A wallet does not hold your bitcoin. Your bitcoin only exists as entries in a ledger that thousands of computers keep a copy of. What a wallet holds is the key that authorises moving those entries.
Once that lands, the rest of the decision gets much simpler. You are not choosing where to put your money. You are choosing who can produce a valid signature, and how hard it is for that ability to be lost or stolen.
The one question that matters first
Before hot or cold, before hardware or software:
Do you hold the key, or does someone else?
- Custodial - an exchange or app holds the key. You have an account with a company, and a promise. If they freeze it, get hacked, or fail, you are a creditor.
- Non-custodial - you hold the key. Nobody can freeze it or seize it remotely, and nobody can help you if you lose the backup.
Everything else on this page is a detail inside the non-custodial branch. If you are custodial, the wallet software you picked is close to irrelevant - you have a company risk, not a key management problem.
This is what "not your keys, not your coins" means. It is not a slogan about purity. It is a description of who a court order lands on.
Hot and cold
A hot wallet keeps the key on a device that is connected to the internet. A cold wallet keeps it on one that is not.
That is the whole distinction, and it is a spectrum rather than two boxes. A phone wallet is hot. A hardware device that only ever sees an unsigned transaction over USB is cold-ish. A device that never touches a cable at all, and exchanges transactions by QR code or SD card, is properly air-gapped.
The tradeoff is exactly what you would expect. Hot is convenient and exposed to whatever compromises the device. Cold is inconvenient and exposed mainly to physical loss and to your own backup discipline.
Most people who hold a meaningful amount end up running both: a small hot wallet for spending, treated roughly like cash in a pocket, and cold storage for savings.
Hot wallets
| Type | Runs on | Worth knowing |
|---|---|---|
| Mobile | Your phone | Best for actually spending, especially over Lightning. Compromised phone means compromised keys. |
| Desktop | Your computer | More capable: coin control, fee control, connecting to your own node. Same exposure as your computer. |
| Web | A browser | Frequently custodial. Check before assuming otherwise. |
For everyday spending amounts, a mobile wallet is the right answer, and the risk is appropriate to the amount. Keep the balance at a level you would be annoyed but not damaged to lose.
Cold storage
A hardware wallet - more precisely a signing device - is a small dedicated computer whose only job is to hold a key and sign transactions. The key never leaves it. You plug it in, your desktop wallet builds a transaction, the device shows you what you are signing on its own screen, you approve on the device.
That last part is the actual security property, and it is the one people misunderstand. The device protects you because it has its own screen. Malware on your computer can swap the destination address in the software, but it cannot change what the device displays. If you do not check the address on the device screen, you have bought a USB stick with extra steps.
Air-gapped devices go further and never connect at all, passing transactions by QR code or SD card. Fewer ways in, more steps per transaction.
What actually differentiates devices
Rather than a spec table that goes stale, here is what to compare, in the order that matters:
- Is the firmware open source, and can you verify what you are running? This is the difference between trusting a claim and checking one.
- Does it have a screen you can read the full address on? See above. Non-negotiable.
- Is it Bitcoin-only? Bitcoin-only firmware is a smaller attack surface and less code to trust. On a Bitcoin site the multi-asset support other people advertise as a feature is not one.
- Does it work with the desktop wallet you want to use? Check the pairing before you buy, not after.
- Can you recover it onto a different manufacturer's device? If a vendor's backup only restores onto their own hardware, they are a dependency, not a tool.
Devices worth looking at as of August 2026 include Coldcard, Blockstream Jade, Trezor and the DIY SeedSigner. Prices move and models get discontinued, so check the manufacturers directly rather than trusting a number in a blog post - including this one.
Two rules that do not change:
- Buy from the manufacturer. Not a marketplace, not a reseller, not eBay. A tampered device is a real attack, not a theoretical one.
- Never accept a pre-filled seed phrase. If a device arrives with words already written on a card, it is a theft device. A genuine device generates the seed in front of you, on first use.
The backup is the actual product
The device can be replaced. Buy the same model, restore, carry on. The seed phrase cannot be replaced. It is the only thing standing between you and permanent loss.
- Write it on paper as a minimum. Stamp it into metal if the amount justifies it - paper does not survive fire or a flooded basement.
- Never photograph it, never type it into anything, never put it in a password manager, a notes app, or cloud storage. The moment it touches an internet-connected device it should be considered compromised.
- Store it somewhere it survives your realistic disasters - house fire, burglary, a move.
- Keep it separate from the device. The two together are the whole wallet.
- Test the restore before you trust it. Wipe the device, restore from your written words, confirm the same addresses come back. A backup you have never tested is a belief, not a backup.
That last step is the one people skip, and it is the one that turns a plan into a fact.
A note on advice that does not apply
Two-factor authentication is good advice for accounts. It is meaningless for a non-custodial wallet, because there is no server to authenticate to - there is a key, and whoever has it can sign. If you find a guide telling you to enable 2FA on your hardware wallet, the author does not understand the model, and you should discount the rest of what they wrote.
The equivalent measures for a non-custodial wallet are different: a PIN on the device, an optional passphrase on top of the seed, and for larger amounts, multisig so that no single key is enough.
Where to start
If you hold bitcoin on an exchange right now and nothing else, the useful next step is not picking the perfect device. It is moving a small amount into any reputable non-custodial wallet, writing the seed down, wiping it, restoring from the words, and confirming the funds come back.
Do that once and self-custody stops being an abstraction. Everything after it is a refinement.
Next: what self-custody actually requires, and where the randomness in your key comes from.