What Is a Cold Wallet? How It Differs From Hot and Hardware Wallets

Cold wallet, hot wallet and hardware wallet get used almost interchangeably, and plenty of people end up unsure what actually separates them. This article pulls them apart: what each term means, when you would use each one, and which risks genuinely deserve your attention.

One idea to hold onto before we start: your coins are never inside the wallet. They live on the network itself the whole time. What a wallet holds is your private key, the thing that proves you own those funds and lets you move them. Whoever holds the key is the real owner.

❄️ What is a cold wallet

A cold wallet, or cold storage, means keeping your private key somewhere that is not connected to the internet. A hacker therefore cannot reach the key remotely, even if your computer is infected with malware or you are tricked into visiting a fake website.

The point many articles miss is that a cold wallet is a method of storage, not a type of product. Cold wallets come in several forms, for example:

• Hardware wallet A dedicated device that keeps the key inside its own chip. This is what most people use.
• A computer that has never been online (air-gapped) It works, but it is hard to maintain and easy to get wrong.
• Paper wallet The key printed on paper. An older method: to spend the funds you still have to load the key into an online device, so it is rarely recommended today.

🔥 What is a hot wallet

A hot wallet is a wallet whose private key sits on a device that is connected to the internet, such as a wallet app on your phone or a browser extension like MetaMask. It is free, ready in seconds and quick to send from, which makes it a good fit for small amounts you use often.

The downside is that the key lives on the same device you browse with, install apps on and tap links on every day. If that device picks up malware, or you type your seed phrase into a fake site, a thief can move your funds without you noticing.

Funds held on an exchange are a different arrangement again, known as custodial: the exchange holds the keys for you. If the exchange is hacked, goes down for maintenance or freezes withdrawals, there is nothing you can do on your own. More on this in If your assets are already on Bitkub, do you still need a hardware wallet

🔐 Where hardware wallets fit in

A hardware wallet is a small device that generates your private key internally and stores it in a chip built to resist having data pulled out of it. The key is never sent to your computer or phone at all.

A common question is whether a device you plug in by USB or pair with your phone over Bluetooth still counts as a cold wallet. It does. When you send, the app on your phone or computer passes the transaction details into the device. You check the destination address and the amount on the device's own screen, then confirm on the device itself. The device signs the transaction internally and hands back only the finished, signed transaction. The key never leaves it.

Some models skip the data cable entirely and pass QR codes back and forth between the device and your phone instead. Whichever way it connects, the principle is the same: the key stays in the device, and approval happens on the device.

Put simply, a hardware wallet is the easiest way for most people to run a cold wallet, but a cold wallet does not have to be a hardware wallet. To understand how the device itself works, read What a hardware wallet is, how it works and who should use one

📊 The three side by side

Many people use more than one, and that is the most sensible approach. It is no different from keeping pocket money separate from what is in the safe: what you are actively trading stays on the exchange, what you spend often sits in a hot wallet, and what you intend to keep long term moves to a hardware wallet.

🙋 Who should have a cold wallet

There is no fixed amount at which you suddenly need one. Instead, we suggest asking yourself three questions.

• If this money vanished tomorrow, would it affect your life? If it would, keep it yourself, somewhere nobody can reach remotely.
• Are you holding for the long term? Funds you are not trading every day have no reason to sit on an exchange or on your phone.
• Do you want to truly own it? As long as the funds sit on an exchange, what you have is a claim against the exchange, not the key itself.

If you answered yes to any of them, a hardware wallet costing a few thousand baht is already worth it. You can compare models on our hardware wallet comparison page, which covers chip type, connectivity and iPhone support.

⚠️ Common mistakes

A hardware wallet protects the key extremely well. Most people who lose funds are not hit by someone breaking into the device; they slip up on the things around it.

1. Typing your seed phrase into a phone or computer

Your seed phrase is the set of 12 to 24 words (depending on the model and settings) that restores your entire wallet. Typing it into a website or app, photographing it, or saving it in your phone's notes takes the key out of cold storage and puts it somewhere online yourself. Your seed phrase belongs on paper or a metal plate only, and should be entered only on the device itself, when the device asks for it. Read more in What a seed phrase is and why it matters more than the device

2. Trusting anyone who asks for your seed phrase

Whether they claim to be shop staff, a brand's support team or exchange staff, or say they need it to verify your identity, update the system or process a warranty claim, anyone who asks for your seed phrase is a scammer. No exceptions.

3. Buying from a seller who is not an authorized reseller

A secondhand device or one from an unverifiable source may have been tampered with, or may come with a seed phrase card that has already been filled in, which means someone else already knows your key. Buy only from an authorized reseller in Thailand or directly from the brand's own website.

4. Not checking the box and seal

Before you start, check the seal and the condition of the box, and make sure that on first power-up the device takes you to the screen for creating a new wallet. If the device already has a PIN or a wallet on first use, or the box contains a paper with a seed phrase written on it, do not use it. The full checklist is in How to spot a tampered hardware wallet

5. Confirming without reading the device's screen

The device's screen is the one place malware on your computer cannot change. If the destination address on the device does not match the one you meant to send to, reject the transaction. Do not approve it.

6. Keeping the seed phrase in the same place as the device

If both sit in the same drawer, whoever finds that drawer gets everything. Store them in separate places, and plan for humidity, flooding and fire as well.

Trezor

Trezor Safe 3

฿3,790

• CC EAL6+ secure chip
• Connects over USB-C
• Works with computers and Android; no iPhone support yet

Add to cart

Ledger

Ledger Nano X

฿4,200

• CC EAL5+ secure chip
• Connects over USB-C and Bluetooth
• Works with iPhone and Android

Add to cart

SafePal

SafePal S1 Pro

฿2,890

• Signs by QR code, no data cable
• Pairs with the SafePal app on iPhone and Android
• An entry price for your first cold wallet

Add to cart

❓ Common questions

Are a cold wallet and a hardware wallet the same thing?

Not quite. A cold wallet is a way of keeping keys offline; a hardware wallet is a device for doing that. A hardware wallet is therefore one kind of cold wallet, and the easiest kind for most people to use.

If the device is lost or breaks, are my funds gone?

No, as long as you still have your seed phrase, because the funds were never in the device. Buy a new device, restore it with your seed phrase, and everything is back. Anyone who picks up your device still needs the PIN to get in. (Standard Tangem works differently: it uses backup cards and an access code instead of written words.)

Is it still safe over USB or Bluetooth?

Yes. The cable or Bluetooth link only carries the transaction in for the device to sign and carries the result back out. The private key is never sent out of the device, and every transfer has to be confirmed on the device itself.

Are hot wallets unsafe, then?

Not to that extent. A hot wallet suits small amounts you use often; it just should not be where you keep large sums or funds you plan to hold long term. Plenty of people use a hot wallet alongside a hardware wallet.

Does a hardware wallet work with every coin?

Not every one. Each model supports a different range, and some store Bitcoin only. Check the assets you hold against the model you are considering before you buy.

Will SIAMBC ever ask for my seed phrase?

Never, and neither will the brands that make the devices. Whether someone claims it is for a warranty claim, identity verification or a system update, anyone asking for your seed phrase is a scammer.

🇹🇭 Buying in Thailand

SIAMBC has been selling hardware wallets in Thailand for over 10 years. Genuine stock from the brands, with warranty, free delivery nationwide, and a shop in Bangkok where you can handle the devices and ask questions before you decide. You press every button yourself at every step; we never touch your device and never ask for any code or your seed phrase.

See every model in All hardware wallets, or if you are still deciding, compare specs side by side on the comparison page.