Hot wallet vs cold wallet vs hardware wallet
"Hot wallet", "cold wallet" and "hardware wallet" are used as if they were three kinds of product. They are not quite. The first two describe whether a wallet's keys are ever connected to the internet, and a hardware wallet is the most common way to keep keys cold. This page explains the terms, what each protects against, and what none of them can stop.
The terms
| What it is | Examples | |
|---|---|---|
| Hot wallet | Keys live on a device that is connected to the internet | Browser extension, phone app, desktop app |
| Cold wallet | Keys are kept offline and are never on a connected device | Hardware wallet, an air-gapped device, paper or metal backup of the keys |
| Hardware wallet | A dedicated device that stores the keys and signs transactions on the device itself | A small USB or Bluetooth device from a wallet maker |
An exchange account is neither. The exchange holds the keys for you. That is a custodial setup, and you rely on the exchange being secure and solvent.
Hot wallet: convenient, more exposed
- Good for: everyday use, trading, apps that need to connect, small amounts.
- Risks: malware on the device, malicious browser extensions, fake wallet apps, phishing sites that trick you into signing a drain. See fake airdrops and spam NFTs.
- Rule of thumb: keep only what you are prepared to lose.
Cold wallet and hardware wallet: safer for larger amounts
- Good for: savings you do not touch often.
- Why it is safer: the keys never leave the device, and every transaction must be confirmed on the device's own screen. A virus on your computer cannot sign for you.
- The seed phrase is still the weak point. Whoever has the words controls the funds, device or not. See what a seed phrase is.
What a hardware wallet does not protect you from
- Signing something harmful. If you approve a malicious transaction or an unlimited token approval on the device, it is signed and valid. See unlimited token approvals.
- Paying the wrong address. It signs what you confirm. See address poisoning. Read the full address on the device screen.
- A tampered or fake device. Buy only from the manufacturer or a seller it names, never from a marketplace or a reseller you cannot verify, and never use a device that arrives with a seed phrase already written for you. See Ledger CryptoBilis: what we know.
- Phishing for your phrase. A real device only asks for the words on its own screen when you restore from a backup.
- Loss of the backup. Without the seed phrase a lost device can mean lost funds.
A sensible split
- A hot wallet with a small balance for everyday use.
- A hardware wallet for the larger amount you do not need to touch.
- The seed phrase of each, written down offline and stored separately.
- Send a small test amount first when you move money between them, and check it arrived at the right address.
Where Hopchain fits
Hopchain is not a wallet and holds no keys. It reads public data, so you can look up your own address to see its history and who it has dealt with, and look at an address before you send to it. It does not replace a hardware wallet and cannot prevent a transaction from being signed. This is general information, not financial or security advice.
Frequently asked questions
What is the difference between a hot wallet and a cold wallet?
A hot wallet keeps its keys on a device that is connected to the internet. A cold wallet keeps them offline.
Is a hardware wallet a cold wallet?
Usually yes. A hardware wallet stores the keys on a dedicated device and signs transactions there, so the keys never touch your computer or phone.
Is a hardware wallet completely safe?
No. It does not stop you from signing a malicious transaction or approval, paying a wrong address, or losing your seed phrase, and a tampered device bought from an unverified seller can be dangerous.
Is an exchange account a hot wallet?
No. The exchange holds the keys, so it is a custodial account. A hot wallet in the usual sense is one where you hold the keys on a connected device.
How much should I keep in a hot wallet?
Only an amount you are prepared to lose. Keep the rest in cold storage.
Does Hopchain replace a hardware wallet?
No. Hopchain holds no keys. It reads public blockchain data to show the history and connections of an address.
Keep reading
- What is a seed phrase?
- Unlimited token approvals: what they are and how to revoke them
- Address poisoning: what it is and how to avoid it
- Ledger CryptoBilis: what we know and what to do
- How to check a wallet before sending crypto