Hot, warm, and cold Bitcoin custody represent different security-accessibility tradeoffs. Here's when to use each and how institutional warm custody setups work in practice.
Not all Bitcoin custody is created equal. The terms "hot," "warm," and "cold" describe different levels of connectivity and security — and choosing the right custody type for your situation is as important as choosing a custodian.
Bitcoin custody exists on a spectrum from most accessible to most secure:
Hot wallet: Connected to the internet at all times. Private keys are online. Exchanges and mobile wallets are hot. Highest convenience, lowest security. Appropriate for small amounts you're actively transacting.
Warm custody: Keys are generated and stored offline, but transaction signing can occur without requiring physical access to the signing device — typically through a multi-signature scheme where some keys are accessible on short notice. The "warm" label is common in institutional settings.
Cold storage: Private keys are completely air-gapped from the internet. Signing requires physical access to an offline device. Highest security, lowest convenience. Standard for long-term hodling.
For individual Bitcoin holders, "cold storage" typically means:
The Coldcard Mk4, for example, can operate entirely air-gapped: transactions are moved via microSD card and broadcast by a watch-only wallet on a networked computer. The signing device never touches the internet.
Cold storage is appropriate for any Bitcoin you don't need to access on short notice — your long-term savings.
In institutional Bitcoin custody, "warm" custody typically refers to arrangements where:
Example: A 2-of-3 multisig where:
A transaction can be executed by Keys 1 + 2 in hours. Key 3 is a backup and emergency access mechanism.
This structure is "warm" — not instantly accessible like a hot wallet, but not requiring days of logistics like true deep cold storage.
Some institutional and high-net-worth holders go beyond standard cold storage to "deep cold":
Services like Coinbase Prime and Fidelity Digital Assets operate deep cold storage for institutions. For individuals with very large holdings, this level of security may be warranted.
| Type | Connectivity | Access Time | Best For | Risk Profile |
|---|---|---|---|---|
| Hot wallet | Always online | Instant | Daily spending | High |
| Warm custody | Offline keys, accessible multisig | Hours | Active institutional holdings | Medium |
| Cold storage | Air-gapped | Minutes to hours | Individual long-term holding | Low |
| Deep cold | Air-gapped + physical barriers | Days to weeks | Institutional reserves | Very low |
For self-custody Bitcoiners who want warm custody properties, a practical setup is:
This 2-of-3 setup means you can sign transactions from home with Keys 1 + 2. Key 3 is a geographic backup. The setup functions as "warm" — you can access your Bitcoin same day — while providing meaningful protection against theft of any single location.
Under $10,000: Standard cold storage (single hardware wallet + steel seed backup)
$10,000-$100,000: Standard cold storage with multi-location seed backup and BIP39 passphrase
$100,000-$1,000,000: Multisig cold storage (2-of-3) with geographically distributed keys
Over $1,000,000: Multisig with institutional custodian holding one key, or fully institutional custody
Cold custody is fully air-gapped — signing requires physical access to an offline device. Warm custody typically refers to multisig arrangements where some keys are accessible without physical ceremony, enabling faster transaction execution. Both are distinct from hot wallets (always online).
For small amounts you're spending: hot wallet (mobile). For savings you might access occasionally: standard cold storage (hardware wallet). For very large holdings: warm or institutional cold custody with multisig.
A Hardware Security Module is a physical device that generates and stores cryptographic keys with physical tamper protection. If tampered with, it destroys the keys. Institutional custodians use HSMs for the highest-security key storage.
Unchained uses collaborative 2-of-3 multisig — you hold two keys (one hot, one cold), Unchained holds one. A transaction requires you signing with one of your keys plus Unchained's participation. This is warm custody: accessible faster than true deep cold, but not instantly like a hot wallet.
See our Bitcoin Custody Directory for provider comparisons. See also: Bitcoin Custody Succession Planning and Unchained Capital Review.
Get our free Beginners Guide to Buying Bitcoin plus weekly insights for long-term holders.
Holding Bitcoin in a trust requires specific custody arrangements and trust document provisions that standard estate planning ignores. This guide covers revocable and irrevocable trust structures, custody options, and Wyoming's Bitcoin-friendly laws.
Proof of reserves lets Bitcoin custodians cryptographically prove they hold the assets attributed to customers. This guide explains how Merkle tree PoR works, its limitations, which custodians provide it, and how to verify your own balance.
Multi-signature Bitcoin custody for DAOs, companies, and organizations — governance structures, key holder assignments, spending policies, and custody solutions for org treasuries.