Hot and cold storage: matching wallets to use

A wallet does not hold coins the way a purse holds cash. It holds the keys that authorize moves on a blockchain, and the way those keys are stored decides how exposed they are. A hot wallet is any wallet whose keys sit on a device that is connected to the internet, such as a phone app, a browser extension or a desktop program. Cold storage keeps the keys offline, usually on a dedicated hardware device or written on paper. Neither type is better in every case. Hot wallets suit frequent small actions, while cold storage suits holdings that rarely move. Many people start with one app and only later notice that their needs have split in two.

The difference comes down to where the signing happens. In a hot wallet, the private key lives on the same connected device that browses websites and opens email, so malware on that device sits right beside the key. A hardware wallet works differently. The computer prepares the transaction and sends the details to the device. The device shows them on its own screen, the owner confirms with a physical button, and the device returns a signature. The private key never leaves the device. Both types can be restored from a recovery phrase, and where that phrase is kept decides whether a setup is truly cold or only looks that way.

Consider a made-up user named Priya. She starts with a phone app to send a small amount to a friend. Over the next year she adds a browser wallet for an online game and connects it to several sites. Eventually she realizes one wallet does every job. She sets up a hardware device, writes its phrase on paper, and hides one copy at home and another at her sister's house. Before moving her long-term holdings, she sends a tiny test transfer and waits until it arrives. Then she moves the rest. The phone wallet stays for everyday use, and the hardware device comes out only a few times a year.

The usual failures come from treating cold as a label instead of a habit. A recovery phrase photographed on a phone can sync to a cloud album without anyone noticing, which turns a cold setup into a hot one. A phrase saved in a notes app or an email draft has the same problem. Offline storage also does nothing about a bad decision at signing time: if Priya approves a request she did not read, the device signs it faithfully, because it cannot judge intent. A third trap is keeping every copy of the phrase in one drawer, where a single fire, flood or burglary removes the backup and the device together.

A few questions are worth asking about any setup. Where does each key actually live, and which wallet is connected to websites? Does any copy of the phrase exist in a photo, a note, a message or a cloud folder? Did the hardware device come from the maker or an authorized reseller, in sealed packaging, without a phrase already printed inside? Does the device screen show the recipient and the action, and does the owner read it before pressing the button? Could the wallet be restored from the backup on a spare device? Each of these can be checked at home, using only the wallet's own settings and the maker's official instructions.

For background, ethereum.org publishes plain-language pages on wallets and on security and scam prevention, and both describe the trade-off between connected convenience and offline protection. A simple way to picture it is a wallet for the pocket and a safe for the shelf: one is quick to reach and exposed to daily wear, the other takes effort to open and rarely leaves its place. This page does not decide how anyone should divide their holdings between the two kinds of storage, because that depends on personal habits, devices and circumstances. It also cannot tell whether a particular device or app is sound. Treat it as general education, not financial, legal or security advice, and read the official documentation of any wallet before relying on it. Guidance changes as new attacks appear, so the maker's current instructions beat any fixed checklist.

• Hot wallets are connected and convenient; cold storage keeps keys offline and suits holdings that rarely move
• A recovery phrase kept in a photo, note or cloud folder makes a cold setup effectively hot
• Offline keys do not stop a bad signature, so read every request on the device screen