Skip to content

Cryptoassets are highly volatile and largely unregulated. No consumer protection. Tax on profits may apply. Cryptoassets are highly volatile and largely unregulated. No consumer protection. Tax on profits may apply.

What Is a Hot Wallet? A Beginner's Guide


Anyone buying cryptoassets for the first time will run into the same question early on: where does it actually get stored? A hot wallet is the most common answer, and the one most beginners use without realising it — but its convenience comes with trade-offs worth understanding before you rely on one.

Navy branded hero banner reading “What Is a Hot Wallet? A Beginner's Guide”, with an IG orange accent bar and abstract key/lock motif. Source: Adode images

Written by

IG Editorial Team

IG Editorial Team

Editorial Team

Publication date

This guide explains what a hot wallet is, how it works, the different types you'll come across, and how it compares to cold storage — plus practical steps to keep one secure. It's written for information and education only and does not constitute financial advice.

Key takeaway

  • A hot wallet is any crypto wallet connected to the internet — web, mobile, desktop or exchange-based.
  • It stores the private keys needed to access and move your crypto; internet connectivity is what makes it convenient and what makes it more exposed to attack.
  • Custodial hot wallets (run by an exchange) and non-custodial hot wallets (you hold the keys) carry different risk profiles.
  • Cold wallets store keys offline and are generally considered safer for long-term holding, at the cost of convenience.
  • Basic security habits — 2FA, a securely stored seed phrase, and not leaving large balances online — meaningfully reduce hot wallet risk.

What Is a Hot Wallet?

A hot wallet is a cryptocurrency wallet that stays connected to the internet, storing the private keys you need to access, send and receive your crypto. It's the opposite of a cold wallet, which keeps those keys offline.

Every crypto wallet — hot or cold — manages a pair of cryptographic keys: a public key, which works like an account number you can share to receive funds, and a private key, which proves ownership and authorises transactions. A hot wallet doesn't store your crypto itself (nothing does, in the way a physical wallet stores cash); it stores the keys that give you control over assets recorded on the blockchain.

It can take the form of a browser extension, a mobile app, desktop software, or the built-in wallet inside a crypto exchange account.

How a Hot Wallet Works

When you send crypto from a hot wallet, the wallet software uses your private key to “sign” the transaction — a cryptographic proof that you authorised it, without exposing the key itself. That signed transaction is broadcast to the network, where it's verified and recorded on the blockchain.

Most hot wallets add layers on top of this: encryption of the stored key, a password or PIN to open the app, and often two-factor authentication (2FA) for an extra check before a transaction goes through.

Types of Hot Wallets

Hot wallets generally fall into four practical categories, and most beginners will encounter more than one.

Web Wallets

Browser-based wallets, often extensions, that connect directly to websites and decentralised apps (dApps). Convenient for interacting with decentralised finance (DeFi) platforms, but exposed to browser-based phishing risks.

Mobile Wallets

Apps installed on a phone. Convenient for everyday, on-the-go transactions, and can use device-level security such as biometric locks.

Desktop Wallets

Software installed on a computer. Typically gives more control and configuration options than mobile or web wallets, but is only as secure as the device it runs on.

Exchange Wallets

The wallet built into a crypto exchange account. This is usually how UK beginners first hold crypto — you buy through the exchange and the asset simply sits in the exchange's own wallet infrastructure rather than one you control directly.

Custodial vs Non-Custodial Hot Wallets

The custodial versus non-custodial distinction is about who actually holds the private keys — and it matters more than the hot/cold distinction for understanding who is responsible if something goes wrong.

  • Custodial wallets: a third party — typically the exchange you signed up with — holds the private keys on your behalf. You log in with a username and password, similar to online banking, and rely on that provider's security and solvency.
  • Non-custodial wallets: you hold the private keys yourself, usually represented by a seed phrase (a 12–24 word recovery phrase). You have full control, but also full responsibility — there's no customer support line to call if you lose access.

Neither approach is inherently “safer” in every situation; each shifts the risk to a different place — platform risk for custodial, personal key-management risk for non-custodial.

Hot Wallet vs Cold Wallet: What's the Difference?

The core difference is internet connectivity: a hot wallet is online and ready to transact instantly; a cold wallet keeps keys offline, usually on a hardware device or even printed on paper, and only connects briefly to sign a transaction.

Feature Hot wallet Cold wallet
Internet connection Always connected Offline by default
Best suited for Frequent transactions, active use Long-term storage
Convenience High — instant access Lower — extra steps to transact
Exposure to online attacks Higher Lower
Typical cost Usually free (software) Often a paid hardware device

Many crypto users hold both: a hot wallet for the amount they actively use or trade, and a cold wallet for the majority of their holdings that they don't need to move often.

Explore crypto with IG

FCA-regulated access to major cryptoassets

Advantages of Using a Hot Wallet

The main advantage of a hot wallet is speed and accessibility.

  • Instant access to funds for trading or spending, without waiting to connect a hardware device.
  • Straightforward setup — most can be created in minutes via an app or browser extension.
  • Native support for interacting with decentralised apps (dApps), swaps, and DeFi platforms.
  • No extra hardware cost, since most hot wallets are free software.

Risks and Security Considerations

Being connected to the internet is a hot wallet's defining convenience — and its defining vulnerability. Crypto theft remains a significant industry-wide problem: Chainalysis's 2026 Crypto Crime Report put total illicit crypto value received in 2025 at around $154 billion, up 162% year-on-year (Chainalysis, 2026), and Kaspersky researchers logged more than 5.84 million phishing attempts targeting crypto users in 2024, affecting roughly 342,000 people through wallet-draining attacks (Kaspersky, 2024).

Large-scale exchange breaches also illustrate the scale of risk in the wider ecosystem: the FBI attributed a theft of roughly $1.5 billion from the Bybit exchange in February 2025 to North Korean-linked actors, among the largest crypto thefts on record (FBI, February 2025).

This isn't a reason to avoid hot wallets altogether — they remain a normal and necessary part of using crypto day to day — but it's a reason to treat balance size and security hygiene deliberately rather than as an afterthought.

Quick fact

TRM Labs' 2026 Crypto Crime Report found that the five largest crypto theft incidents of 2025 accounted for around 70% of that year's total stolen value — a reminder that large, concentrated breaches (often hitting exchange infrastructure rather than individual users) drive most of the headline losses (TRM Labs, 2026).

How to Keep a Hot Wallet Secure

A few consistent habits account for most of the difference between a well-secured hot wallet and a vulnerable one.

  • Turn on two-factor authentication (2FA) wherever it's offered.
  • Avoid keeping large balances in a hot wallet — move the majority to cold storage if you're holding for the long term.
  • Store your seed phrase offline and never type it into a website or share it with anyone — no legitimate platform will ever ask for it.
  • Only download wallet apps or updates from official sources, and double-check URLs before connecting a wallet to a site.
  • Be cautious of unsolicited links or messages asking you to “verify” or “migrate” your wallet — a common phishing pattern.

There's also a UK-specific point worth knowing: since September 2023, UK cryptoasset businesses have had to comply with the Financial Conduct Authority's (FCA) Travel Rule, which requires them to collect and share sender and recipient information on cryptoasset transfers (FCA, 2026). In practice, this means moving funds from an exchange to a self-hosted hot wallet may involve extra verification steps — this is a compliance requirement on the exchange, not a sign of an issue with your wallet.

Do You Need a Hot Wallet?

Whether a hot wallet suits you depends on how you use crypto. If you trade actively, use dApps, or need to move funds quickly, a hot wallet is close to unavoidable. If you're holding for the long term and rarely transact, moving most of your holdings to cold storage — keeping only a small, working balance in a hot wallet — is a widely used approach to reduce exposure.

This is general education, not a recommendation for your specific circumstances — consider your own risk tolerance and, if unsure, seek independent advice.

Summed up

  • Hot wallets are internet-connected and built for convenience; cold wallets are offline and built for security.
  • Custodial hot wallets hand key control to a third party; non-custodial ones put it entirely on you.
  • Crypto theft is a genuine, well-documented risk — basic hygiene (2FA, seed phrase care, small balances) meaningfully reduces it.
  • Many users combine both: a hot wallet for active use, cold storage for the bulk of long-term holdings.

Frequently Asked Questions

What is a hot wallet in simple terms?

It's a cryptocurrency wallet that's connected to the internet, letting you access, send and receive crypto quickly from an app, browser or exchange account.

Is a hot wallet safe to use?

Hot wallets are widely used and can be reasonably secure with good habits like 2FA and careful phishing awareness, but their internet connection makes them more exposed than offline cold storage — they're generally better suited to smaller, active balances than long-term holdings.

What's the difference between a hot wallet and a cold wallet?

A hot wallet stays connected to the internet for fast access; a cold wallet keeps private keys offline, usually on a hardware device, trading some convenience for stronger security.

What's the difference between custodial and non-custodial wallets?

In a custodial wallet, a third party (typically an exchange) holds your private keys for you. In a non-custodial wallet, you hold the keys yourself, usually via a seed phrase, with full control and full responsibility.

Can I lose crypto held in a hot wallet?

Yes — through hacking, phishing, malware, or losing access credentials or a seed phrase. Cryptoassets are largely unregulated in the UK and typically fall outside FSCS protection, so losses may not be recoverable.

Do I need both a hot wallet and a cold wallet?

Not strictly, but many users find it a practical balance — a hot wallet for funds they actively use, and cold storage for the larger amount they're holding long-term.

What is a seed phrase and why does it matter?

A seed phrase is a sequence of 12–24 words generated when you set up a non-custodial wallet. It encodes your private keys and is the only way to recover the wallet if you lose your device — anyone with it can access your funds, so it should be stored offline and kept private.

Are exchange wallets the same as hot wallets?

An exchange wallet is a type of hot wallet — specifically a custodial one, since the exchange holds the private keys on your behalf rather than you holding them directly.

Discover crypto with IG

See how crypto trading works with IG

Important to know

This information has been prepared by IG, a trading name of IG Markets Limited. In addition to the disclaimer below, the material on this page does not contain a record of our trading prices, or an offer of, or solicitation for, a transaction in any financial instrument. IG accepts no responsibility for any use that may be made of these comments and for any consequences that result. No representation or warranty is given as to the accuracy or completeness of this information. Consequently any person acting on it does so entirely at their own risk. Any research provided does not have regard to the specific investment objectives, financial situation and needs of any specific person who may receive it. It has not been prepared in accordance with legal requirements designed to promote the independence of investment research and as such is considered to be a marketing communication. Although we are not specifically constrained from dealing ahead of our recommendations we do not seek to take advantage of them before they are provided to our clients. See full non-independent research disclaimer and quarterly summary.