Cold wallets explained: the plain-English UK guide

Cold vs hot vs exchange — what the words mean

• Exchange account: a company holds the coins and owes them to you. Convenient, but you're exposed to hacks, withdrawal freezes and collapses (FTX made this vivid)
• Hot wallet: an app on your phone or computer holds your keys. You control the coins, but the keys live on an internet-connected device that malware can reach
• Cold wallet: your keys live in a dedicated offline device that signs transactions internally. Malware on your computer can watch, but it can't spend

Do you actually need one?

Honest answer: not everyone does. If you hold a small amount you actively trade, exchange custody or a reputable hot wallet with good device hygiene may be proportionate. The tipping point most security guidance converges on: when your holdings are worth several times the device's cost — entry-level devices from the reputable makers start around £50–80 — the one-off spend becomes cheap insurance. If you plan to hold for years rather than trade, that strengthens the case: long-term holdings gain nothing from sitting on an exchange.

There's also a records benefit that gets overlooked: self-custody forces you to be deliberate about transfers, and deliberate transfers with notes make your capital gains history far easier to reconstruct at tax time.

Choosing a device without a computer science degree

The established names — Ledger and Trezor chief among them — have survived a decade of adversarial attention, publish security updates, and support the mainstream coins. Differences between them are real but secondary (we compare them honestly in our Ledger vs Trezor guide). What actually matters for a first-time buyer: pick an established maker, check it supports your specific coins, and ignore obscure brands however good the discount looks — a cheap unknown device holding your savings is a false economy.

The two rules that matter more than the brand

Rule one: buy direct from the manufacturer's own website. Marketplace listings — Amazon, eBay, anywhere with third-party sellers — are where tampered devices and fake packaging with pre-filled recovery cards circulate. A genuine device generates a fresh recovery phrase on its own screen at setup; if a device arrives with a phrase already written down for you, it's compromised.

Rule two: the recovery phrase is the wallet, the gadget is just a keyboard for it. Write the phrase on paper or stamp it into steel, keep it offline, never photograph it, never type it into anything. Our seed phrase guide covers this in depth — losing the phrase or leaking it are the only two ways cold storage really fails.

The UK tax angle

Transferring crypto from an exchange to your own cold wallet is not a disposal — no gain, no loss, nothing to report. HMRC treats transfers between your own wallets as a non-event, so securing your coins costs nothing in tax. Keep a note of the transfer (date, asset, amount) so your cost history stays traceable across wallets; when you eventually sell from the cold wallet, the original purchase cost still applies.