Your wallet is not a box of coins
Crypto assets are recorded on the blockchain. A wallet helps you interact with them. Private keys authorize transactions; protecting them is different from protecting a picture of your balance. Investor.gov: custody basics.
Hot and cold describe key handling
Hot wallet
A common example is software that stores and uses keys on an internet-connected phone or computer. Convenient access also brings exposure to online threats.
An app’s appearance alone does not tell you where the keys are.
Cold storage
Keys are generated and kept offline. A hardware wallet is one common approach—not the only one. Physical loss, damaged backups and unsafe instructions still matter.
“Cold” is not a promise that every part of the setup is safe.
A hardware wallet is designed to sign inside a separate device, then return the signed transaction to an online app. The app can communicate with the network without receiving the private key. Trezor: how hardware signing works.
Custody asks a different question: who controls the keys?
- Self-custody
- You manage the keys and their recovery arrangements.
- Third-party custody
- A provider controls the keys. Its storage can be hot, cold or a mixture. Its use of cold storage does not give you control of those keys.
These are separate choices, with separate responsibilities and risks. Investor.gov: self- and third-party custody.
Try it without a transaction
Fictional example: Sam uses an online app with a separate signing device. Lee uses a service that advertises cold storage.
For each setup, ask: who controls the keys, and where are they stored and used?
Sam’s online app alone does not answer the key-storage question. Lee’s cold-storage label alone does not answer the custody question. Neither description is enough to decide the whole setup is safe.
One useful next step
Learn five checks for unexpected crypto messages. The free starter checklist is available to read or download without signing up.
Open the free checklistWant a structured learning route? Explore the books and reading levels, or find your retailer. A purchase is not required for this lesson.
If someone asks for recovery words, read our recovery-phrase scam lesson. This comparison is not an incident-response or wallet-setup manual.