A hot wallet keeps keys on an internet-connected device such as a phone, browser extension, or always-online server. It is built for speed: quick swaps, payments, and app connections. Convenience raises exposure to malware, phishing, and malicious signatures compared with colder setups.
Why it matters
Hot wallets are the default front door to on-chain activity. Most retail DeFi happens here. That makes them useful and dangerous in the same breath. Life-changing balances do not belong in a browser profile that also runs random tabs. Spending money can. The split is the point.
Operational risks dominate. Clipboard hijackers rewrite addresses. Fake extensions mimic popular brands. Airdrop sites ask for broad approvals. Even a honest hot wallet cannot save you if you sign a drain. Pair small hot balances with stronger habits: bookmark official URLs, revoke stale allowances, and move idle funds to colder self-custody.
Exchange apps that hold keys for you are hot in spirit even when the UI looks like a bank. You get convenience and venue risk together. Knowing whether you control the seed is the first filter before you call something “your wallet.”
Hot wallets also concentrate browser and phone risk. The same device that holds keys may store passwords, SMS codes, and email sessions attackers use for account takeovers elsewhere. Separate devices when size grows. Update software from official channels only. Treat random dapp connections like opening the front door to strangers with a clipboard.
Keep a written allowlist of apps you actually use. New domains, mirrored fonts, and urgent airdrop claims are common bait. If a hot wallet prompt feels rushed, it is usually trying to be. Close the tab and return later from a bookmark when the urge to click fades.
Example
You keep a modest USDT balance in a mobile hot wallet for weekend NFT mints and small swaps. Larger Bitcoin savings sit on a hardware device. When a new site asks the hot wallet for an unlimited token approval, you refuse and leave. The hot wallet stayed useful for small experiments without putting the savings stack on the same attack surface.