Every wallet is one of two kinds, and the difference is simply whether it touches the internet. Getting this right is one of the highest-value things a beginner can learn, because it decides how exposed your coins are to theft.
Hot wallets: connected and convenient
A hot wallet is software on a device that is online — a phone app, a browser extension, the wallet built into an exchange. Because it is connected, you can send and trade in seconds.
That convenience is also the weakness. Anything online can, in principle, be reached by an attacker: through a fake app, a malicious link, or malware on your phone. Hot wallets are excellent for small amounts you use often — think of it as the cash in your pocket.
Cold wallets: offline and safer
A cold wallet keeps the keys that control your crypto on a device that is never connected to the internet. The most common form is a hardware wallet — a small physical device that signs transactions offline, so the secret keys never leave it.
To steal from a cold wallet, a thief usually needs the physical device and its PIN, or your written-down recovery phrase. That is a far higher bar than guessing a password. Cold wallets are for savings — the amount you would be sick to lose.
A simple rule of thumb
You do not have to pick only one. Most careful holders use both:
- Keep spending money in a hot wallet, the way you keep some cash on hand.
- Keep long-term savings in a cold wallet, the way you keep the rest in a vault.
- The more you hold, the more the balance should tip toward cold storage.
If your entire position would fit in what you would carry as walking-around money, a reputable hot wallet is fine for now. The moment the number starts to feel serious, get a hardware wallet.
Is leaving it on the exchange a third option?
Technically yes, and many beginners do. But coins on an exchange are controlled by the exchange, not by you — summed up in the phrase "not your keys, not your coins." If the platform is hacked, freezes withdrawals, or fails, your access depends entirely on them. History has several examples of exchanges that lost customer funds.
For small amounts you are actively trading, the convenience can be worth it. For savings, custody you control is the safer default.
The part that actually protects you
Whichever wallet you choose, the real security is the recovery phrase — the list of words generated when you set up a self-custody wallet. Anyone with those words has your money; lose them and no one can restore your funds. Two rules cover most people:
- Write it on paper (or stamp it into metal), never store it as a photo or in a notes app.
- Never type it into any website or share it with anyone, including "support" staff — that request is always a scam.
It is also worth keeping a second copy of that phrase in a separate safe place. The most common way people lose self-custodied crypto is not theft — it is simply losing the only copy of their recovery words. Two durable copies, stored apart, protects against both fire and forgetfulness.
Takeaway
Hot wallets are online and convenient but more exposed; cold wallets are offline and far harder to steal from. Use a hot wallet for small, active amounts and a cold wallet for savings. Matching the wallet to the stakes is most of personal crypto security.
Crypto is volatile, and self-custody means you are responsible for your own keys. Lose them and no one can recover your funds.