The hot/cold distinction is the single most useful idea in the wallet space. It is also one of the most oversimplified.
The clean version
A **hot wallet** is connected to the internet. Your phone, your browser extension, your desktop app. The private key lives on a device that's online. This is convenient: you can sign a transaction in 5 seconds. It's also risky: every piece of malware on your device is a potential threat to your funds.
A **cold wallet** is offline. A hardware wallet, a paper wallet, an air-gapped computer. The key never touches an internet-connected device. Signing happens on the device itself, and only the signed transaction is transmitted. This is much safer. It's also slower and clunkier.
A **warm wallet** is a fuzzy middle ground. Some examples: a hardware wallet paired with a hot wallet interface (you use MetaMask as the UI, but the keys stay on the Ledger). Or an MPC wallet that splits key material across your device and a remote server.
What "cold storage" really means
When serious holders say "I keep my crypto in cold storage," they usually mean: my long-term holdings live on a hardware wallet, in a safe, with a Shamir backup split across three locations. Anything they might want to trade or use in DeFi lives in a hot wallet with a small balance.
This is the actual industry best practice and almost nobody follows it. The "all hot" crowd thinks hardware wallets are overcautious. The "all cold" crowd thinks any internet-connected wallet is reckless. The right answer, for almost everyone, is some mix.
The threat model drives the choice
A useful exercise: write down what you're actually defending against. For most people, it's:
- Losing access (lost device, forgotten PIN, house fire)
- Phishing (fake websites, fake support)
- Address-swap malware (clipboard hijackers)
A hardware wallet defeats the third one by never exposing the address-signing process to the host device. It mostly defeats the first one via seed phrase backup. It does nothing for the second — you can still be phished into signing a malicious transaction with a hardware wallet. The screen is your only protection.
This is why the "I have a hardware wallet, I'm safe" mindset is dangerous. The hardware wallet is one layer. The screen and your own judgment are another.