How to separate hot and cold wallets
- Author
- CRYPTO PORT Editorial
- Published
- Updated
- Reading time
- 6 min
In short
The basic split is to keep everyday amounts in an internet-connected hot wallet and long-term holdings in a cold wallet kept offline. With that split, an accident during routine use costs you only the small balance you keep at hand. Decide the threshold by asking whether losing that amount would change your life.
Key points
- Treat hot as where you spend and cold as where you keep
- As a rule, do not connect the cold side to dApps or grant approvals from it
- Rehearse any move with a small amount before moving the real one
- Both still rest on how well you manage the seed phrase
Definition
Running one wallet that operates online and another that keeps its keys offline, and dividing use between them by purpose and amount.
A hot wallet runs on your phone or in a browser and is permanently online. That makes it immediately usable, but if the device is compromised or you approve something on a fake site, the assets walk straight out. A cold wallet keeps keys off the internet — a hardware wallet being the usual example — and in exchange for the inconvenience of handling a device for every signature, the keys cannot be extracted remotely. 'Cold wallet' and 'Hot wallet' cover the details.
It is easier to design the split around frequency of use than around amount: things you touch weekly versus things you do not touch in a month. Put frequently used assets in cold storage and you end up plugging in the device constantly, which defeats the separation. Equally, there is no reason to leave assets you intend to hold for years sitting in a hot wallet.
The heart of the practice is deciding what you will not do on the cold side. In practice, three rules — never connect that address to a dApp, never grant approvals from it, never hand it to people you do not know — avoid most accidents. Keep it receive-only and there is almost nothing an outsider can trigger. On the hot side, hold only what you could stand to lose.
Move funds carefully. Verify the cold wallet's receiving address on the device's own screen if it is a hardware wallet; trusting only what the computer displays leaves you defenceless against malware that rewrites the screen. Then send a small amount, confirm it arrives, and only then send the real one. People who skip that two-step because it feels tedious are the ones who lose large amounts in a single transaction.
Finally, note that the foundation does not change. A cold wallet without a seed-phrase backup ends the moment the device fails — and because it is used for long-term storage, the quality of that backup matters more, not less. See 'How to back up your seed phrase'.
Watch out for
- · Buy hardware wallets only through official channels — second-hand or resold units may be tampered with
- · Connecting the cold address to a dApp and granting an approval undoes the separation entirely
- · Owning the device is not safety in itself; without a seed-phrase backup, a failure or loss ends it
Frequently asked questions
At what amount should I move to cold storage?
There is no universal figure. More useful than an amount are two questions: would losing it affect your life, and how often do you move it? When something is rarely moved and would hurt to lose, it is time.