Hot vs Cold Bitcoin Wallets: Which Should You Use?
Hot wallets are connected to the internet. Cold wallets are not. The difference determines how much security you have and how convenient your bitcoin is to spend. Use both, for different purposes.
The distinction between hot wallets and cold wallets is one of the most important concepts in Bitcoin self-custody. It determines how much security you have and how conveniently you can spend.
The answer to "which should I use?" is almost always: both. For different purposes.
What "Hot" and "Cold" Mean
A hot wallet is a wallet whose private keys are stored on a device connected to the internet. The keys exist on a phone, a computer, or in a web browser. The keys are (usually) encrypted, but they are on a networked device. A sophisticated attacker with access to the device could, in principle, extract them.
A cold wallet is a wallet whose private keys are stored on a device that is never connected to the internet. The keys exist only on a hardware wallet. Transactions are constructed online but signed offline. The key never touches a networked device.
This is the fundamental security distinction. Everything else follows from it.
The Trade-Offs
Hot wallets
Pros:
- Instant access — send and receive in seconds
- Good for Lightning payments and daily spending
- No additional hardware required
- Easy to integrate with mobile and desktop applications
Cons:
- Vulnerable to malware on the device
- Vulnerable to phishing attacks that trick you into signing malicious transactions
- If the device is compromised, the funds are at risk
Cold wallets
Pros:
- Keys are never exposed to networked devices
- Malware on your computer cannot extract the keys
- Phishing requires physical access to the hardware device, which is much harder
- Resistant to almost every common attack vector
Cons:
- Slower to transact — requires connecting the device, signing, broadcasting
- Less suitable for Lightning and small daily payments
- Requires additional hardware (
- More care required for
The Two-Wallet Model
The right answer for most people is to use both — matching each wallet to its appropriate purpose.
Cold wallet (hardware): your savings
Holds the bulk of your bitcoin. Receives income you do not plan to spend in the near term. Acts as your monetary reserve. You interact with it rarely — to add new bitcoin, or to transfer some to the hot wallet when you need spending money.
Think of it as the monetary equivalent of a safe or a bank vault. Not convenient for daily use, and that is the point.
Hot wallet (mobile): your spending money
Holds a small amount — the equivalent of physical cash in your wallet. Used for Lightning payments, small on-chain transactions, and daily commerce. If compromised, the loss is bounded by how much you keep in it.
Think of it as the monetary equivalent of the physical cash in your pocket. Easy to spend, limited exposure.
How Much to Keep in Each
A useful starting heuristic: keep in your hot wallet roughly what you would carry in a physical wallet. For most people, that is between one and four weeks of typical discretionary spending. Everything else goes to cold storage.
When your hot wallet runs low, top it up by transferring from cold storage. When you receive new income, deposit most of it directly to cold storage, keeping only what you need for immediate spending in hot.
The specific amounts depend on your circumstances. The principle does not: the bulk of your bitcoin lives in cold storage; only your spending balance lives hot.
Multi-Sig as a Third Tier
For larger holdings, a single-key cold wallet may not provide sufficient protection. A 2-of-3 multi-signature setup distributes keys across multiple devices in multiple locations — surviving fire, theft, or failure of any single key without losing access.
This creates a three-tier model:
- Hot wallet — immediate spending money
- Cold wallet (single-sig) — savings you might access within months
- Multi-sig cold storage — long-term holdings you rarely touch
For most users, the first two tiers are sufficient. Multi-sig becomes worthwhile when the amounts are large enough that a single point of failure is unacceptable.
The Practical Setup
Minimum viable two-wallet setup for a new Bitcoin self-custodier:
- Phoenix or Muun on your phone — for Lightning payments and small on-chain
- Trezor or Coldcard — for your savings,
Total cost: €70–€250 for the hardware. Total setup time: an afternoon. Result: a complete self-custody posture that eliminates counterparty risk for the vast majority of your bitcoin, while retaining convenience for daily use.
Written by
The Bitcoin Transition
The Bitcoin Transition is an educational project of the Bitcoin Education Foundation. We publish from first principles, in the voice of the protocol itself: direct, technically precise, and free from fiat-denominated framing.
Related reading
What Is Bitcoin Self-Custody? The Complete Guide
Self-custody is the act of holding your own private keys. It is the default way Bitcoin is designed to be used — and the only way that is fully consistent with why Bitcoin was built. This guide explains what, why, and how.
How to Choose a Bitcoin Hardware Wallet
A hardware wallet is a dedicated device that stores your bitcoin private keys offline. Here is what to look for, which devices are worth considering, and how to avoid common mistakes.
What Is a Bitcoin Seed Phrase? (And How to Secure It)
A seed phrase is a list of 12 or 24 words that fully encodes your bitcoin wallet. It is the single most important thing you will ever secure. Here is what it is and how to protect it.