Bitcoin wallets explained: hot, cold, hardware, custodial, and what they actually store

Separate the wallet, its keys and its displayed balance

A wallet manages information used to find and spend outputs. Its displayed balance is a calculation over the outputs it recognizes and the conditions it can satisfy. The bitcoin is not a file physically stored inside the application.

A watch-only wallet can display the same receipts as a signing wallet without possessing the private keys. A custodial account adds a different layer: the service keeps the on-chain keys and maintains a customer balance in its own records. Check which kind of authority the interface actually gives you.

Hot means online, cold means offline

A hot wallet keeps the private keys on a device that is connected to the internet: a phone app, a desktop program, a browser extension. The developer guide calls the typical version a full-service wallet, because it does everything, from generating keys to broadcasting transactions. That convenience has a price. The guide’s stated disadvantage is that the keys sit on an internet-connected device, where malware or a stolen login can reach them.

A cold wallet keeps the keys on something that never touches the network. The bitcoin.org guidance is blunt: “An offline wallet, also known as cold storage, provides the highest level of security for savings.” In the developer guide’s terms this is a signing-only wallet paired with a networked one. The online half builds an unsigned transaction and watches the ledger; the offline half checks the transaction and signs it; the signed result is carried back across the gap, on a USB stick or by scanning a code, and broadcast.

Hot and cold are not different kinds of key. The same secret number works either way. The difference is how exposed it is while it sits there, and how much friction stands between you and spending. Bitcoin.org frames it like cash: “If you wouldn’t keep a thousand dollars in your pocket, you might want to have the same consideration for your Bitcoin wallet.”

A hardware wallet is a signing machine with no other job

A hardware wallet is a small device, often the size of a USB stick, whose only purpose is to hold keys and sign transactions. The developer guide defines them as “devices dedicated to running a signing-only wallet.” Plugged into a laptop or phone, the device receives an unsigned transaction, shows you the amount and destination on its own screen, signs it inside the device, and passes the signature back. In the intended design, ordinary signing does not export the private key; device compromise and recovery-seed handling remain separate risks.

Bitcoin.org rates this as “the best balance between very high security and ease of use,” because the device is “designed from the root to be a wallet and nothing else,” with no software to install that could carry a virus. The developer guide makes a similar point in plainer terms: it is more secure than a full-service wallet, “with much less hassle than offline wallets.” The costs are that you have to buy one and carry it.

A hardware wallet is not a backup. Devices are lost, broken and superseded. What survives them is the recovery phrase the device shows you when it is first set up, which, with any passphrase and required derivation or script information, can recover the keys derived from that seed on a compatible replacement. Treat the device as the lock and the phrase as the master key.

Custodial means someone else holds your keys

Most people’s first bitcoin sits in an account at an exchange. That is a custodial wallet: you have a username and a password, and the company has the keys. Your balance is a number in their database, a promise that they will hand over coins when you ask. The bitcoin.org security guidance says what that means: “When a third party controls your keys, you rely entirely on their security and honesty.” It adds that “history has shown that exchanges and online wallets can be hacked, fail, or freeze access to funds.”

The site’s history dossiers show what that looks like when it goes wrong. The collapse of Mt. Gox, once the largest exchange, documents how a withdrawal freeze became a bankruptcy and a creditor process that lasted far longer than the exchange itself. The history of Bitcoin exchanges traces the pattern through Bitfinex and Quadriga, each failing in a different way, and explains why an exchange balance is a claim on a company rather than a coin on the chain.

A non-custodial wallet is the opposite arrangement: the keys are on your device or your paper, and no company sits in between. Bitcoin.org’s wallet guide scores this under the heading “Control,” and its wording is precise: “Some wallets give you full control over your bitcoin. This means no third party can freeze or take away your funds.” The trade is that no third party can reset your password either. If the keys are lost, there is no help desk. Neither arrangement is free of risk; they put the risk in different places.

A deterministic backup has a defined recovery scope

Early wallets were a headache to back up because every new address meant a new random key, and a backup taken last month did not include it. BIP32, a proposal by Pieter Wuille dated 11 February 2012, fixed that with hierarchical deterministic wallets: every key is derived, in a fixed order, from a single master seed of between 128 and 512 bits of randomness (256 is advised). The seed backs up the keys derived from that seed, provided the wallet can reconstruct the relevant paths and scripts; imported keys and multisignature policies need separate consideration.

BIP-39, dated 10 September 2013, encodes entropy and a checksum as a mnemonic of 12 to 24 words. For example, 128 entropy bits produce 12 words and 256 produce 24. The checksum can detect some transcription errors; it does not make every mistaken phrase invalid. The mnemonic and optional passphrase are inputs to seed derivation, rather than the words being a direct encoding of that derived seed.

Keep recovery material in protected locations that avoid a single point of failure. A phrase can expose keys derived from it, but an additional passphrase or multisignature policy may also be required to spend. Preserve the complete recovery arrangement, not merely the most visible secret.

The labels matter less than six practical questions

Hot, cold, hardware and custodial describe where the keys live. Bitcoin.org’s wallet directory rates wallets on six things that matter day to day: control (who holds the keys), validation (whether the wallet checks transactions itself by running a full node or trusts someone else’s server), transparency (whether the code is open source and can be built reproducibly), environment (how well the device resists malware), privacy (whether it rotates addresses and can route through Tor), and fees (whether you can set what you pay the network).

One more feature cuts across all the categories. Bitcoin itself supports multi-signature, which bitcoin.org describes as allowing “a transaction to require multiple independent approvals to be spent.” A family, a company or a cautious individual can spread keys across several devices or people so that no single loss or theft is enough. It is the on-chain version of a safe that needs two keys turned at once.

A seed is only one part of a recovery plan

BIP-39 applies Unicode NFKD normalization to the mnemonic and optional passphrase before deriving the seed. A different normalized passphrase derives a different valid seed without a built-in indication of which wallet was intended.

Recovery also requires compatible derivation paths and script types. Imported keys, multisignature policies and cosigner information may need separate backups. The relevant wallet documentation determines the complete recovery procedure.