Why you want two wallets
This is the recommendation that matters, and it is more important than which brand you pick.
A hot wallet — MetaMask, Rainbow or Phantom — is what you browse with. It
connects to marketplaces, mints things, tries new sites. It holds only what you can afford
to lose. If it is compromised, and one day it might be, you lose that and nothing else.
A cold wallet — a hardware device — holds anything valuable. It connects to
nothing. You move assets into it and rarely out. Because it never signs anything on a
website, the entire category of
signature phishing attacks cannot reach it.
Moving assets between them costs a small amount of gas. That is the entire price of the
arrangement, and it is a fraction of what a single mistake costs.
What actually protects you
Choosing a wallet is the easy part and the smaller part. Five habits do most of the work,
regardless of which one you install:
- The recovery phrase goes on paper, offline. Never photographed, never in cloud storage, never typed into any website for any reason.
- Read every signature request. If the permission requested is wider than the action you are taking, stop.
- Keep the line between wallets clean. The moment you connect the cold wallet to a site "just once", the arrangement is gone.
- Audit approvals periodically. Old permissions do not expire and remain a live route to your assets.
- Buy hardware direct from the manufacturer. Never resold, never from a marketplace listing.
The custody guide covers each of these
properly. It is the most useful thing on this site for anyone holding real value.
A note on hardware wallets and NFTs specifically
Hardware wallets were designed for cryptocurrency transfers, and NFT interactions are more
complex — contract calls with parameters that are genuinely hard to render on a small
screen. In practice you often see a hash rather than a readable description of what you are
approving.
This is a real limitation and worth knowing about rather than being surprised by. It does
not undermine the case for hardware: the key still never leaves the device, and physical
confirmation is still required. But "the device shows you what you are signing" is less
complete for NFT operations than for a simple transfer. Read the transaction in your
software wallet's preview as well, not only on the device.