3.5 Hot Wallets vs Cold Wallets

Every Bitcoin wallet falls somewhere on a spectrum between 'hot' (connected to the internet) and 'cold' (kept offline). The right choice depends on how much you're storing and how often you spend.

Hot wallets are software wallets on your phone or laptop — apps like BlueWallet, Muun, Phoenix, Sparrow (in hot mode), or built-in wallets in apps like Cash App. They're convenient, perfect for everyday spending, and good for small balances. The risk: anything connected to the internet can potentially be hacked, and if your phone is compromised, so is the wallet on it.

Cold wallets keep your private keys completely offline. The most common form is a hardware wallet — a small dedicated device (Coldcard, BitBox02, Foundation Passport, Trezor, Ledger, Jade) whose only job is to hold keys and sign transactions. The keys never leave the device, even when it's plugged into a malware-infected computer. You can confirm every transaction on the device's own screen before approving it.

A simple rule of thumb most Bitcoiners follow: treat a hot wallet like the cash in your pocket (small amount, easy to spend, replaceable if lost), and treat a cold wallet like a safe at home (most of your savings, rarely touched, protected by serious precautions).

Exchange wallets are a third category — and the most dangerous to confuse with the others. When bitcoin sits on Coinbase, Kraken, Cash App, Binance, etc., the EXCHANGE holds the keys; you just hold an IOU. If they get hacked, freeze withdrawals, or go bankrupt (Mt. Gox, FTX, Celsius, BlockFi), your bitcoin can vanish. An exchange is fine as an on/off ramp — a place to convert dollars to bitcoin and back — but it's not a wallet you should leave savings on.

The standard flow: (1) Buy bitcoin on an exchange. (2) In your own hot or cold wallet, tap 'Receive' to generate a fresh bitcoin address (looks like 'bc1q...'). Verify the address on your hardware wallet's screen if you're using one — malware on a computer can swap the address shown in a browser. (3) On the exchange, paste that address into 'Withdraw bitcoin', send a small test amount first, wait for it to confirm in your wallet, then send the rest. (4) For savings, that destination should be your COLD wallet, not your phone.

Sending bitcoin from your own wallet works the same in reverse: paste the recipient's address, choose an amount, pick a fee level (faster = higher fee), and confirm. Hardware wallet users sign the transaction by approving it on the device's screen — your keys never touch the internet. For small everyday payments, the Lightning Network (covered later) is faster and cheaper than on-chain sends.

Selling bitcoin: send it back to the exchange's deposit address, then sell to dollars and withdraw to your bank. Remember selling is usually a taxable event — keep records. Many people prefer to spend with a Bitcoin debit card or Lightning instead of selling, which avoids triggering taxable disposals.

When you're picking a hardware wallet, prefer open-source devices — that lets independent experts audit the code. Avoid any device whose 'cloud backup' or vendor-controlled recovery defeats the whole point of holding your own keys.

Tip: never buy a hardware wallet from a third-party seller like a random online marketplace listing. Buy directly from the manufacturer or an authorised reseller, and check tamper-evident packaging on arrival. Counterfeit and pre-loaded devices have stolen real money.