TL;DR: A hot wallet is a Bitcoin wallet connected to the internet, while a cold wallet is not. In general, hot wallets offer more convenience for day-to-day spending but are less secure because they can be targeted by malware from the internet. In comparison, cold wallets are deemed safer for storing large amounts of bitcoin since they are not continuously exposed to the internet.
The distinction between hot and cold depends mainly on the preparation required in order to spend bitcoin from a wallet. This is closely related to the degree to which a wallet is online, i.e., directly or indirectly connected to the internet.
When a wallet is connected to the internet, it can sign transactions and send your bitcoin immediately. We call this a hot wallet. However, an internet connection also makes it vulnerable to possible security compromises like remote access.
On the other hand, a cold wallet is not connected to the internet and is mainly used for generating and storing private keys offline. If you want to send bitcoin from your cold wallet, it requires manual action, such as having a signing device (hardware wallet) sign the transaction offline, then broadcasting it with a separate companion wallet.
There are also more categories than hot and cold, such as a warm wallet, where the signing device is connected but requires user interaction to sign. Note that such wallets can still be exploited, e.g., by a thief, but not by a remote hacking operation via the internet.
Hot vs cold at a glance
- Hot wallet: online, signs on demand, best for small amounts you spend often. Larger remote attack surface.
- Cold wallet: offline key storage, signs only with manual action, best for long-term savings. Resistant to remote attacks.
- Warm wallet: a signing device that is connected but still requires physical confirmation to sign. A middle ground.
- The distinction is about internet exposure of the keys, not the brand or form factor of the wallet.
Which one should you use?
Most people are best served by using both, matched to purpose. A hot wallet such as the self-custodial Blockstream app on your phone is well suited to everyday payments and small balances, where speed and ease matter and the amount at risk is limited. Cold storage is where larger savings belong, because the keys never touch an internet-connected device and so cannot be reached by remote malware. A useful mental model is a checking account versus a vault: you keep walking-around money in one and the bulk of your funds in the other.
Where Hardware Wallets Fit, and the Warm Middle Ground
A hardware wallet is the usual way to hold keys in cold storage. Blockstream Jade generates and stores the private keys offline and signs transactions on the device itself, then hands the signed transaction back to companion software to broadcast, so the keys stay isolated throughout. A warm wallet is the in-between case where the signing device is connected but still demands a button press to approve each transaction, which blocks fully remote theft while keeping spending reasonably quick. Each of these can still be physically stolen, so the recovery phrase and the device both need to be kept secure.
Frequently Asked Questions
Is a cold wallet safer than a hot wallet?
For protecting against remote attacks, yes. Because a cold wallet keeps the private keys offline, an attacker cannot reach them over the internet, which removes the largest category of theft. Hot wallets are more convenient for frequent spending but are exposed whenever the device is online, so they are best reserved for amounts you can afford to lose.
Is a hardware wallet the same as a cold wallet?
A hardware wallet is the most common way to achieve cold storage, but "cold" describes the offline state, not the device. A hardware wallet keeps keys offline and signs in isolation, which is what makes it cold. The terms overlap heavily in everyday use, though cold storage can also be done with other offline methods.
Can a cold wallet be hacked?
A cold wallet cannot be reached by a purely remote attack, which is its main advantage, but it is not immune to every threat. Physical theft of the device or the recovery phrase, a tampered device bought from an untrusted source, or tricking you into approving a malicious transaction are still risks. Buying from the manufacturer and verifying signed transactions on the device screen address most of these.
What is a warm wallet?
A warm wallet sits between hot and cold: the signing device is connected, but every transaction still requires manual confirmation on the device before it will sign. This blocks fully automated remote theft while keeping spending faster than a fully cold setup. It is a reasonable middle ground for funds you access regularly but that need better protection than an always-online hot wallet allows.