Wallets & Security

Hot wallets, cold wallets, seed phrases — how to safely manage your Bitcoin.

3 min read

Key points

A Bitcoin wallet manages private keys via software or hardware, split broadly between convenient but hack-exposed hot wallets and more secure, internet-disconnected cold wallets. Losing a seed phrase means permanently losing the associated Bitcoin, and vigilance against phishing and investment scams is essential.

What Is a Bitcoin Wallet?

  • A Bitcoin wallet is software or hardware that manages the "private keys" needed to send and receive Bitcoin. It doesn't actually store Bitcoin itself — it manages the "keys" to access your assets on the blockchain.
  • Wallets contain public key (address) and private key pairs. The public key is like a bank account number that you share with others to receive Bitcoin. The private key is like a PIN and must never be revealed to anyone.
  • "Not your keys, not your coins" is a famous saying in the crypto community. When you keep Bitcoin on an exchange, technically that exchange controls the private keys.

Hot Wallets

  • Hot wallets manage private keys while connected to the internet. These include smartphone apps, desktop applications, and browser extensions.
  • Advantages: instant transactions, easy to use, free, convenient for daily transactions.
  • Disadvantages: being constantly connected to the internet means hacking and malware risks exist. Not suitable for storing large amounts of Bitcoin.
  • Best practice: keep only small amounts of Bitcoin for daily use in a hot wallet, and move the majority of your assets to a cold wallet.

Cold Wallets

  • Cold wallets manage private keys completely disconnected from the internet. They are considered the most secure storage method.
  • Hardware wallets: Dedicated devices like Ledger and Trezor. They store private keys on a USB-like device, connecting to a computer only during transactions. Prices range from $70-150.
  • Paper wallets: Printing private keys on paper for storage. Completely offline, but risks include paper degradation, fire, and loss.
  • Steel wallets: Engraving seed phrases on metal plates. Resistant to fire and water damage, suitable for long-term storage.

Seed Phrases (Recovery Phrases)

  • A seed phrase (mnemonic phrase) is a sequence of 12 or 24 English words used as a wallet backup, based on the BIP-39 standard.
  • Private keys can be mathematically regenerated from this phrase, so even if your device is lost or damaged, you can restore your wallet with the seed phrase.
  • Essential rules: Write your seed phrase on paper and store it in a safe place. Never store it digitally (screenshots, cloud storage, email). Never share it with anyone.
  • If you lose your seed phrase, the Bitcoin in your wallet is lost forever. An estimated 20% of all Bitcoin (approximately 3.8 million BTC) are considered "lost coins" that are permanently inaccessible.

Custodial vs. Non-Custodial

  • Custodial wallets: Exchanges or services manage the private keys. Convenient, but carries risks of service hacking or bankruptcy. Mt.Gox and FTX serve as cautionary examples.
  • Non-custodial (self-custody) wallets: Users manage their own private keys. You have complete control, but also bear full responsibility.
  • The choice depends on your security knowledge level, holdings amount, and intended use. Beginners typically start with a trusted exchange and transition to self-custody as they gain knowledge.
  • Recently, custody services using "multisig" (requiring multiple signatures) have emerged, improving the balance between convenience and security.

Security Best Practices

  • Two-Factor Authentication (2FA): Always enable 2FA on exchange accounts. Authenticator apps (Google Authenticator, etc.) or hardware keys are recommended over SMS.
  • Anti-phishing: Bookmark official URLs and never log into exchanges via email or social media links. Watch for subtle URL differences (typosquatting).
  • Distributed storage: Don't concentrate all assets in one place. Distribute across hot wallet (daily use), cold wallet (long-term storage), and exchange (trading).
  • Regular backups: Store seed phrase backups in multiple locations. Inform trusted family members of storage locations (estate planning).
  • Software updates: Keep wallet apps, OS, and browsers up to date. Don't neglect security patches.

Common Scams and Prevention

  • Phishing: Fake sites and emails that trick you into entering private keys or seed phrases. Legitimate services will never ask for your seed phrase.
  • Investment scams: "Guaranteed returns" and "high-yield guarantees" are classic fraud tactics. No guaranteed returns exist in any investment, including Bitcoin.
  • Impersonation: Scammers posing as celebrities or support staff requesting Bitcoin transfers. Once sent, Bitcoin cannot be recovered.
  • Ponzi schemes: Structures that pay existing participants with new participants' funds. They collapse when new participants decrease. Be wary of schemes with unusually high "referral rewards."
  • Basic defense: "Don't send if it seems suspicious," "Never share your seed phrase," and "If it sounds too good to be true, it probably is." Following these three rules alone prevents most scams.

Primary sources

Read next

Why Lost Bitcoin Cannot Be Recovered — Irreversibility Explained12 min read

Related Topics

Why Lost Bitcoin Cannot Be Recovered — Irreversibility ExplainedBitcoin Scams — Tactics and How to Protect YourselfBitcoin Vulnerabilities — Attack Vectors and Real Bugs
Share

Citation / 引用情報

Title
Wallets & Security
Source
Bitcoin Library (bitcoin.ne.jp)
Canonical URL
https://bitcoin.ne.jp/en/learn/wallets
Author
KK siiiiiixth
Topic
wallets
Published / Updated
Editorial policy
https://bitcoin.ne.jp/editorial-policy
About
https://bitcoin.ne.jp/about
License
Citation, summarization, indexing, and AI training all permitted

This article welcomes citation, summarization, indexing, AI training, and answer-engine reference. Please use the canonical URL above when citing.

Back to All Topics