Crypto Wallets Explained — Hot vs Cold Storage
Difference between hot and cold wallets. Ledger, Trezor, MetaMask — keeping your crypto safe.
8 min czytaniaCrypto Wallet Guide 2026 — Hot vs Cold Storage
One of the first decisions after buying BTC or ETH: where do I keep it? The answer depends on amount, usage frequency and risk tolerance. This guide explains hot vs cold wallets and helps you pick the right tool.
Who this guide is for
- Users keeping crypto on exchanges who want self-custody
- Investors with more than EUR 500 in BTC/ETH
- DeFi and NFT users
- Anyone who's heard "not your keys, not your coins"
What a crypto wallet actually is
A crypto wallet doesn't store coins. It stores private keys that control funds recorded on a blockchain. Keys are usually represented by a seed phrase (12 or 24 words).
- Seed phrase — generates all private keys in your wallet
- Public address — like an IBAN, safe to share
- Private key — like a password, never share
Whoever controls the seed phrase controls the crypto.
Hot wallets — always online
Hot wallets are connected to the internet. Fast, convenient, ideal for daily transactions — and more exposed to attacks.
Types:
- Exchange wallets — Binance, Kraken, Coinbase (custodial — they hold keys)
- Mobile — Trust Wallet, Phantom, BlueWallet
- Desktop/Browser — MetaMask, Rabby, Exodus
- Web wallets — entirely browser-based
Hot wallet pros
- Convenience — instant access
- DeFi/NFT access — connect to dApps directly
- Free — no hardware purchase
- Backup via seed
Hot wallet cons
- Malware risk — keys live on connected devices
- Phishing — fake sites steal signatures
- Exchange risk — FTX proved custodial ≠ safe
- Credential leaks — password reuse, SIM swaps
Cold wallets — offline storage
Cold wallets keep keys offline. You sign transactions physically on the device; only the signed tx reaches the internet.
Types:
- Hardware wallets — Ledger Nano S Plus/X, Trezor Safe 3/5, BitBox02, Keystone
- Paper wallet — seed on paper (legacy)
- Air-gapped — device never touches the internet
- Steel backups — Cryptosteel, Billfodl
Cold wallet pros
- Maximum security — offline keys
- Remote hack resistance
- Ideal for HODL long-term
- Multi-chain — modern devices support 1,000+ assets
Cold wallet cons
- Cost — EUR 60-200 per device
- Friction — plug in/confirm for each tx
- Physical risk — loss, theft, fire (hence backups)
- Compatibility — not every dApp supports every device
Popular wallet comparison
| Wallet | Type | Price | Strengths |
|---|---|---|---|
| Ledger Nano S Plus | Hardware | ~€79 | Proven, 5,000+ assets |
| Trezor Safe 3/5 | Hardware | ~€79-169 | Open source, easy UX |
| BitBox02 | Hardware | ~€149 | Swiss, open source |
| Keystone 3 Pro | Hardware | ~€149 | Air-gapped, QR signing |
| MetaMask | Hot (desktop/mobile) | Free | EVM standard, DeFi |
| Trust Wallet | Hot (mobile) | Free | Multi-chain, simple |
| Phantom | Hot (mobile) | Free | Solana, fast |
Hot vs cold — rule of thumb
- < EUR 200 — mobile hot wallet is fine
- EUR 200-1,000 — hot + 2FA + dedicated device
- EUR 1,000-10,000 — hardware wallet (Ledger/Trezor)
- > EUR 10,000 — hardware + passphrase + multisig (Nunchuk, Casa)
- Daily spending — small hot balance, like cash in pocket
- Long-term HODL — cold storage, ideally air-gapped
Practical example — EUR 250 Ledger setup
- Buy Ledger Nano S Plus from the manufacturer (never Amazon/eBay — supply chain risk): ~EUR 79
- Check the seals
- Install Ledger Live on your computer
- Generate a new 24-word seed and write it on paper
- Verify the seed on the device
- Install Bitcoin + Ethereum apps
- Send a small test (EUR 20) from your exchange
- Confirm receipt, then move the rest
Seed phrase storage best practices
- Pen and paper, never digital
- Optional: steel backup (Cryptosteel, Billfodl)
- Split across 2-3 locations (home, family, bank safe)
- Never photograph the seed
- Never screenshot wallet apps
- Consider a 25th-word passphrase (but forgetting = loss)
- Test restore every 6-12 months on a spare device
Top 10 security rules
- Buy hardware wallets direct from the manufacturer
- Seed offline — no cloud, no email, no photos
- 2FA on every exchange (Authenticator/YubiKey, not SMS)
- Unique passwords via a password manager
- Phishing — always verify URLs
- Whitelist addresses for withdrawals
- Test transactions before large transfers
- Dedicated device for crypto activity when possible
- Revoke old approvals (revoke.cash)
- Trust no one with private keys, ever
Taxes and wallets
Moving crypto between your own wallets (exchange → Ledger) is not a taxable event — there's no disposal. Still, document transfers for your tax filings (Poland: 19% Belka, PIT-38, April 30 deadline).
Common mistakes
- Seed stored in phone notes
- Buying a used hardware wallet
- Ignoring firmware updates
- No restore test
- Signing transactions without verifying the address on-device
- Using one seed for many wallets with large balances
FAQ
Can Ledger steal my crypto? No — keys stay on-device. Ledger Live is just an interface.
What if the manufacturer goes bankrupt? Seed phrases follow the BIP39 standard and restore on any compatible wallet.
Is MetaMask hot or cold? Hot by default — but you can pair it with a Ledger so signing is effectively cold.
How many hardware wallets do I need? One is enough if you have a solid seed backup. Very large holdings benefit from multisig.
How does DeFi work with a Ledger? Connect Ledger to MetaMask/Rabby — every transaction is signed physically on the device.
Track your wallets in Freenance
Track your crypto portfolio in Freenance — Binance, Bybit and XTB integrations plus manual hardware-wallet entries show your full exposure across hot and cold storage.
Related Articles
Want full control over your finances?
Try Freenance for free