Crypto Wallet Types Explained: Hot, Cold, Exchange, and Self-Custody
A crypto wallet doesn't hold your coins the way a leather wallet holds cash. It holds the private keys that prove the coins on the blockchain are yours. Choosing a wallet type is really a choice about who controls those keys and how exposed they are to the internet. This guide breaks down the main options in plain language.
What a crypto wallet actually stores
Your coins never leave the blockchain. A wallet stores a private key (a secret number) and derives a public address from it. Anyone can send funds to your public address, but only the private key can authorize moving them. Lose the key and the funds are frozen forever; expose the key and anyone can drain them.
Most modern wallets condense the private key into a human-readable seed phrase (also called a recovery phrase): usually 12 or 24 words from a fixed list of 2,048 words defined by the BIP-39 standard. Those words can regenerate every key in the wallet. This is the single most important thing to protect.
Hot wallets vs cold wallets
The first split is about internet exposure. A hot wallet is connected to the internet (a phone app, browser extension, or exchange account). A cold wallet keeps the private key offline, so a remote hacker has no network path to it.
| Feature | Hot wallet | Cold wallet |
|---|---|---|
| Internet exposure | Always online | Offline (signs transactions in isolation) |
| Examples | MetaMask, Trust Wallet, exchange apps | Ledger, Trezor, paper/steel backups |
| Cost | Usually free | ~$50–$200 for a hardware device |
| Convenience | High — instant trades and dApp access | Lower — plug in and confirm on-device |
| Best for | Small, active spending amounts | Long-term savings you rarely move |
A common, practical setup is a two-tier approach: keep a small "spending" balance in a hot wallet for daily use, and the bulk of your holdings in a cold wallet. Think of it like keeping $50 in your pocket and the rest in a safe.
Exchange (custodial) vs self-custody
The second split is about who holds the keys. With a custodial wallet — like the balance sitting in your account on a centralized exchange — the company holds the private keys for you. With self-custody, you alone hold the keys (and the seed phrase).
- Custodial (exchange): Easy to start, password reset is possible, and you can trade instantly. But you rely on the company's solvency and security. The 2022 collapse of FTX, where customers could not withdraw funds, is the textbook reminder of the phrase "not your keys, not your coins."
- Self-custody: No counterparty can freeze or lose your funds. But there is no "forgot password" button — if you lose the seed phrase, the funds are gone permanently. The responsibility is entirely yours.
Neither is universally "safer." A custodial exchange protects you from your own mistakes but exposes you to the platform's failure. Self-custody removes platform risk but demands personal discipline.
How to protect your seed phrase and keys
If you choose self-custody, your security is mostly about the seed phrase. A few concrete rules:
- Write it on paper or steel, never type it into a computer or phone. Anything stored digitally — photos, notes apps, cloud drives, email — can be hacked or synced to a breached server.
- Never enter your seed phrase into a website. A legitimate wallet only asks for the seed phrase during initial setup or recovery, on the device itself. Any pop-up, support agent, or "verification" page asking for it is a scam, 100% of the time.
- Make a backup and store copies in separate physical locations so a single fire, flood, or theft can't wipe out access.
- Verify addresses on the device screen before approving a transaction. Some malware swaps the destination address you copied with the attacker's.
- Use a hardware wallet for meaningful amounts. It signs transactions internally so the key never touches your internet-connected computer.
Which wallet should a beginner choose?
There is no single right answer; it depends on how much you hold and how often you transact. A reasonable starting framework:
- Just learning / small amounts: A reputable exchange account is fine to start. Enable two-factor authentication (use an authenticator app, not SMS).
- Active trader: A hot self-custody wallet for dApps, plus 2FA everywhere, plus only keeping working capital online.
- Long-term holder: A hardware (cold) wallet, with the seed phrase backed up offline in two locations.
Whatever you choose, understand that crypto is volatile and self-custody carries real, irreversible risk — there is no insurance or chargeback. The goal isn't to chase a "perfect" wallet, but to match the wallet's trade-offs to the amount you're holding and the mistakes you can realistically avoid. If you want to understand the trading mechanics that often sit on top of these wallets, see our guides on crypto leverage, what is liquidation, and stop-loss and take-profit.
NOONOO TRADING — join the free chat and watch live trading together.
Join free chat →📈 Sign up on OKX for a trading fee discount
Get OKX fee discount →