Disclosure: This page contains affiliate links. As an Amazon Associate, Daily Crypto Hub earns from qualifying purchases at no extra cost to you.
Where you keep your crypto matters as much as what you buy. Exchanges, hot wallets, and cold wallets each trade convenience against risk differently. Compare them side by side, get a rule-of-thumb split for your situation, and run a security checklist for each one.
Exchange vs hot wallet vs cold wallet: side by side
| Exchange account | Hot wallet (software) | Cold wallet (hardware) | |
|---|---|---|---|
| Who controls the keys | The exchange | You | You |
| Where the keys live | Exchange servers | A phone or computer that is online | A dedicated device that stays offline |
| Main risks | Exchange hack or insolvency, account takeover, frozen withdrawals | Malware, phishing, malicious token approvals, a stolen device | A lost or destroyed recovery phrase, a tampered or fake device, user error |
| If you lose access | Usually recoverable through ID checks and support | Only with your recovery phrase | Only with your recovery phrase |
| Convenience | Highest: instant trades, cash in and out | High: quick transfers, DeFi and NFTs | Lower: you confirm each transaction on the device |
| Typical cost | Trading fees | Free apart from network fees | One-time purchase of the device |
| Best for | Active trading, buying with cash, small balances | Everyday use, DeFi, NFTs, small to medium balances | Long-term holdings you cannot afford to lose |
| Biggest mistake | Leaving everything there with SMS-only 2FA | Entering the recovery phrase on a fake site or signing without reading | Photographing the phrase, or buying from a third-party reseller |
"Not your keys, not your coins" cuts both ways: self-custody removes exchange risk but makes you responsible for your own security and backups.
Find your fit
Answer five quick questions for a rule-of-thumb split. This is general education, not financial advice, and nothing you select leaves your browser.
Security checklist
Pick where you store crypto and tick off what you already do.
Score: 0%
This tool is for education only and is not financial, investment, or tax advice.
How to think about it
A useful mental model: an exchange is convenient but someone else holds the keys, a hot wallet is like cash in your pocket (handy, but you would not carry your life savings), and a cold wallet is like a safe at home (slower to reach, much harder to steal from remotely). Most people with meaningful holdings end up using all three, each for a different job.
Gear and reading
If you decide a cold wallet makes sense, buy it only from the manufacturer or an authorized reseller. Popular entry-level options include the Trezor Safe 3 and the Ledger Nano S Plus. For exchange accounts, a hardware security key such as the YubiKey 5 is much stronger than SMS codes. Check current prices on Amazon.
Related guides: how to buy a hardware wallet safely, Ledger vs. Trezor, best hardware security keys for exchange accounts, setting up a multisig wallet, and crypto inheritance planning.
Frequently asked questions
Is it safe to keep crypto on an exchange?
It can be reasonable for the amount you actively trade, but you are trusting the exchange with custody. Exchanges can be hacked, freeze withdrawals, or fail. Use strong two-factor authentication and do not leave more there than you could afford to have stuck.
What is the difference between a hot wallet and a cold wallet?
A hot wallet keeps your keys on a device that is connected to the internet, such as a phone app or browser extension. A cold wallet keeps them on a dedicated offline device, so remote attackers cannot reach them.
Do I need a hardware wallet for a small amount?
Not necessarily. For small balances, a well-secured exchange account or a carefully used hot wallet can be reasonable. As your balance grows, the cost of a hardware wallet becomes small compared with what it protects.
Can a hardware wallet be hacked?
Successful attacks on the devices themselves are rare. The bigger real-world risks are tampered devices bought from third-party sellers, recovery phrases that get photographed or stolen, and phishing that tricks people into approving bad transactions.
More free tools: Seed Phrase Backup Checklist and DCA Calculator.
