A hot wallet (browser extension, mobile app) is connected to the internet — convenient for frequent use but exposed to malware and phishing. A cold wallet (hardware device, paper) keeps keys offline, dramatically reducing attack surface — best for long-term, large holdings. Common practice: a small amount hot for spending, the bulk cold for savings.