Hot wallet vs cold wallet: which crypto wallet should you use?
Hot wallet vs cold wallet explained for EU investors: how each stores your keys, custodial vs self-custody, and what MiCA covers since 1 July 2026.
A hot wallet keeps the private keys to your crypto on a device that is connected to the internet, so you can trade or send coins in seconds. A cold wallet keeps those keys offline, usually on a hardware wallet, so online attackers can’t reach them, but every transaction takes more effort. The real choice in hot wallet vs cold wallet is how much convenience you give up for protection, and whether you or a company holds the keys.
This guide explains the main types of wallets, the difference between a custodial wallet and a self-custody wallet, and what MiCA, the EU’s crypto law, does and doesn’t cover. Whichever wallet you pick, crypto assets are volatile and can lose all their value.
What is a crypto wallet?
A crypto wallet is a tool that stores and manages the private keys that control your coins; the coins themselves stay recorded on a blockchain. Whoever holds the private keys can move the funds, so the type of wallet matters more than the app’s design.
Every cryptocurrency wallet works with three pieces:
- Public address: you share it to receive crypto, much like an IBAN.
- Private key: it signs transactions. Anyone who has it can spend your digital assets, and nobody can reverse a transfer once it is on the blockchain.
- Seed phrase: usually 12 or 24 words that can rebuild every private key in the wallet, so you can restore access on a new device.
Wallets are sorted along two lines. The first is connection: a hot wallet is online, a cold wallet is offline. The second is custody: in a custodial wallet a third party holds the keys for you, while in non custodial wallets only you hold them. Our glossary explains private keys and the seed phrase in more detail.
Hot wallets: convenient crypto wallets for daily use
Hot wallets are crypto wallets whose keys sit on a device or server that is connected to the internet. They suit frequent transactions, such as trading, paying or using decentralized applications, because you can sign a transfer in a few taps.
The main types of hot wallets are:
- Exchange accounts: your balance on centralized exchanges such as Kraken or Bitvavo. The exchange manages the keys, so this is a custodial hot wallet.
- Mobile wallets: apps on your phone that store the keys on the phone itself. Most are non custodial.
- Browser extensions: a software wallet inside your browser that connects to decentralized applications. A fake site or extension can trick you into signing a harmful transaction.
- Desktop wallets: software installed on your computer. They are only as secure as that computer, so malware is the main risk.
The trade-off is exposure to online threats. Phishing pages, fake apps and malware target hot wallets because the keys are reachable over the internet. Our hot wallet glossary entry covers how to reduce that risk.
Cold wallets: offline storage for digital assets
Cold wallets keep your private keys offline, on a physical device or medium that doesn’t connect to the internet when it stores keys or signs. That offline nature removes the most common remote attacks, which is why cold storage is the usual choice for long term storage.
The main trade-off is speed and personal responsibility. To send coins you need the device in hand, and a mistake with your backup can lock you out for good.
Hardware wallets
A hardware wallet is a small physical device that generates the private keys, keeps them offline and signs transactions on the device itself. Your phone or computer only receives the signed transaction, never the key. Ledger and Trezor are two well-known makers; a Ledger wallet works on the same principle as any other device.
Two rules matter most:
- Buy new, from the maker or an authorised seller. A second-hand device may have been tampered with or come with a seed phrase someone else already knows.
- Protect the seed phrase more than the device. If you lose the device, the seed phrase lets you restore access on a new one. If someone sees the seed phrase, they can empty the wallet without touching the device.
Paper wallets and metal backups
A paper wallet is a private key or seed phrase printed or written on paper and kept offline. Paper wallets are an older form of cold storage that is easy to get wrong: paper burns, fades and gets thrown away, and importing the key into a hot wallet puts it online again. Many users now stamp their seed phrase on a metal backup plate instead, which survives fire and water better.
Hot wallet vs cold wallet: key differences
The key difference between hot wallets vs cold wallets is whether the private keys are reachable over the internet. Hot wallets win on convenience; cold wallets win on protection against online threats.
| Hot wallet | Cold wallet | |
|---|---|---|
| Where the keys are | Phone, computer or exchange server | Offline physical device or paper |
| Main risk | Hacks, phishing, malware | Losing the seed phrase, theft, human error |
| Speed | Seconds | Minutes; you need the device |
| Cost | Usually free | You buy the device once |
| Good for | Trading, spending, small balances | Long term storage of larger amounts |
| Recovery | Exchange login or seed phrase | Seed phrase only |
Cold isn’t automatically better in every way. A cold wallet moves the risk from hackers to you: if you lose the seed phrase, or a scammer persuades you to type it into a website, nobody can help you restore access.
Which one fits you?
Use a hot wallet for money you trade or spend, and a cold wallet for coins you plan to hold for years. If you buy €50 a month and trade often, an exchange account or mobile wallet is simpler; long term investors with a few thousand euros in crypto often move most of it to cold storage. Neither choice protects you from falling prices.
Custodial vs non-custodial crypto wallets
A custodial wallet is one where a third party holds the keys for you, usually a crypto exchange or broker. With a non custodial wallet only you hold the keys, so you get full control and full ownership, along with full responsibility for your own security.
The crypto saying “not your keys, not your coins” sums up the custodial vs non custodial choice. On an exchange you own a claim on coins the platform holds; in a self custody wallet you hold the coins directly.
Custodial wallets: convenience with provider risk
Custodial services handle the hard parts for you. If you forget your password, account recovery runs through email and identity verification, much like online banking, and support staff can help. The platforms provide easy euro deposits, a buy button and one login for many coins.
The catch is that the provider controls your funds. A platform can pause withdrawals, and a hack can hit the wallets where it keeps customer crypto. Two examples from the exchanges we track:
- Bybit, 2025: about $1.5bn in ETH was stolen from Bybit’s wallets on 21 February 2025; the FBI attributed the theft to North Korea.
- Bitvavo, 2022: about €280 million that Bitvavo had lent to Genesis Global Capital became inaccessible when Genesis froze withdrawals; Bitvavo said customer withdrawals were not affected.
A licence doesn’t make crypto a protected deposit. In the Netherlands, for example, the investor compensation scheme doesn’t cover crypto assets, and the €100,000 deposit guarantee only covers bank deposits.
Custodial vs non-custodial: control and responsibility
The main difference is who you can call when something goes wrong. With a custodial wallet you call the provider; with self custody you have nobody to call.
| Custodial wallet | Non-custodial wallet | |
|---|---|---|
| Who holds the keys | The exchange or broker | Only you |
| Forgot your password | Account recovery with ID | Restore from your seed phrase |
| Lost your seed phrase | Not relevant | Funds are lost |
| Provider fails or is hacked | Depends on the provider | Not affected |
| Identity check | Always (KYC) | Not by the wallet itself |
A non custodial wallet doesn’t ask for your identity, but the exchange where you buy crypto does, and transfers between that exchange and your wallet are recorded on the blockchain.
What MiCA covers, and what it doesn’t
MiCA regulates the companies that provide crypto services in the EU, including custody, not the wallet you run yourself. Since 1 July 2026 only crypto-asset service providers (CASPs) authorised under MiCA may offer those services in the EU, and ESMA told unauthorised firms to stop onboarding clients.
What MiCA covers:
- Custody at a licensed provider. MiCA requires a custodian to keep clients’ crypto assets separate from its own and makes it liable for losses caused by incidents it is responsible for.
- Supervision. A national regulator, such as the AFM in the Netherlands or the Central Bank of Ireland, supervises the firm. You can look it up in ESMA’s interim register or the AFM and BaFin registers.
What MiCA doesn’t cover:
- Your own wallet. If you hold your keys in a hardware or mobile wallet, no regulator or compensation scheme can recover coins you lose or send by mistake.
- Some products of licensed firms. Bitvavo and Crypto.com both state that their staking and Earn products are not regulated under MiCA.
- Price losses. No rule protects you from a fall in value.
When you withdraw to your own wallet, an EU exchange may ask you to confirm that the address belongs to you. That comes from EU anti-money-laundering rules for transfers to self-hosted wallets.
How to choose crypto wallets in Europe
Start by splitting your crypto into money you trade and money you hold, then pick a wallet for each. For the custodial part, check that the exchange is MiCA-authorised in your country before you deposit.
Then compare costs before you move coins. Withdrawal fees to your own wallet differ a lot between crypto exchanges. As an illustration only, at a bitcoin price of €100,000:
| Exchange | BTC withdrawal fee | In euros |
|---|---|---|
| Kraken | 0.000015 BTC | €1.50 |
| Bitvavo | 0.000018 BTC | €1.80 |
| Crypto.com (from 0.002 BTC) | 0.0004 BTC | €40.00 |
Check that your wallet supports the coin and the network you plan to use. Sending a token over a network your wallet doesn’t support is a common way to lose funds.
Can you use hot wallets and cold wallets together?
Yes, and many users do. Keep a small spending balance in a hot wallet or exchange account, and move long-term holdings to a cold wallet.
- Set up the hardware wallet and write the seed phrase on paper or metal, never in a photo or cloud note.
- Copy the receiving address from the wallet app and check that it matches the address on the device’s screen.
- Send a small test amount from the exchange on the right network.
- Confirm it arrived, then send the rest.
- Store the seed phrase somewhere separate from the device.
Crypto wallet security checklist
Most losses come from a few avoidable mistakes, whatever wallet you use. These habits protect both hot and cold wallets:
- Buy hardware wallets only from the maker or an authorised seller.
- Keep your seed phrase offline and never type it into a website, chat or email.
- No exchange, wallet maker or support agent will ever ask for it.
- Check the address and amount on the device’s screen before you sign.
- Turn on two-factor authentication for every exchange account.
Our guide on how to keep your crypto safe covers phishing, SIM swaps and exchange hacks in more depth, and our list of exchanges with strong security compares licensed platforms.
Key takeaways
Hot wallets trade protection for convenience; cold wallets trade convenience for protection. Custody is a separate question: a licensed exchange holds the keys for you, while self custody gives you complete control and every risk that comes with it.
- Use a hot wallet or a MiCA-authorised exchange for what you trade.
- Use a cold wallet for what you hold for years, if you can manage a seed phrase.
- MiCA covers licensed custodians, not your own wallet.
- No wallet protects you from price falls; you can lose all the money you put in.
Questions people ask
Is a cold wallet 100% safe?
No. A cold wallet protects your private keys from online attacks, but you can still lose your crypto if you lose the seed phrase, type it into a fake website or send coins to a wrong address. It also does nothing against price falls.
Is an exchange account a hot or cold wallet?
An exchange account is a custodial wallet: the exchange holds the keys and decides how much it keeps in its own hot and cold storage. You use it like a hot wallet, but you don't control the keys yourself.
Does MiCA protect crypto in my own hardware wallet?
No. MiCA regulates companies that provide crypto services, such as custody at an exchange. If you hold your own keys, no regulator or compensation scheme can recover coins you lose or send by mistake.
What happens if I lose my hardware wallet?
If you still have your seed phrase, you can restore the wallet on a new device and regain access to your coins. If you lose both the device and the seed phrase, the crypto is gone for good.
Should I keep my crypto on an exchange or in a cold wallet?
Keep what you trade or spend on a MiCA-authorised exchange, and move larger amounts you plan to hold for years to a cold wallet if you are comfortable managing a seed phrase. Many investors use both.