Hot, cold and hardware
Three categories, one variable: whether the key ever touches an internet-connected computer. That single difference decides what can go wrong.
The words get used loosely, which hides how simple the distinction is. Everything comes down to one variable: has your private key ever been present on a machine that is connected to the internet?
Hot: the key lives on a connected device
A phone app, a browser extension, a desktop wallet. The key is stored on the device, protected by whatever the operating system provides, and it is present in memory whenever you sign something.
This is convenient and it is genuinely fine for everyday amounts. It is also the category with the widest attack surface, because anything that compromises the device can potentially reach the key: malware, a malicious extension, a fake app from a search advertisement, or somebody with your unlocked phone.
The most common real-world loss here is not malware at all. It is signing something on a website that should not have been signed — which the page on wallet drainers covers in detail.
Cold: the key never touches a connected machine
Cold storage is a property, not a product. It means the key was generated offline and has never been typed into, pasted into or stored on an internet-connected computer.
A phrase written on paper and never entered anywhere is cold storage. So is a key generated on an air-gapped machine. The security comes from the gap, not from any device.
Hardware: cold storage you can actually use
The problem with pure cold storage is that spending from it means bringing the key back online, and that is the moment everything can go wrong. A hardware wallet solves exactly this.
It is a small computer that does one job. The key is generated on it and never leaves. When you want to send something, the transaction is prepared on your ordinary computer, passed to the device, signed inside the device, and passed back already signed. The key crosses no cable and touches no operating system.
The screen is the point, not the storage
The device shows you what you are actually signing, on hardware a compromised computer cannot repaint. Confirming on that little screen is the whole security model — skipping the read and pressing the button anyway gives most of it away.
What each one does not protect you from
This is where the marketing is quietest, so it is worth being blunt.
- None of them protect you from giving away the phraseHot or cold, hardware or paper. If somebody talks you into typing those words, the device is irrelevant.
- None of them protect you from approving a bad transactionA hardware wallet will happily sign a transfer to a thief, if that is what you confirmed. It secures the key, not your judgement.
- None of them protect you from sending on the wrong networkThat is an addressing mistake, and the device has no opinion about it.
- A hardware wallet does not protect the parcel it arrived inBuy direct from the manufacturer. A device that arrives with a phrase already written in the box is a trap, and one that has circulated for years.
A rule that does not require expertise
Match the storage to the amount, and revisit it when the amount changes.
Money you would shrug at — a phone wallet is fine, and the convenience is worth more than the marginal risk. Money that would ruin your month — a hardware wallet, and the phrase on paper in two places. Money that would change your life — hardware, plus a serious think about what happens if you are not around, which the page on losing access covers.
The single most common mistake is not choosing wrong. It is choosing once, when the amount was small, and never revisiting the decision as the amount grew.