// learn · season 02 · episode 06

Hot & cold wallets

In episode 5 you put the words on steel. But a key that has to sign things can't just sit in a safe — it has to meet the internet somewhere. Where that meeting happens is the single biggest security decision you'll make. Everything below runs in your browser.

01 · the spectrum

One dial, two consequences

“Hot” and “cold” aren't two boxes — they're the ends of a slider between convenience and exposure. Drag it and watch who joins the list of people who could take your money.

🔥 convenient · exposed🧊 inconvenient · protected

convenience

phone · browser · hot

who can take it

  • — malware on your device, including clipboard swaps that replace the address you pasted
  • — malicious dApp approvals you sign in a hurry
  • — phishing sites wearing a familiar logo
  • — anyone who can unlock your phone

what it's for

Daily spending. Keep the amount at 'lost wallet on the bus' size — annoying, not ruinous.

Notice there's only one dial. Every step toward convenience hands a key to someone else — a company, a phone, a browser tab. And notice no tier reads “no risk”: you're not removing risk, you're choosing which risk you'd rather manage.

02 · how hot wallets actually die

Nobody steals your key. You hand it a job.

A wallet can lose funds when its owner approves a malicious request, even if nobody steals the key. Here's the request — react the way you normally would, then find out what you agreed to.

your hot wallet · a website is requesting a signature

🎁 Mint your free NFT

cost: 0 ETH

bored-apes-airdrop.xyz wants you to confirm this transaction. Network fee only.

03 · the air gap

Simulating an offline signing workflow

Here's the trick that makes cold storage usable: you don't bring the key to the internet — you bring the paperwork to the key. Drive all five steps yourself. The signature produced below is a real P-256 message signature, and the last step verifies it locally. Both machines are panels in this browser; no physical air gap or payment exists.

Simulation in one browser context. Real P-256 message signing and local verification; no offline device, Bitcoin transaction or network broadcast.

1. build the sample request2. simulate carrying the request →3. sign in the simulated signer4. ← carry the signature back5. verify locally

online machine (simulated)

browser context

shows: a toy address

idle — nothing to send yet

simulated air gap
▣ QR

offline signer (simulated)

same browser

holds: the private key

waiting — no separate offline device exists here

Simulated offline workflow; real cryptographic signature. Both panels run in this browser. The animation provides no physical air gap and does not measure private-key exposure.

04 · in practice

Your mix

Different uses can call for different storage arrangements, the same way you don't carry your life savings in your back pocket.

pocket · hot

What you spend and experiment with. Sized so that losing all of it ruins a day, not a decade.

savings · cold

Longer-term holdings, behind a properly implemented offline workflow. Touched rarely, deliberately, and never in a hurry.

the catch

Storage only you can reach is a single point of failure wearing a safety costume. A fire, a hospital bed, a forgotten location — and it's gone for everyone who comes after you.

Cold storage reduces some online exposure, but it does not eliminate theft or mistakes. A single device and backup can still create a loss risk. The professional answer isn't a better hiding place — it's refusing to let any single key matter at all. That's episode 7.

next up

Episode 07 — Multisig: many keys, one vault play now →

Bitcoin multisig and Gnosis Safe: build a 2-of-3 vault, lose a key on purpose, and watch the money stay exactly where it is.

Building something that needs this to be right? →