A hot wallet is a crypto wallet whose private keys sit on a device or service that is connected to the internet. That makes it quick to use for sending, receiving and paying. The same connection is its main weakness, because an attacker who compromises the device or account can reach the keys. In a December 2025 investor bulletin, the US Securities and Exchange Commission describes hot wallets as "a convenient way to access your crypto assets for transactions" that "also expose your crypto assets to cyberthreats."
What a hot wallet actually holds
A wallet does not hold coins. The SEC bulletin Crypto Asset Custody Basics for Retail Investors, published by its Office of Investor Education and Assistance in December 2025, explains that a wallet stores the private keys that prove ownership and authorise transactions. The assets themselves stay on the blockchain.
A wallet is "hot" when those keys live on a networked system. Common forms:
- Mobile and desktop wallet apps that keep keys on your phone or computer.
- Browser-extension wallets used to connect to decentralised applications.
- Custodial accounts at a third-party service, where the provider holds the keys for you.
The Bitcoin developer documentation calls a wallet that creates keys, signs transactions and talks to the network all on one machine a "full-service wallet". It names the trade-off directly: "The main disadvantage of full-service wallets is that they store the private keys on a device connected to the Internet."
Hot wallet vs cold wallet
| Hot wallet | Cold wallet | |
|---|---|---|
| Where keys live | Internet-connected device or service | Offline device or record (hardware device, USB drive, paper) |
| Speed of use | Immediate | Slower; data must be moved between devices |
| Main risk | Remote compromise: malware, phishing, account takeover | Physical loss, damage or theft of the device or backup |
| Typical use | Everyday spending, frequent transfers | Long-term holdings |
The SEC bulletin says cold wallets are generally harder to hack, but warns that the physical devices "can be lost, damaged, or stolen, which may result in a permanent loss of your crypto assets." Neither type is risk-free. The risks are simply different.
Where hardware wallets fit
Bitcoin's developer guide describes hardware wallets as "devices dedicated to running a signing-only wallet." The private key stays on the device. A connected computer or phone prepares the transaction, the hardware device signs it, and the signed transaction goes back out to the network. Because the device does only this one job, it avoids many of the weaknesses of general-purpose operating systems. Bitcoin.org presents hardware wallets as a middle ground between security and convenience.
Hot wallet, cold storage or both?
Answer three questions to see which setup from this article fits how you use your crypto.
How do you mostly use this crypto?
- I send, receive or pay with it often → next question
- I hold it for the long term and rarely move it → next question
Is the amount you keep in the wallet one you could afford to lose?
- Yes, it is spending money only → A hot wallet fits this use
- No, it includes larger holdings → Split it: hot for spending, cold for the rest
Can you guard an offline device and its backup against loss, damage or theft?
- Yes → Offline storage fits long-term holdings
- No, or not sure → Decide who holds the keys first
A hot wallet is the practical tool for frequent transfers. Keep only small everyday amounts in it, store the seed phrase securely and never share it, never keep unencrypted backups online, encrypt the wallet and device, and keep software updated.
Many holders use both. Keep a small spending balance in the hot wallet and move larger holdings to offline storage, or consider multi-signature so one compromised device is not enough to move funds.
Keys kept offline, for example on a hardware wallet that only signs transactions, remove the main remote-attack route. You become responsible for the device and its backup: if they are lost, damaged or stolen, the loss can be permanent.
With self-custody you hold the keys and carry all the responsibility. With a custodial service you rely on the provider's security and practices. Hot and cold options exist under both models, so settle this question before choosing a wallet type.
This sorts general situations described in the article only: it does not assess a specific wallet, provider or device, and it is not financial or security advice.
Why the risk is real: 2025 figures
Chainalysis published its 2025 theft data on 18 December 2025. It counted more than $3.4 billion stolen across the crypto industry from January to early December 2025. For individual (personal) wallets it reported:
- 158,000 theft incidents in 2025.
- At least 80,000 unique victims, up from 40,000 in 2022.
- $713 million stolen from individuals, down from a 2024 peak of $1.5 billion.
- Personal wallet compromises made up 20% of all value stolen in 2025, down from 44% in 2024.
So more people were hit, but the average amount per victim was smaller. These figures come from one analytics firm and cover personal wallet compromises in general, not hot wallets alone.
How to use a hot wallet more safely
These steps draw on Bitcoin.org's wallet security guidance and the SEC bulletin:
- Keep only spending money in it. Bitcoin.org advises "keep only small amounts of bitcoins on your computer or mobile device for everyday use." Larger holdings belong in offline storage.
- Protect the seed phrase. The seed phrase can restore the wallet if you lose the device or the key. The SEC advises storing it securely and never sharing it. Anyone who has it controls the funds.
- Never keep backups online unencrypted. Bitcoin.org warns that "any backup that is stored online is highly vulnerable to theft."
- Encrypt the wallet and the device. A password stops someone with physical access. Bitcoin.org notes it cannot stop keyloggers or similar malware.
- Update software. The latest version brings "important stability and security fixes," according to Bitcoin.org. The same goes for the phone or computer's operating system.
- Consider multi-signature for larger sums. Multi-signature "allows a transaction to require multiple independent approvals to be spent," so one compromised device is not enough to move funds.
- Know who holds the keys. With self-custody you hold the keys and carry all the responsibility. With a custodial hot wallet you rely on the provider's security and practices. The SEC bulletin points out that hot and cold options exist under both models.
Choosing between them
If you transact often, a hot wallet is the practical tool, with a balance you could afford to lose. If you hold for the long term, keys kept offline, for example on a hardware wallet, remove the main remote-attack route. You then become responsible for guarding the device and its backup. Many holders use both: a hot wallet for day-to-day activity and cold storage for savings.
Limitations: the 2025 theft figures rest on a single source (Chainalysis), and the SEC bulletin was checked through search excerpts and coverage because the full page could not be loaded.
