Hot Wallet
In simple terms
A hot wallet is a crypto storage account that's always connected to the internet, like keeping money in your everyday pocket instead of a safe. It's convenient for quick transactions, but slightly riskier since hackers could potentially access it online.
Definition
A wallet connected to the internet.
In depth
A hot wallet is a cryptocurrency wallet implementation where private keys are stored on internet-connected devices and remain accessible to signing mechanisms without air-gapping or hardware isolation. This enables real-time transaction broadcasting to the blockchain network and rapid fund access, but introduces increased attack surface compared to cold storage solutions, as malware or network-level exploits could potentially compromise the private key material. Hot wallets typically employ software-based key management and may integrate with node infrastructure or third-party APIs for transaction validation and propagation.
How does Hot Wallet work?
A hot wallet keeps its private keys on a device that is connected to the internet — a phone, a browser extension, or a server. The keys sit in encrypted storage and are unlocked by a password or biometric when a transaction needs signing. Signing happens locally on that device, and the signed transaction is then broadcast to the network. The constant connectivity is what makes it fast to use and also what exposes it: malware, a malicious browser extension, or an approval signed by mistake reaches the keys through the same channel that makes them convenient.
An example
Illustrative setup: someone keeps $150 in a phone wallet for small everyday transfers and holds a larger balance offline. They approve a transaction from a site they should not have trusted, and the $150 is drained. The offline balance is untouched, because those keys were never present on the connected device. The loss is bounded by the amount that was kept hot.
Figures are illustrative only.
What beginners get wrong
- Holding a long-term balance in a browser extension used for daily activity means one malicious signature can empty the whole account.
- A password or fingerprint only unlocks the app; on a device that is already compromised, software can sign without asking.
- Granting unlimited token approvals and never revoking them leaves an open spending permission long after the interaction ended.
- Screenshotting a recovery phrase or letting it sync to cloud backup quietly turns an offline secret into an online one.
Related terms
Part of
How do crypto wallets and self-custody work? — the subject page for wallets and self-custody, with all 13 of its definitions in one place.
Educational only — not financial advice.