What is a hot wallet?
A hot wallet is a wallet arrangement in which transaction authorization is available through an internet-connected system. It can prepare and authorize activity without first moving the signing setup into an offline workflow. “Hot” describes the connectivity of the authorization path; it does not identify who controls the keys or where blockchain assets are recorded.
The term covers more than one architecture. A phone or browser wallet may keep encrypted key material locally and sign on the same device. A custodial service may receive an instruction through an interface and use its own online signing infrastructure. Both make authorization available online, but they assign key control and recovery differently.
What stays online in a hot-wallet flow?
A transaction usually passes through several functions:
- software reads network and account data;
- it constructs an instruction in the format required by the network;
- a signing component authorizes that instruction; and
- a network-facing component broadcasts it.
In a hot wallet, the signing component or the service able to invoke it is reachable from an online environment. The private key may still be encrypted at rest or isolated inside an operating-system key store, but the wallet must make signing capability available when authorized. Encryption at rest protects a different boundary from malicious code or a deceptive request that acts while the wallet is unlocked.
NIST describes hot wallets as internet-connected and highly accessible, in contrast with offline cold wallets. Its broader wallet model also separates key storage, transaction creation, signing and network functions, so an online interface alone does not reveal exactly where a key is held. NISTIR 8301
Connectivity, custody and interface are separate axes
Three labels are often mixed together:
- Hot or cold asks whether authorization is available through an online setup.
- Custodial or non-custodial asks which party controls the keys or other authorization mechanism.
- Mobile, browser, desktop or web describes how the interface is delivered.
A mobile hot wallet can be non-custodial if the user controls its signing material. A provider account can use custodial hot-wallet infrastructure even when the user never sees a private key. A web page can also be only a viewer for an account whose signing authority lives elsewhere.
Ethereum’s wallet documentation makes a related distinction: a wallet is an interface for interacting with an account and is not the account itself. Ethereum also distinguishes externally owned accounts controlled by key pairs from contract accounts controlled by code. These examples show why one visible “wallet” need not correspond to one local private key. Ethereum wallets Ethereum accounts
Online signing changes the exposure window
The main operational advantage of a hot wallet is that account data, applications and signing can be available in one connected flow. The same property creates an online path to authorization. Relevant failures include:
- malicious software reading or influencing wallet processes;
- a fake site or extension presenting a deceptive request;
- excessive token or contract approvals that remain valid after one session;
- a compromised account, device, browser profile or recovery channel; and
- incorrect network data or incomplete asset display from an RPC service or indexer.
Key extraction is not the only risk. A wallet can keep the private key undisclosed and still sign an unwanted transaction or message. Ethereum’s security guidance separates protection of recovery secrets from phishing and malicious transaction risks for this reason. Ethereum security
Passwords, locking and recovery do different jobs
An application password or biometric check normally controls local access or unlocks encrypted storage. It is not automatically the blockchain private key, recovery phrase or BIP-39 passphrase. Changing the app password may leave the underlying keys unchanged.
Recovery depends on the architecture:
- a locally controlled deterministic wallet may use a recovery phrase and compatible derivation settings;
- a custodial service may use an account-recovery process while retaining signing control;
- a smart account may use several keys, guardians or contract recovery rules; and
- an imported standalone key may require its own backup.
Calling a wallet hot does not answer which of these applies. It also does not mean that a provider can reset a missing non-custodial key.
Hot does not mean permanently connected
Applications can lock, close or disconnect, but the wallet is still generally classified by its normal authorization workflow. A software wallet does not become cold merely because a phone enters airplane mode for a few minutes if its keys are routinely used in an online environment. Conversely, an online watch-only interface is not a hot signer if it has no signing authority.
The useful question is not whether the screen currently shows a connection icon. It is whether the signing path is designed to be available to an internet-connected environment and what controls sit between an online request and authorization.
FAQ
Is a hot wallet the same as an exchange account?
No. An exchange account may rely on provider-operated hot-wallet infrastructure, but it also includes custody, internal accounting and account-access rules. “Hot wallet” describes connectivity, not the entire service relationship.
Can a hot wallet be non-custodial?
Yes. Software on an internet-connected phone or computer can leave key control with the user. That does not remove the online exposure path, and non-custodial status does not prove that every transaction request is trustworthy.
Learn more
For a broader comparison of wallet categories, see Types of Crypto Wallets: The Complete Beginner’s Guide. It is supplementary reading rather than a primary technical source for this definition.
Related concepts
Compare cold wallets, non-custodial wallets, private keys and blockchain addresses, or return to the Crypto Glossary.
Sources
- NISTIR 8301: Blockchain Networks — Token Design and Management Overview — hot and cold wallet definitions, custody models and separable wallet functions.
- Ethereum: wallets — wallets as account interfaces, wallet formats and custody distinctions.
- Ethereum: accounts — key-controlled and contract-controlled account models.
- Bitcoin Developer Guide: wallets — network, transaction construction, signing and key-storage functions.
- Ethereum: security — phishing, malicious transactions, device compromise and recovery-secret risks.
© 2025 OKX. Niniejszy artykuł może być powielany lub rozpowszechniany w całości, a także można wykorzystywać jego fragmenty liczące do 100 słów, pod warunkiem że takie wykorzystanie ma charakter niekomercyjny. Każde powielanie lub rozpowszechnianie całego artykułu musi również zawierać wyraźne stwierdzenie: „Ten artykuł jest © 2025 OKX i jest używany za zgodą”. Dozwolone fragmenty muszą odnosić się do nazwy artykułu i zawierać przypis, na przykład „Nazwa artykułu, [nazwisko autora, jeśli dotyczy], © 2025 OKX”. Niektóre treści mogą być generowane lub wspierane przez narzędzia sztucznej inteligencji (AI). Nie są dozwolone żadne prace pochodne ani inne sposoby wykorzystania tego artykułu.
