What is a hot wallet in crypto?
A hot wallet is a crypto wallet whose private keys sit on a device that is connected to the internet, such as a phone app, a browser extension or your exchange account. It makes sending, receiving and trading crypto quick, but because it is always online it is more exposed to hackers, malware and phishing than a cold wallet that keeps the keys offline.
What is a hot wallet in crypto?
A hot wallet in crypto is any wallet that stores or uses your private keys on an internet-connected device. “Hot” simply means online; “cold” means offline.
A wallet doesn’t actually hold coins. Your digital assets live on the blockchain, and the wallet holds the keys that prove ownership and sign transactions. Hot wallets store private keys in software on a phone, computer or server, so you can approve a payment in seconds. The trade-off is that anything connected to the internet can, in principle, be reached by someone else.
How hot wallets work
Hot wallets work by keeping a private key, or the seed phrase that generates it, in software that is ready to sign transactions whenever you tap “send”. Every cryptocurrency wallet has the same building blocks:
- Public key and address. Your wallet address is derived from your public key. You share it to receive crypto, much like an IBAN.
- Private key. The secret that authorises transactions. Whoever has the private keys controls the funds.
- Seed phrase. A list of 12 or 24 words that can rebuild all your keys if you lose your phone. See our seed phrase entry for how to store it.
When you send crypto from a hot wallet, the app builds the transaction, signs it with your private key on the device and broadcasts it to the network. With a hardware wallet, that transaction signing happens on a separate offline device instead. That one difference explains most of the security gap between hot and cold.
Custodial or self-custody
Hot wallets come in two flavours. In a custodial wallet, such as your account on a crypto exchange, the platform holds the keys and you log in with a password. In a self-custody wallet you hold the keys yourself: you have full control, but the wallet developers can’t reset your password or recover your funds if you lose the seed phrase.
Types of hot wallets
There are four common types of hot wallet, and most crypto users rely on at least one of them without thinking of it as a wallet.
| Type | Where the keys live | Typical use |
|---|---|---|
| Mobile wallets | App on your phone | Everyday payments, small balances, scanning QR codes |
| Browser extensions | Plug-in for Chrome, Firefox or Brave | Connecting to DeFi apps and smart contracts |
| Desktop wallets | Software on your computer | Managing several coins on one machine |
| Exchange wallets | The exchange’s servers (custodial) | Buying, selling and trading |
Well-known self-custody examples include MetaMask, Trust Wallet and Phantom. Some exchanges, Coinbase among them, offer a separate self-custody wallet app next to the exchange account: the exchange account is custodial, the wallet app is not. We don’t rank wallets, so check which networks a wallet supports and who builds it before you install anything.
Hot vs cold wallets
The difference between hot and cold wallets is internet connectivity: hot wallets keep keys online for quick access, cold wallets keep them offline for stronger security. Neither wins in every situation.
| Hot wallet | Cold wallet | |
|---|---|---|
| Connection | Always or often online | Offline; connects only to sign |
| Speed | Seconds | Slower: you need the device at hand |
| Main risk | Malware, phishing, online attacks | Losing the device or the seed phrase |
| Cost | Usually free | You buy a hardware wallet |
| Best for | Spending, trading, DeFi | Long-term storage of significant holdings |
Cold storage covers hardware wallets (small devices that sign transactions offline), paper wallets and computers that never go online. The offline nature of cold crypto wallets is what protects them. Exchanges use the same split internally: many say they keep most customer funds in cold storage and only a small float in hot wallets for withdrawals.
Is a hot wallet safe?
A hot wallet is reasonable for small amounts you use often, but it is the wrong place for savings you can’t afford to lose. The constant connectivity that makes hot wallets convenient is also what makes them a target for cyber threats.
The main security risks:
- Malware and keyloggers on internet-connected devices that read your seed phrase, or swap a copied address for the attacker’s.
- Phishing attacks: fake websites, apps and “support” accounts that ask for your seed phrase. No real wallet developer will ever ask for it.
- Malicious smart contracts: signing an approval on a scam DeFi site can let it drain tokens from your wallet.
- Platform risk: with a custodial wallet you also depend on the exchange staying solvent and secure.
If something goes wrong there is usually no way back. Crypto transactions are final, and in the EU crypto-assets are not covered by investor compensation schemes or the deposit guarantee.
How to secure a hot wallet
You secure a hot wallet by limiting what’s in it and locking down the device it runs on. These security measures stop most online threats:
- Keep only what you need. Treat it like the cash in your pocket and move the rest to cold storage.
- Back up the seed phrase offline. Write it on paper or metal, store it somewhere private, and test a recovery before you add significant funds.
- Lock the device. Use PIN protection, biometric authentication and the latest security patches for your phone, browser and wallet app.
- Use strong passwords and multi-factor authentication on exchange accounts, ideally an authenticator app rather than SMS. Our 2FA guide shows how.
- Check before you sign. Read the address, amount and network on screen, and reject approval requests you don’t understand.
- Download from official sources only. Fake wallet apps and browser extensions are a common trick.
Hot wallets in the EU: what MiCA covers
MiCA, the EU’s crypto law, regulates the companies that hold crypto for you, not the wallet software you run yourself. If an exchange or app keeps your keys, it is a crypto-asset service provider and needs a MiCA licence to serve EU residents; with a self-custody hot wallet, nobody supervises the wallet and the responsibility is yours.
Two rules affect you in practice. Since 30 December 2024, EU platforms apply the travel rule: when you withdraw more than €1,000 to your own self-hosted wallet, the exchange must check that it really is yours, for example with a small test transaction or a signed message to prove ownership. And moving crypto between your own wallets is usually not a sale, but swapping one coin for another inside a wallet can be a taxable event, depending on where you live.
How much crypto should you keep in a hot wallet?
Keep only as much crypto in a hot wallet as you will spend or trade in the coming weeks, and never more than you would be prepared to lose. There is no fixed percentage; it depends on your risk tolerance and how often you transact.
A two-tier set-up works for most users. Say you hold €5,000 in crypto and spend or trade around €200 a month. You could keep €200 to €300 in a mobile wallet or exchange account for quick access, and the remaining €4,700 or so in a hardware wallet for long-term storage. Each transfer between them costs a network fee, so top up the hot wallet once a month rather than for every purchase. Convenience is not a security plan: the bigger the balance, the stronger the case for cold storage.
What does a hot wallet cost?
Most hot wallets are free to download and use. What you pay are network fees for every on-chain transaction, which go to miners or validators rather than to the wallet developers, plus any swap fee an app adds when you exchange coins inside it. Exchanges also charge a withdrawal fee when you move crypto out to your own wallet, so compare those before you pick a platform.
Who should use a hot wallet?
A hot wallet suits anyone who sends, spends or trades crypto regularly, or who wants to use DeFi apps. If you hold a small amount on a licensed exchange, you are already using one.
Look elsewhere if you hold a significant amount for years: pair the hot wallet with a cold wallet, as explained in our guide to hot wallets vs cold storage. And if you’re not confident you can keep a seed phrase safe, a custodial account with a MiCA-licensed exchange may be the more sensible start, because you can recover access with your ID.
Questions people ask
Is Coinbase a hot wallet?
A Coinbase exchange account is a custodial hot wallet from your point of view: you log in online and Coinbase controls the private keys. Coinbase also offers a separate self-custody wallet app, which is a hot wallet where you hold the keys yourself.
What is better, a cold or hot wallet?
Neither is better for everything. A hot wallet is better for spending, trading and DeFi; a cold wallet is better for long-term storage of significant holdings. Most people who hold more than a small amount use both.
Is a cold wallet 100% safe?
No. A cold wallet protects your private keys from online attacks, but you can still lose the device, lose or leak the seed phrase, or be tricked into signing a bad transaction. And the crypto itself can still lose most or all of its value.
Can you give me an example of a hot wallet?
Mobile and browser wallets such as MetaMask, Trust Wallet and Phantom are hot wallets, and so is the crypto balance in your exchange account. All of them keep the keys on a device or server that is online.
Which hot wallet is the most secure?
There is no single most secure hot wallet. Choose a well-established wallet from its official source, keep the balance small, back up the seed phrase offline and keep your device updated: those habits matter more than the brand.