What Is a Hot Wallet?

A hot wallet is a working account, not a vault. Treat it like a vault and sooner or later somebody else treats it like an ATM.

A hot wallet is software that holds your keys on a device that's online. You control the keys, not a platform, so it's still self-custody. The trade-off: anything that can reach that device may be able to reach the wallet. It's where most day-to-day activity happens, and where most avoidable custody mistakes get made.

With a real self-custody wallet, Chad says, "the only time you'd ever have issues withdrawing is you don't have enough for gas fees."

How does a hot wallet work?

When you create one, the app generates your keys and a seed phrase and stores the keys, encrypted, on the device. A password or your phone's passcode unlocks them. Once unlocked, the app signs transactions instantly. That's what makes it useful for swapping, staking and moving funds between venues.

That speed is also the risk. The common attack chain is ordinary, not exotic:

1. Malware lands on the computer, or someone gets into an unlocked phone.
2. If the wallet is unlocked, they have full access.
3. If it's locked but the password is saved in the browser, or is the same password used on a social media account that leaked, they can unlock it anyway.

The fix is just as ordinary: a unique password used nowhere else, never saved in the browser, a locked phone with its own passcode, and a wallet that's locked when you're not using it. Boring. Effective.

How much belongs in a hot wallet?

Only what you're actively using. Our portfolio course draws the line by time and size: crypto you're exchanging, swapping or earning yield on belongs in a hot wallet, while anything you plan to hold more than about three months, or any balance above roughly $100,000, belongs in cold storage.

An illustration: you plan four or five swaps and a staking position over the next two months, together worth about $3,000. That $3,000 sits in the hot wallet. Long-term holdings sit in a cold wallet, and active trading capital, 1% of the portfolio while you're learning, sits on the trading platform. If the hot wallet balance creeps above what the next three months actually need, move the excess offline.

How does Chad use his hot wallet?

Chad Wittfeldt keeps even the crypto he's actively moving in self-custody rather than on an exchange: "I don't leave any crypto sitting on exchanges." The only exception in his setup is the active trading capital on the platform he trades with.

He sticks to long-established wallet software and installs it from verified links, never from a search result. In our training, the vetted links sit right under the lesson so students never have to search.

Hot wallet balances belong in your total exposure review alongside open positions. A position can be sized perfectly and still be exposed if the wallet holding it is unlocked on a shared laptop, right?

What's the hot wallet mistake that empties wallets?

Downloading the wallet from the wrong place. Searching a popular wallet name can surface lookalike sites and paid ads that install a fake app. And the fake app's first request? "Restore" your wallet with your seed phrase. Type the official address yourself or use the official app store listing, and check the developer name before installing. Scammers pay for those search ads because they WORK.

The second mistake is letting the hot wallet quietly become the whole portfolio. It starts as a working balance, a few busy months go by, and suddenly most of the portfolio sits on a phone. Set a ceiling and sweep anything above it to cold storage on a schedule.

What hot wallet settings should you lock down today?

Give your wallet a password used nowhere else, delete it from your browser, and check your balance against a three-month ceiling.

Keep going: hot wallet vs cold wallet, how to build a crypto portfolio and crypto scam red flags.

Source: NIST's Blockchain Technology Overview (NISTIR 8202) describes a wallet as software that holds your private keys and notes that whoever obtains a key gains full control of the assets it secures.