Published 10 November 2026
A hot wallet keeps its private keys on a device connected to the internet — a phone app, a browser extension, an exchange account. A cold wallet keeps them offline, usually on a hardware device that signs transactions without the key ever leaving it. Cold is safer for savings because nothing online can reach the key; hot is easier for spending. Most people end up using both.
Coins never sit in a wallet. They are entries on a blockchain, and a wallet holds the private keys that let you spend them. Whoever has the keys controls the coins, which is why the question that matters is where the keys live and who can reach them. Most wallets derive every key from one seed phrase of 12 or 24 words, so that phrase is the real backup — how to store it is a guide of its own.
Phone apps, desktop apps and browser extensions are hot wallets: the key is stored, usually encrypted, on a device that is online. They are convenient for paying, trading and using applications, and they share every risk the device has — malware, a stolen phone, a malicious browser extension, a fake app in an app store, a signature you approved without reading. Keep only what you would carry in a physical wallet in one.
A hardware wallet stores the key on a small device and signs transactions inside it; your computer only sees the signed result. You confirm the amount and address on the device's own screen, which is what protects you from malware that swaps the address on your computer. Paper and metal backups of a seed phrase are cold storage too, but they cannot sign anything until you type the phrase into a device, so they are a backup rather than a wallet you use.
Cold is not invulnerable. The device can be lost (the seed phrase restores it), the seed phrase can be found, and you can still be talked into signing a transaction to a scammer. Cold storage stops remote theft of the key; it does nothing against being talked into a payment. Common crypto scams covers those tricks.
A second question cuts across hot and cold: who holds the keys? On an exchange the exchange does — your balance is a promise, and if the exchange is hacked, freezes withdrawals or fails, you wait in line with everyone else. That is what "not your keys, not your coins" means. A non-custodial wallet, hot or cold, gives you the keys and with them the whole responsibility: nobody can freeze the bitcoin in it, and nobody can recover it if you lose the phrase. (Tokens such as USDC and USDT are different: their issuers can freeze them at any address.)
You do not need to plug in a hardware wallet to know what it holds. Its public addresses, or its extended public key (xpub), show balances and history without being able to spend anything. Two cautions: anyone with your xpub can see every address it will ever generate, so share it only with services you trust, and never type a seed phrase into anything to "connect" a wallet. A tracker that works from CSV exports needs neither.
For savings, yes: the private key never touches an internet-connected device, so it cannot be stolen remotely. You still have to protect the seed phrase and check what you sign.
It is a custodial one: the exchange holds the keys on its own systems and owes you the balance. Convenient for trading, and a risk if the exchange fails or freezes withdrawals.
Buy a new one, or any compatible wallet, and restore it from your seed phrase. The coins are on the blockchain, not in the device. Without the seed phrase they cannot be recovered.
Yes. Its public addresses or extended public key show balances and history, and cannot spend anything. Share them only with services you trust.
This guide explains how things work. It is not financial, investment or tax advice. Something wrong? Write to hi@perly.io and we will correct it.
© 2026 Perly. All rights reserved.