Crypto Wallets Explained — Hot vs Cold Storage

Difference between hot and cold wallets. Ledger, Trezor, MetaMask — keeping your crypto safe.

8 min czytania

Crypto Wallet Guide 2026 — Hot vs Cold Storage

One of the first decisions after buying BTC or ETH: where do I keep it? The answer depends on amount, usage frequency and risk tolerance. This guide explains hot vs cold wallets and helps you pick the right tool.

Who this guide is for

  • Users keeping crypto on exchanges who want self-custody
  • Investors with more than EUR 500 in BTC/ETH
  • DeFi and NFT users
  • Anyone who's heard "not your keys, not your coins"

What a crypto wallet actually is

A crypto wallet doesn't store coins. It stores private keys that control funds recorded on a blockchain. Keys are usually represented by a seed phrase (12 or 24 words).

  • Seed phrase — generates all private keys in your wallet
  • Public address — like an IBAN, safe to share
  • Private key — like a password, never share

Whoever controls the seed phrase controls the crypto.

Hot wallets — always online

Hot wallets are connected to the internet. Fast, convenient, ideal for daily transactions — and more exposed to attacks.

Types:

  • Exchange wallets — Binance, Kraken, Coinbase (custodial — they hold keys)
  • Mobile — Trust Wallet, Phantom, BlueWallet
  • Desktop/Browser — MetaMask, Rabby, Exodus
  • Web wallets — entirely browser-based

Hot wallet pros

  • Convenience — instant access
  • DeFi/NFT access — connect to dApps directly
  • Free — no hardware purchase
  • Backup via seed

Hot wallet cons

  • Malware risk — keys live on connected devices
  • Phishing — fake sites steal signatures
  • Exchange risk — FTX proved custodial ≠ safe
  • Credential leaks — password reuse, SIM swaps

Cold wallets — offline storage

Cold wallets keep keys offline. You sign transactions physically on the device; only the signed tx reaches the internet.

Types:

  • Hardware wallets — Ledger Nano S Plus/X, Trezor Safe 3/5, BitBox02, Keystone
  • Paper wallet — seed on paper (legacy)
  • Air-gapped — device never touches the internet
  • Steel backups — Cryptosteel, Billfodl

Cold wallet pros

  • Maximum security — offline keys
  • Remote hack resistance
  • Ideal for HODL long-term
  • Multi-chain — modern devices support 1,000+ assets

Cold wallet cons

  • Cost — EUR 60-200 per device
  • Friction — plug in/confirm for each tx
  • Physical risk — loss, theft, fire (hence backups)
  • Compatibility — not every dApp supports every device
Wallet Type Price Strengths
Ledger Nano S Plus Hardware ~€79 Proven, 5,000+ assets
Trezor Safe 3/5 Hardware ~€79-169 Open source, easy UX
BitBox02 Hardware ~€149 Swiss, open source
Keystone 3 Pro Hardware ~€149 Air-gapped, QR signing
MetaMask Hot (desktop/mobile) Free EVM standard, DeFi
Trust Wallet Hot (mobile) Free Multi-chain, simple
Phantom Hot (mobile) Free Solana, fast

Hot vs cold — rule of thumb

  • < EUR 200 — mobile hot wallet is fine
  • EUR 200-1,000 — hot + 2FA + dedicated device
  • EUR 1,000-10,000hardware wallet (Ledger/Trezor)
  • > EUR 10,000 — hardware + passphrase + multisig (Nunchuk, Casa)
  • Daily spending — small hot balance, like cash in pocket
  • Long-term HODL — cold storage, ideally air-gapped

Practical example — EUR 250 Ledger setup

  1. Buy Ledger Nano S Plus from the manufacturer (never Amazon/eBay — supply chain risk): ~EUR 79
  2. Check the seals
  3. Install Ledger Live on your computer
  4. Generate a new 24-word seed and write it on paper
  5. Verify the seed on the device
  6. Install Bitcoin + Ethereum apps
  7. Send a small test (EUR 20) from your exchange
  8. Confirm receipt, then move the rest

Seed phrase storage best practices

  • Pen and paper, never digital
  • Optional: steel backup (Cryptosteel, Billfodl)
  • Split across 2-3 locations (home, family, bank safe)
  • Never photograph the seed
  • Never screenshot wallet apps
  • Consider a 25th-word passphrase (but forgetting = loss)
  • Test restore every 6-12 months on a spare device

Top 10 security rules

  1. Buy hardware wallets direct from the manufacturer
  2. Seed offline — no cloud, no email, no photos
  3. 2FA on every exchange (Authenticator/YubiKey, not SMS)
  4. Unique passwords via a password manager
  5. Phishing — always verify URLs
  6. Whitelist addresses for withdrawals
  7. Test transactions before large transfers
  8. Dedicated device for crypto activity when possible
  9. Revoke old approvals (revoke.cash)
  10. Trust no one with private keys, ever

Taxes and wallets

Moving crypto between your own wallets (exchange → Ledger) is not a taxable event — there's no disposal. Still, document transfers for your tax filings (Poland: 19% Belka, PIT-38, April 30 deadline).

Common mistakes

  • Seed stored in phone notes
  • Buying a used hardware wallet
  • Ignoring firmware updates
  • No restore test
  • Signing transactions without verifying the address on-device
  • Using one seed for many wallets with large balances

FAQ

Can Ledger steal my crypto? No — keys stay on-device. Ledger Live is just an interface.

What if the manufacturer goes bankrupt? Seed phrases follow the BIP39 standard and restore on any compatible wallet.

Is MetaMask hot or cold? Hot by default — but you can pair it with a Ledger so signing is effectively cold.

How many hardware wallets do I need? One is enough if you have a solid seed backup. Very large holdings benefit from multisig.

How does DeFi work with a Ledger? Connect Ledger to MetaMask/Rabby — every transaction is signed physically on the device.

Track your wallets in Freenance

Track your crypto portfolio in Freenance — Binance, Bybit and XTB integrations plus manual hardware-wallet entries show your full exposure across hot and cold storage.

Want full control over your finances?

Try Freenance for free
Start today

Your path to financial freedomstarts here

Join thousands of investors who use Freenance to manage their personal finances.

Start for free
14 days free
No credit card
256-bit encryption