Custody, decided in advance
The Difference Between
a Cold Wallet and a Hot Wallet
Hot wallet vs cold wallet comes down to where the keys live: online for convenience, offline for safety. Where you hold an asset is part of its risk. Period. An exchange, a hot wallet and a cold wallet each protect you from different things, and each leaves you open to different things. Two simple rules decide where every part of your portfolio belongs.
What's the difference between a hot wallet and a cold wallet?
Where the keys live. That's it.
A hot wallet keeps its keys on an internet-connected device, like a browser extension or a phone app. It's convenient for crypto you use often, and more exposed to malware and phishing. A cold wallet keeps its keys offline, usually on a dedicated hardware device, so they never touch the internet. It's less convenient and much harder to attack. Both are self-custody: you hold the keys, not a company.
So who's this page for? The person who wants to decide where their crypto lives before something forces the decision. Not the person who's sure their exchange will be fine forever because it's been fine so far.
So where does an exchange fit next to a hot or cold wallet?
An exchange is the third option, and it's a different animal entirely. When crypto sits on an exchange, the exchange holds the keys and you hold a promise.
That's why the old line "not your keys, not your crypto" went mainstream after a major exchange collapsed in November 2022 with roughly $8 billion of customer funds missing. Customers who'd never had a problem in years of use found their withdrawals frozen overnight. Years of smooth sailing... and then nothing.
Is it safe to keep crypto on an exchange?
For active trading capital, it's a reasonable trade. For everything else, it's a risk you don't need.
No ordinary customer can audit an exchange from the outside, and an exchange that's been fine for years tells you nothing about next year. Plenty of people tell us they've used the same exchange for years without a problem. That's the entire point. Nobody has an issue until the day they do.
So the question isn't whether your exchange is trustworthy today. It's how much you're willing to have exposed to any single company. Write that number down.
Custody is one piece of the foundation. If you're just starting, read how to start investing in crypto first, then decide how much belongs in each place as part of building a crypto portfolio. Both sit on our roadmap for learning crypto trading.
Two rules for where crypto belongs
Straight from the custody module of the portfolio course I teach. One rule is about time. The other is about size. Neither one cares how you feel about your exchange.
The time rule
Any substantial amount you plan to hold for more than about three months belongs in self-custody, not on an exchange. Exchanges are for the smaller amount you're actively trading.
The size rule
Holdings you're keeping for years, or anything over about $100,000, belong in cold storage. Hot wallets are for the working amount you swap, stake or move regularly.
What goes where
Doesn't belong there
- Long-term holdings parked on an exchange for months or years
- A large balance in a browser wallet that always stays unlocked
- A seed phrase saved in email, notes, photos or a cloud account
- One single copy of the seed phrase, kept in only one place
- A hardware wallet bought from a reseller or through a search ad
- The same password on your wallet and all your other accounts
Belongs there
- Exchange: only the active trading capital you are using now
- Hot wallet: only the working amount you use on a regular basis
- Cold wallet: long-term holdings and anything of substantial size
- Seed phrase: on paper or metal, offline, in two or more safe places
- Hardware bought directly from the maker's own official website
- Unique passwords everywhere, and wallets locked when not in use
Self-custody moves the risk. It doesn't remove it.
Take crypto off an exchange and you're no longer exposed to that exchange. Now you're exposed to yourself: the security of your devices and, above all, your seed phrase.
Is that a better risk to carry? Yes, because it's one you control. But you have to carry it on purpose. Nobody's going to do it for you.
You don't have a problem until you have a problem and you can't see the future.
Protecting what you hold
How should you store a seed phrase?
Offline. Always, always, always offline.
Write it on paper or stamp it in metal, and keep it in more than one secure location, like a home safe and a second place you trust. Never in an email to yourself, a note on your phone, a photo or a cloud document. If that device or account gets compromised, so does the wallet.
And here's the part people don't think about until it's too late. With an exchange, a forgotten password can be reset. With self-custody, a seed phrase that's lost is lost. As I like to say: "There's no seed phrase reset button."
One more thing. No legitimate company, support agent or recovery service will EVER ask for it.
What custody mistakes do our coaches see most?
Two, and in this order. The most common is sending funds on the wrong network. Right behind it is a lost seed phrase. Both come from the same place... skipping the foundation. That's why the setup steps below matter more than which wallet you pick.
How do hot wallets get drained?
Usually through something boring. Malware on a computer can reach a browser wallet left unlocked. If the wallet is locked but its password is saved in the browser, or reused from another account that leaks, the lock doesn't help. On a phone, a wallet that opens without its own passcode is only as safe as the phone's lock screen.
The fix isn't exciting: a unique password for every wallet, nothing saved in notes or messages, wallets locked when you're not using them, and only a working amount kept hot. Boring keeps your coins, right?
How do you avoid fake wallet websites?
Search results for popular wallets sometimes include convincing fakes, paid ads included. Why? Because the people running them know exactly what you're about to type. Type the official address yourself or use the official app store listing, bookmark it, and use the bookmark from then on. Buy hardware wallets only from the maker's own site. A device bought second-hand or from an unofficial seller can be tampered with before it ever reaches you.
For a full set of checks before you trust any platform or person, run our due diligence check.
How do you set up cold storage?
Do this once, carefully, before you move anything substantial. We walk members through custody setup step by step, and we don't push any wallet brand. You pick it. We make sure you set it up right.
- 01
Buy from the maker
Order a hardware wallet from a long-established maker, through its official site, typed in yourself. Check the packaging hasn't been opened.
- 02
Generate the seed phrase on the device
Never use a phrase that came pre-printed, got emailed to you or was handed to you by anyone. The device creates it. You write it down. Nobody else is involved.
- 03
Store it offline, twice
Write the phrase on paper or metal. Keep two copies in two separate secure places. No photos, no cloud, no notes app.
- 04
Send a small test first
Move a small amount, confirm it lands on the right network and you can see it, then send the rest. Five minutes of patience here is cheap.
- 05
Check the network every time
The sending and receiving networks have to match, and some assets need a memo or tag. A mismatch can make a transfer unrecoverable.
- 06
Keep the working amount hot
Leave only what you're actively using in a hot wallet, and only active trading capital on an exchange.
Common questions
Both, for different jobs. A hot wallet keeps its keys on a connected device, so it's for the working amount you swap or move regularly. A cold wallet keeps its keys offline, so it's for long-term holdings. Our rule: anything you plan to keep for more than about three months belongs in self-custody, a hot or cold wallet rather than an exchange, and holdings you're keeping for years, or anything over about $100,000, belong in cold storage.
For long-term holdings, yes. A cold wallet keeps its keys offline, so malware and phishing on your computer can't reach them. A hot wallet is more convenient for regular use but more exposed. Most people use both: a cold wallet for holdings and a hot wallet for a working amount.
If you hold crypto for the long term or hold a substantial amount, yes. A good rule: anything you plan to keep for more than a few months belongs in self-custody, and holdings kept for years, or over about $100,000, belong in cold storage.
It's a reasonable trade for the capital you're actively trading. For long-term holdings it adds a risk you don't need, because the exchange holds the keys. Exchange failures have frozen customer withdrawals before, including at exchanges that had run smoothly for years.
If you still have your seed phrase, you can restore the wallet on a new device and nothing is lost. If you lose the seed phrase as well, nobody can recover the funds. That's why the phrase should be stored offline in more than one secure place.
Hardware wallets from established makers typically cost a one-time fee in the range of tens to a few hundred dollars. Buy only from the maker's official site.
Not remotely, as long as the seed phrase stays private. The real risks are someone getting the seed phrase, a tampered device bought from an unofficial seller, or being tricked into approving a transaction. No legitimate person will ever ask for your seed phrase.
Set up the foundation with us.
Pick one thing from this page and do it this week: write your seed phrase down twice, or move whatever you've held for three months off the exchange. Hope isn't a custody plan. If you want to learn custody, security and risk before you ever place a trade, join the Crypto Renegades Skool Community. It's free for a week, then $97/month.
5.0Based on 95 reviews