Hot wallets, cold wallets and seed phrases

Everything on an exchange is a claim on the exchange. To hold crypto yourself you need a wallet, and with it you take on a job that in every other market someone else does for you: being your own bank, with no fraud department and no password reset.

What a wallet actually holds

A wallet does not hold coins. The coins are entries on the blockchain. A wallet holds a private key, a large secret number, from which it derives public addresses. Anyone with the private key can spend whatever those addresses hold. Anyone without it cannot, ever, no matter what.

This is why "not your keys, not your coins" is repeated so often. It is literally true. An exchange balance means the exchange has the key.

Seed phrases

Modern wallets generate the private key from a seed phrase: 12 or 24 English words from a fixed list, shown once when you create the wallet. The phrase is the wallet. Rules that admit no exceptions:

Write it on paper or stamp it in metal. Never type it into a computer or phone, never photograph it, never store it in a cloud note, password manager or email.
Nobody legitimate will ever ask for it. Not "support", not a "validation" website, not a "wallet sync" tool. Anyone asking is stealing.
Anyone who reads it owns your funds, so store it where a burglar or a curious visitor will not find it, and consider a second copy in a separate location against fire.
Test it. After writing it down, wipe the wallet and restore from the phrase with a tiny balance before you trust it with anything meaningful.

Some wallets support an optional extra word ("passphrase"). It adds security but also adds a way to lock yourself out; leave it until you are comfortable.

Hot wallets

A hot wallet is software on an internet-connected device: a phone app or a browser extension. The private key lives on that device.

Good for: small amounts you actively use, interacting with DEXs and other on-chain applications, learning.

Risk: whatever compromises the device compromises the wallet. Malware, a malicious browser extension, or a scam website that tricks you into signing a transaction (Module 6) can empty it. Treat a hot wallet the way you treat the cash in your pocket: enough for what you are doing today, not your savings.

Cold wallets

A cold (hardware) wallet is a small device that holds the private key and never exposes it to the connected computer. Transactions are sent to the device, which shows you the details on its own screen, and you physically press a button to sign. Malware on the computer can propose a transaction but cannot sign one, and cannot read the key.

Good for: anything you intend to hold for longer than a trade, and any amount that would hurt to lose.

Risks: buying a tampered device (buy only from the manufacturer), losing the device without a seed backup (the seed restores it onto a new one), and the human factor: confirming a transaction on the device screen without reading it.

Property	Exchange account	Hot wallet	Cold wallet
Who holds the key	The exchange	You, on a live device	You, on an offline device
Fails if	Exchange fails/hacked	Device compromised	Seed lost or device tampered
Convenience	Highest	High	Lowest
Right for	Active trading capital	Small daily-use sums	Long-term holdings

Key idea: A wallet is a private key, and the seed phrase is the key written in words. Whoever has the seed has the money. Hot wallets are for pocket money, cold wallets are for savings, and exchanges are for what you are trading this week.

Self-custody trade-offs, honestly

Self-custody is not free of risk; it moves the risk from the exchange to you. A realistic list of ways people lose self-custodied coins:

Seed phrase lost in a house move, a fire, or a death without instructions to heirs.
Seed phrase typed into a phishing site that looked like the wallet's recovery page.
Transaction sent to the wrong network or a mistyped address (there is no recall).
Approving a malicious contract that then drains the wallet.
Hardware device confirmed without reading the screen.

Every one of these is avoidable, and none of them is anyone else's fault. That is the trade. The exchange failure cases in the next lesson show why many traders accept it anyway.

Withdrawal tests

Whenever you move funds to a new address, whether your own wallet or another exchange, send a small test amount first, wait for it to confirm, verify it arrived, and only then send the rest. The extra fee is trivial next to the cost of the wrong network or a poisoned address. Make this a habit that does not depend on how confident you feel; the times you skip it are the times it would have saved you.

Try it: Set up a hot wallet with no funds. Write down the seed, delete the wallet, and restore it from the seed. Then send yourself the smallest amount your exchange allows, confirm it arrives, and send it back. You have now done every step of custody once with nothing at stake.

Recap

A wallet holds a private key, not coins. The seed phrase is that key in words; whoever has it owns the funds.
Seed on paper or metal, offline, never typed anywhere, never given to anyone, tested by restoring.
Hot wallets for small active sums; cold (hardware) wallets for anything you would hate to lose.
Self-custody moves the risk to you: lost seeds, wrong addresses and malicious approvals are the real losses.
Test every new address with a small send before the real amount, every time.