01The only difference
A hot wallet keeps the key on a connected device — phone, computer, browser extension. A cold wallet's key has never touched one: signing happens inside an offline device and only the finished signature comes out.
So classifying a wallet has nothing to do with its name or its price. It has one test: has this key ever existed on a machine that can go online.
Clearing up adjacent terms while we are here:
- A hardware wallet is one implementation of cold storage, with the key sealed inside a dedicated device.
- A paper wallet means the phrase or key written on paper. Also cold, extremely inconvenient in practice, and the transcription and restore steps carry their own risks.
- Putting a phone in airplane mode is not cold storage. The key is still on a device that can connect at any time.
02What each actually blocks
Cold storage blocks the category where a program on your device reads the key. It adds essentially nothing against phishing, mistaken approvals or social engineering — those are already decided the moment you press confirm.
| Risk | Hot wallet | Cold / hardware |
|---|---|---|
| Malware reads the key off the device | Exposed | Blocked |
| Clipboard substitutes the address | Exposed | Partly blocked; the device screen shows the address |
| A phishing site gets you to approve | Exposed | Equally exposed |
| You hand over the seed phrase yourself | Exposed | Equally exposed |
| The backup is lost | Exposed | Equally exposed |
| Day-to-day convenience | High | Low; the device comes out every time |
The middle rows are the ones to remember: a cold wallet does not license casual confirming. Reading a signature request is still your job — see signatures and approvals.
Where multisig and social recovery fit
Two more arrangements get discussed alongside hot and cold, and they answer a different question — not "how far is the key from the network" but "is there a second chance when something goes wrong."
- Multisig requires several of a set of keys to sign before anything moves. One compromised key is not enough to cause a loss; the costs are more friction on every operation, and the fact that such an address is itself a contract whose implementation you have to trust.
- Social recovery nominates guardian addresses that can collectively help you rotate to a new key if you lose your everyday one. It softens the worst point — "no recovery" — at the cost of maintaining a guardian list and thinking about them colluding or all disappearing.
Neither is a starting point. Both add complexity, and complexity is itself a source of risk. Manage one ordinary wallet's seed phrase properly first, then consider whether to go further.
03What a hardware wallet plainly does not solve
It does not solve seed phrase storage, mistaken approvals, being talked into something, or sending to the wrong address. It closes exactly one road: a program on a networked device stealing the key.
- The seed phrase is still a seed phrase. A hardware wallet hands you one at initialisation, to be written down and stored offline, and lost means lost. Standards in seed phrases and private keys.
- You are still looking at a web page on a computer. A phishing site can still get you to press confirm on the device. The screen shows the transaction — if you actually read it.
- It will not judge a contract address for you. It displays what you are about to sign.
- The device can be lost or fail. Losing it does not lose the assets (the phrase restores them), which once again shows where the real dependency lies.
Relaxing after buying a hardware wallet is worse than not buying one. In real losses, plenty of people had their key inside the device the entire time — they simply pressed confirm on a cloned page.
04Choosing by amount and use
Small and frequently used: hot. Large and rarely touched: cold. The genuinely practical answer is not either-or but running both and splitting by purpose.
- Everyday wallet (hot): mobile or extension, holding only what you could lose today without it mattering, used for connecting to sites and small swaps.
- Vault wallet (cold, or at minimum a hot wallet that connects to nothing): the bulk, receiving and sending only to your own addresses.
When is a cold wallet worth paying for? Our view: when the value clearly exceeds the price of the device and you intend to hold for a year or more. For a few hundred dollars of pocket-money exposure, effort spent on the seed phrase backup returns more.
A free intermediate option
Before buying anything, there is a near-zero-cost middle tier: use an old phone as a store-only, never-browse wallet.
Factory reset a handset you no longer use, install one wallet app, create the wallet and back up the phrase to the usual standard, then never install anything else on that device, never browse on it, and never connect it to a site. Power it on only when you need to send.
Strictly it is still a hot wallet — the key is on a device capable of connecting — but the attack surface is small enough that the practical risk is far below your daily phone. Its limits are equally clear:
- Once the operating system stops receiving updates, its security degrades over time.
- You can still approve something you should not, if you ever use it to connect to a site.
- The device will age and the battery will fail — which does not endanger the assets, because the phrase is what matters.
This suits the middle ground of "enough at stake to care, not enough to justify buying a device", and it is a good way to find out whether you can actually keep up the discipline of separating purposes. If you cannot, a hardware wallet will not save you either.
Still deciding whether to self-custody at all: who does not need a Web3 wallet. For a capability-by-capability comparison, use the wallet type tool.
05If you do buy one
Buy from the manufacturer or an authorised seller, never second-hand, never pre-opened, and confirm it makes you generate the seed phrase yourself rather than shipping one to you on a card.
- Channel. Official store or authorised retail. Cheap listings on marketplaces can have been tampered with.
- Never use a phrase someone else supplied. If the box contains a card with words already printed, the assets on that device were never yours.
- Set your own PIN at initialisation; do not accept a factory default.
- Test small first. Send a little in, send it back out, confirm the whole path — the same habit as in setting up your first wallet.
- Update firmware only through official software.
Why second-hand is an absolute no
This deserves separating out, because it looks like saving money and is actually handing your assets to the previous owner. A device that was pre-initialised has a seed phrase that is already in someone else's hands; whatever you deposit, they can move at any moment, without ever touching your device.
Worse, these are usually packaged convincingly: intact-looking seal, a manual, and a card reading "your recovery words — please store safely." A genuinely new device always makes you generate the words on the device itself and never ships a pre-printed card.
The same reasoning covers every route: a device won in a giveaway, passed on by a friend, or listed as "new, sealed" on a resale site. The discount is nowhere near proportionate to the risk.