Wallets and Self-Custody·Lesson 9 of 20·12 min

Hot Wallets, Cold Wallets, and Custody Models

The Concept: Where Your Bitcoin Lives

When you own Bitcoin, you don't hold a physical coin. Instead, you hold a private key—a secret number that proves you own the Bitcoin on the blockchain. Where and how you store that private key determines your security, convenience, and control.

There are three main ways to hold Bitcoin:

Custodial wallets: A third party (like an exchange) holds your private keys for you. You trust them with your Bitcoin.
Hot wallets: You hold your own private keys on an internet-connected device (phone, computer, or web browser). Fast and convenient, but exposed to online threats.
Cold wallets: You hold your private keys on a device that is never connected to the internet. Secure, but slower to access.

Each model trades off security against convenience. Understanding these tradeoffs helps you choose the right wallet for your needs.

Custodial Wallets: Convenience at the Cost of Control

When you buy Bitcoin on an exchange like Coinbase or Kraken, your Bitcoin lives in a custodial wallet. The exchange holds the private keys; you hold an account login.

Advantages:

Easy to use: Log in, buy, sell, done.
Recovery is simple: Forgot your password? The exchange can reset it.
Insurance: Many exchanges insure customer funds against theft (though not all, and coverage varies).

Disadvantages:

You don't own the private keys—the exchange does. If the exchange is hacked, your Bitcoin can be stolen.
If the exchange goes bankrupt or is shut down by regulators, you may lose access to your Bitcoin.
The exchange can freeze your account, limit your withdrawals, or deny service.
You're trusting a company to keep your Bitcoin safe—and companies can fail.

When to use it: Custodial wallets are fine for small amounts you plan to trade frequently, or while you're learning. They're not suitable for long-term holding or large amounts.

Hot Wallets: You Hold the Keys, Online

A hot wallet is software (on your phone, computer, or web browser) that stores your private keys on an internet-connected device. You control the keys, but they're exposed to the internet.

Types of hot wallets:

Mobile wallets (e.g., Blue Wallet, Exodus): Apps on your phone. Convenient for everyday spending.
Desktop wallets (e.g., Electrum): Software on your computer. More secure than mobile if your computer is clean.
Web wallets (e.g., Blockchain.com): Browser-based. Convenient but generally less secure.

Advantages:

You control your private keys. No one can freeze your account or deny you access.
Fast and convenient. Send Bitcoin in seconds.
Free or very cheap to use.
Good for small to medium amounts you access regularly.

Disadvantages:

Your private keys are on an internet-connected device. If your device is hacked (malware, keylogger), your Bitcoin can be stolen.
If you lose your device and don't have a backup, your Bitcoin is gone forever.
If your device is damaged, you need a backup seed phrase to recover your Bitcoin.

When to use it: Hot wallets are good for spending Bitcoin regularly, or holding amounts you can afford to lose. They're not ideal for long-term storage of large amounts.

Cold Wallets: Maximum Security, Offline

A cold wallet stores your private keys on a device that is never connected to the internet. The most common type is a hardware wallet—a small device (like a USB stick) that generates and stores your private keys offline.

Types of cold storage:

Hardware wallets (e.g., Ledger, Trezor): A dedicated device. Most secure for most people.
Paper wallets: Your private key printed on paper. Secure if done correctly, but easy to mess up.
Airgapped computer: A computer that has never been online, used to generate and sign transactions offline.

Advantages:

Your private keys never touch the internet. Even if your computer is hacked, your Bitcoin is safe.
Excellent for long-term storage of large amounts.
You maintain full control and ownership.
Resistant to most common attacks (malware, phishing, exchange hacks).

Disadvantages:

Slower to access. Sending Bitcoin requires connecting the device, which takes a few minutes.
More expensive. Hardware wallets cost $50–$150.
If you lose the device and don't have a backup seed phrase, your Bitcoin is gone forever.
Requires more technical knowledge to set up correctly.

When to use it: Cold wallets are ideal for holding Bitcoin long-term, especially large amounts. If you're not planning to spend your Bitcoin for months or years, a hardware wallet is the best choice.

Custody Models: A Spectrum

Think of custody as a spectrum:

Custodial (Exchange)  →  Hot Wallet (Phone)  →  Cold Wallet (Hardware)  →  Paper Wallet
  Maximum convenience        Balanced              Maximum security         Maximum security,
  Minimum control            Balanced control      Maximum control          Maximum risk

Your choice depends on three factors:

Amount: Small amounts ($100–$1,000) can live in a hot wallet. Large amounts ($10,000+) belong in cold storage.
Time horizon: If you're spending Bitcoin soon, use a hot wallet. If you're holding for years, use cold storage.
Technical comfort: If you're new to Bitcoin, start with a custodial wallet or mobile hot wallet. As you learn, graduate to a hardware wallet.

Worked Example: Sarah's Bitcoin Strategy

Sarah has just bought $5,000 of Bitcoin. Here's how she might split it:

$500 in a mobile hot wallet (Blue Wallet): For spending at coffee shops or sending to friends. She's comfortable losing this amount if her phone is hacked.
$2,000 in a desktop hot wallet (Electrum): For medium-term holding and occasional trades. She keeps a backup seed phrase in a safe.
$2,500 in a hardware wallet (Ledger): For long-term storage. She keeps the hardware wallet in a safe deposit box and the seed phrase written down and locked away separately.

This strategy balances convenience (she can spend small amounts instantly) with security (her large holdings are protected offline).

Exercise: Design Your Own Custody Strategy

Answer these questions:

How much Bitcoin do you plan to hold? (e.g., $100, $5,000, $50,000)
How often do you plan to spend or trade it? (e.g., weekly, monthly, never)
How comfortable are you with technology? (e.g., beginner, intermediate, advanced)

Based on your answers, sketch out a custody strategy:

What percentage in custodial wallets (if any)?
What percentage in hot wallets?
What percentage in cold storage?

Example answer:

10% in a custodial exchange (for easy buying/selling)
30% in a mobile hot wallet (for spending)
60% in a hardware wallet (for long-term holding)

Recap

Custodial wallets offer convenience but require trusting a company. Good for small amounts and frequent trading.
Hot wallets give you control but expose your keys to the internet. Good for spending and medium-term holding.
Cold wallets provide maximum security by keeping keys offline. Best for long-term storage of large amounts.
Choose based on the amount you hold, how often you spend it, and your technical comfort. Most people use a mix of all three.

← Running a Node and How the Network Stays Honest Seed Phrases, Private Keys, and Backups →