How to Store Crypto Safely: Hot Wallets, Cold Wallets and the 3 Ways People Lose Coins

Want the daily routine? Get the free 15-Minute Swing Trader’s Checklist. Get it free →

Last updated: 16 October 2026 · By Spencer Li, CFTe

---

To store crypto safely, first decide who holds the keys. If an exchange holds your coins, your risk is that company. If you hold your own keys, your risk is your device and your own habits. For most people, the sensible setup is a small amount in a hot wallet for spending and longer-term holdings in a cold wallet kept offline. The recovery phrase goes on paper, in a safe place, and never into a website or anyone else’s hands.

Every crypto loss I have read about falls into one of 3 buckets. I call them the 3 ways people lose coins: the company fails, the device fails, or you do. Good storage is just a plan for each one.

In this post, I’m going to cover the 2 big choices, custodial or self-custody and hot or cold, then the rules that protect your recovery phrase, and a simple setup that covers all 3 risks. I will not name any wallet or exchange. The point is to understand how storage works, so you can judge any product yourself.

What does a crypto wallet actually hold?

Your coins sit on the blockchain itself. What a wallet holds is the private key, the secret code that lets you move them.

Ethereum.org puts it simply: “Wallet providers don’t have custody of your funds. They just provide you a window to see your assets on Ethereum and tools to easily manage them.”

So the real question in crypto storage is who can use your key.

Should you keep crypto on an exchange?

Keeping coins on an exchange is called custodial storage. The exchange holds the keys, and you log in with a username and password.

That is convenient, and you can reset a forgotten password. But ethereum.org spells out the trade: “you’re trusting that exchange with custody over your funds. If the exchange has financial trouble, your funds would be at risk.” Bitcoin.org calls it “a form of counterparty risk.”

This is not a theory. When a large exchange collapsed in late 2022, MAS told Parliament that “those who invested in cryptocurrencies through FTX’s global platform would have lost money.” What happened at FTX covers that story in full.

Singapore has tightened the rules since. In July 2023, MAS announced that licensed crypto service providers must “safekeep customer assets under a statutory trust before the end of the year,” to “facilitate the recovery of customers’ assets in the event of a DPT service provider’s insolvency.” Even so, MAS warned that “consumers may still face significant delays in recovering their assets in the event of insolvency.” A trust helps you get coins back. It does not make an exchange safe.

What is the difference between a hot wallet and a cold wallet?

If you hold your own keys, the next choice is how connected they are.

Bitcoin.org draws the line clearly. A hot wallet “runs on a device connected to the internet, such as a phone or computer,” which suits everyday payments. A cold wallet “keeps the private keys offline.” Bitcoin.org says that “protects them from online attacks and makes it the safer choice for long-term storage.”

Here is how the 3 main options compare:

If you want a daily routine for trading what you understand, the free 15-Minute Swing Trader’s Checklist is at the end of this post.

How do you protect your recovery phrase?

The recovery phrase, also called a seed phrase, is a list of words that can rebuild your wallet on any device. Ethereum.org calls it “the only way you’ll be able to recover your wallet.” That cuts both ways. Anyone who gets the phrase gets the coins.

Bitcoin.org’s rules are short, and worth following to the letter:

• Write it down and store it offline. “Never store your recovery phrase as a photo or in a cloud service, and never share it with anyone.”
• Nobody will ever need it. “No legitimate person, business, or support team will ever ask for it.”
• Treat any request for it as an attack, even one that looks like it comes from a wallet’s support team.

Most stolen phrases are not hacked. They are handed over, to a fake support chat, a fake wallet app or a fake “verification” page.

[INFOGRAPHIC: the 3 ways people lose coins, the company fails, the device fails, you fail, each with the 1 habit that protects against it]

What are the 3 ways people lose coins?

1. The company fails

The exchange or app holding your coins goes bust, is hacked, or freezes withdrawals. The defence is to keep only what you are actively trading on an exchange, and move the rest to a wallet where you hold the key.

2. The device fails

A phone is lost, a laptop dies, a hardware wallet breaks. On its own, this should never cost you anything, because the recovery phrase can rebuild the wallet. Losses happen when the device fails and the phrase was never written down, or was lost too.

3. You fail

This is the biggest bucket. You send coins to the wrong address, approve a scam, or share your phrase. Bitcoin.org lists 3 principles that “prevent most scams”. Transactions “are irreversible, so verify everything before sending.” Nobody legitimate will ask for your phrase “or require payment in bitcoin to ‘unlock’ funds.” And “guaranteed-return investment offers are scams.”

Bitcoin.org also suggests checking “the entire receiving address before sending – not just the first and last characters” and sending “a small test transaction before a large transfer.”

What does a sensible setup look like?

Here is the setup bitcoin.org describes, and the one I would start from. “Many users combine both: a hot wallet with small amounts for spending, and cold storage for savings.” It adds that many people “keep only small amounts with custodians and store long-term savings in wallets where they hold the keys.”

In practice, that means:

1. Exchange: only the amount you are about to trade.
2. Hot wallet: a small amount you could lose without real pain.
3. Cold wallet: everything you plan to hold, with the recovery phrase on paper in a safe place.

There is one more step most people skip, and it is about family. If the phrase dies with you, so do the coins. Personally, I think anyone holding meaningful crypto should write down, somewhere their family can find it, where the coins are and how to reach the phrase, without writing the phrase itself in that note.

So how safe is your crypto right now?

Storage will not protect you from the price. MAS describes crypto trading as having an “extremely high risk and speculative nature,” and no wallet changes that. What good storage does is make sure that if you lose money, it is because of the market, and not because of a missing phrase or a failed company.

For the bigger picture, the blockchain and cryptocurrencies guide maps the topic, and how to invest in crypto without holding coins covers the routes that need no wallet at all.

So who holds your keys today? Where is your recovery phrase, right now? And if something happened to you tomorrow, could your family find your coins?

FAQ

What is the safest way to store crypto?

For long-term holdings, a cold wallet that keeps your private keys offline, with the recovery phrase written on paper and stored securely. Keep only what you are trading on an exchange.

Is it safe to keep crypto on an exchange?

It carries counterparty risk. If the exchange fails or is hacked, you can lose access to your coins. Singapore requires licensed providers to hold customer assets in trust, but MAS warns recovery can still take a long time.

What happens if I lose my hardware wallet?

You can rebuild the wallet on a new device with your recovery phrase. Without the phrase, the coins cannot be recovered.

Should I store my seed phrase in my phone or cloud?

No. Bitcoin.org says never to store it as a photo or in a cloud service. Write it down and keep it offline.

Go deeper

The free 15-Minute Swing Trader’s Checklist has the daily routine, the questions to ask before every trade, and the five rules that keep you in the game. Enter your email and we’ll send it over:

We use your email address to send you the checklist, then emails about trading and our courses. Unsubscribe any time. Privacy policy.

---

About the author. Spencer Li is the founder of Synapse Trading and a Certified Financial Technician (CFTe). His trade log is public: every trade since April 2024, dated, losses left in.

Educational content only, not personalised financial advice. Trading carries risk, including loss of capital. Past performance is not indicative of future results. Synapse Trading is not licensed or regulated by MAS.

Want the daily routine? Enter your email for the free 15-Minute Swing Trader's Checklist.

Free 5-page PDF, then occasional trading emails. Education only, not financial advice. Unsubscribe anytime. Kit stores your email in the US: see our privacy policy.

Want to learn the full method? The Trading Mastery Program teaches the 4 strategies I have traded since 2011. It suits beginners and experienced traders.

Rather follow the trades as they happen? Daily Trading Signals is our Telegram channel: my trade ideas with entry, stop and exit, and every trade is public.

Educational content only, not personalised financial advice. Trading carries risk, including loss of capital. Past performance is not indicative of future results. Synapse Trading is not licensed or regulated by MAS.