Hot Wallet

A hot wallet is a Bitcoin wallet running on a device that is connected to the internet — typically an app on a phone or a program on a laptop. Its private keys are generated and stored on that online machine, which is what makes it fast and convenient: you can receive, send, and check balances instantly, with nothing to plug in and no second device to fetch. That same connectivity is the trade-off, because keys living on a networked, general-purpose computer are exposed to the full catalogue of remote software attacks — malware, phishing, clipboard hijackers that swap a pasted address for the attacker's, and compromised or counterfeit apps.

Where hot wallets fit

Hot wallets are the right tool for small, frequently spent balances — the cash in your pocket, not the savings in your vault. The sound pattern is tiered custody: a modest spending amount stays hot, while the bulk of holdings sits in cold storage or on a hardware wallet whose keys never touch an online machine. Sized that way, a compromise is an annoyance instead of a catastrophe: the loss is bounded by how little you keep hot, which is the entire reason to keep it little. A useful rule of thumb — never hold more in a hot wallet than you would carry as cash through a rough neighbourhood. Note that most Lightning wallets are inherently hot, since a node must be online to send and route; that is a structural reason Lightning suits spending balances while base-layer cold storage holds savings.

Hot versus custodial — not the same axis

A common confusion is worth killing: hot-versus-cold describes where keys live; custodial-versus-self-custodial describes who holds them. A hot wallet on your phone is still self-custody — you hold the keys and bear the risk yourself. An exchange account is not a hot wallet you own; it is someone else's wallet with your name in their database. A self-custodial hot wallet carries real but bounded technical risk; a custodian carries counterparty risk without limit. The sovereign default is your own keys, with temperature chosen per balance.

Reducing hot wallet risk

You cannot make an online device as safe as an offline one, but you can shrink the attack surface considerably. Use a dedicated, well-maintained device with a minimal app load, and install wallet software only from verified sources. Verify receive addresses character-by-character — clipboard malware is real and common. Never type or paste a seed phrase into any hot environment; the backup belongs on paper or steel, created offline and stored offline. Keep the operating system and the wallet app updated — most real-world thefts exploit long-patched holes — and prefer a phone's secure-element-backed keystore over a browser-extension wallet living beside every tab you open. Treat the wallet itself as expendable and recoverable: if the phone dies or the laptop is compromised, the funds restore from a backup that never touched the network. For balances that outgrow pocket-cash status, graduate them promptly to cold storage, and consider multisig for amounts that would genuinely hurt. Privacy deserves a thought as well: most hot wallets query third-party servers by default, disclosing your addresses to whoever runs them — pointing your wallet at your own node keeps the balance-checking habit from becoming a surveillance feed.

The operational habit

Run the split deliberately: hot for velocity, cold for weight, and a watch-only wallet to monitor the cold funds from your daily devices without exposing a single key. That arrangement gives you the convenience that makes Bitcoin usable and the security that makes it worth using — each in its proper place, both entirely under your own control.