Crypto Wallets Explained: Hot vs Cold, Custodial vs Self-Custody

The single most useful thing to understand about crypto is that your coins are never in your wallet. They are entries on a public ledger. A wallet holds the private key that authorises changes to those entries. Lose the key and the coins still exist — they are simply unreachable, forever, by anyone. Almost every wallet decision follows from that one fact.

Keys, seed phrases and addresses

Three things get confused constantly. Your address is public — it is safe to share and is how people send you funds. Your private key signs transactions and must never leave your control. Your seed phrase (12 or 24 words) is a human-readable master secret from which every private key in the wallet is derived. Anyone with the seed phrase has every key, on every chain that wallet supports, forever.

No legitimate wallet, exchange, support agent or airdrop will ever need your seed phrase. There is no exception to this rule. Every single request for it is a theft attempt, without exception, no matter how convincing the context.

Custodial vs self-custody

This is the more important split, and the one beginners get wrong. In a custodial wallet — Binance, Coinbase, Kraken, any exchange account — the platform holds the keys. What you own is a claim on the company, much like a bank balance. In a self-custody wallet you hold the keys yourself.

• •Custodial: password resets, 2FA recovery and a support line if you make a mistake. In exchange, you carry the platform's insolvency and freeze risk — the lesson of Mt. Gox, Celsius and FTX is that a balance on a screen is not the same as coins you control.
• •Self-custody: nobody can freeze, seize or lend out your funds, and no company failure touches them. In exchange, there is no reset button. A lost seed phrase or a signed malicious transaction is permanent and uninsured.
• •The practical answer for most people is both: trading balance on an exchange, long-term holdings in self-custody. Match the split to what you could stand to lose.

Hot vs cold

The second split is about whether the key ever touches an internet-connected device. A hot wallet — MetaMask, Phantom, Trust Wallet, a mobile app — keeps keys on a phone or browser. That makes it fast, free and convenient, and it means any malware, malicious extension or phished signature on that device can reach your keys. A cold wallet keeps the key on a device that never goes online; transactions are signed on the device itself and only the signed result crosses over.

Cold storage does not make you invulnerable. It removes remote key extraction from the threat model, which is the biggest single category of loss. It does not protect you from approving a draining transaction on the device's own screen, and it does not protect a seed phrase you photographed.

The four types in practice

• •Exchange account (custodial, hot) — fine for funds you are actively trading, or amounts you would shrug off. Enable withdrawal allowlists and hardware-key 2FA, not SMS.
• •Mobile / browser wallet (self-custody, hot) — the everyday wallet for DeFi, NFTs and small balances. Treat it as the cash in your pocket, not your savings.
• •Hardware wallet (self-custody, cold) — a Ledger, Trezor or Coldcard. The default for meaningful long-term holdings; see our hardware wallet guide for choosing one.
• •Paper / metal backup — not a wallet, a backup of the seed phrase. Metal survives fire and flood; paper does not.

Choosing by balance, not by preference

A useful heuristic: if losing the balance would materially change your year, it belongs in self-custody on cold storage. If it would merely annoy you, a hot wallet is a reasonable trade for the convenience. The cost of a hardware wallet is fixed at roughly the price of a nice dinner; the cost of not having one scales with your balance, which is why people who bought one late almost always say they should have bought it earlier.

The mistakes that actually cause losses

• •Storing the seed phrase digitally — a photo, a password manager note, a cloud document. Device compromise then means total loss.
• •One backup in one place. Fire, flood and moving house all destroy seed phrases. Two or three geographically separate copies.
• •Not testing recovery. Restore the wallet from the phrase onto a spare device before you fund it seriously. An untested backup is a guess.
• •Blind-signing. Read what the transaction actually does. Most self-custody losses are not broken cryptography — they are users approving a token allowance to a contract that drains it.
• •Stale approvals. Old unlimited token allowances stay live for years. Revoke ones you no longer use.
• •Buying hardware secondhand or from a marketplace listing. Buy direct from the manufacturer; a pre-seeded device is a known scam.

A reasonable setup

Long-term holdings on a hardware wallet, its seed phrase stamped in metal and stored in two separate physical locations, never photographed. A separate hot wallet with a small float for day-to-day on-chain activity, so a bad signature there cannot touch the main stack. An exchange account holding only what you are actively trading, secured with a hardware 2FA key. That structure survives essentially every common failure except forgetting where you put the backup — which, by then, is the risk worth having.