Hot wallets vs. cold wallets: where to keep your crypto
The difference between leaving crypto on an exchange, using a phone wallet and using a hardware wallet, and how to choose.
A crypto "wallet" doesn't actually hold coins. Coins live on the blockchain. A wallet holds the private keys that prove they're yours and let you move them. Whoever controls the keys controls the crypto.
Three ways to hold crypto
| Option | Who holds the keys | Good for | Main risk |
|---|---|---|---|
| Exchange account | The exchange | Small amounts, frequent trading | Exchange failure, hack or account freeze |
| Hot wallet (phone or browser app) | You, on an internet-connected device | Spending, using apps | Malware, phishing, lost phone without backup |
| Cold wallet (hardware device) | You, on an offline device | Long-term savings | Losing the recovery phrase |
Keeping crypto on an exchange
This is what most people do at first, and for small amounts it's reasonable. Large US exchanges use cold storage for most customer funds and many carry insurance against some kinds of theft. But your coins are only as safe as the company. When FTX collapsed in 2022, customers lost access to their funds for years. Crypto held on an exchange is not FDIC insured.
If you keep funds on an exchange, use a strong unique password and an authenticator app or security key for two-factor authentication, and turn on withdrawal address allow-lists if offered.
Hot wallets
A hot wallet is an app that stores your keys on your phone or computer. It's free and convenient, and you control the keys. It's also exposed to whatever happens on that device: malicious browser extensions, fake apps and phishing sites that ask you to "connect your wallet" and approve a transaction that drains it.
Cold wallets
A hardware wallet is a small device that keeps your keys offline and signs transactions internally. Even on an infected computer, an attacker can't move your coins without you physically confirming on the device. For savings you plan to hold for years, it's the standard choice. Our hardware wallet guide covers set-up.
The recovery phrase
When you set up a self-custody wallet, you get a recovery phrase of 12 or 24 words. Anyone with those words can take your crypto from anywhere in the world. If you lose them and the device, your crypto is gone permanently.
- Write the phrase on paper or stamp it in metal. Store it somewhere safe from fire and water.
- Never type it into a website, app or chat, and never photograph it or store it in the cloud.
- No legitimate company or support agent will ever ask for it.
A practical split
Many people keep a small trading balance on an exchange and move anything they don't plan to touch for a year or more to a hardware wallet. Whatever you choose, test a small withdrawal first and double-check the address and network before sending.
This guide is for general education and isn't financial, investment, legal or tax advice. Crypto is volatile and you can lose money. Facts were checked as of the update date above; rules and fees change.