exchange account is a custodial relationship, you do not hold the keys at all. A hot wallet means you hold the keys on an internet-connected device. The distinction matters: custodial = trust risk; hot self-custody = technical risk.
Paper wallets are the safest cold storage
Paper wallets are fragile (fire, water, fading ink), prone to generation errors, and awkward to spend from partially. Hardware wallets are more practical cold storage for most people, they are durable, support partial spending, and display transaction details for verification.
Keep Reading
Sources & Further Reading
- MetaMask Support
Official documentation for the MetaMask hot wallet
- Bitcoin.org: Choose Your Wallet
Comparison tool for Bitcoin wallets by type and features
Questions People Also Ask
- How much should I keep in a hot wallet?
- Only what you would be comfortable losing entirely. For most people, this is equivalent to what you would carry in a physical wallet, $200 to a few thousand dollars, depending on your DeFi activity level.
- Is a phone wallet hot or cold?
- A standard phone wallet (MetaMask Mobile, Trust Wallet) is hot, the keys are on an internet-connected device. A phone can become cold-ish if kept in airplane mode permanently, but this is impractical and not recommended over purpose-built hardware.
- Can I make a cold wallet without buying a device?
- Yes. You can generate a wallet on a permanently air-gapped computer (one that has never and will never connect to the internet). This is technically sound but operationally complex, hardware wallets exist to make this process user-friendly.