Hot wallets are connected to the internet — convenient but vulnerable. Cold wallets are offline — inconvenient but bulletproof. The right setup uses both: small amounts hot for spending, the bulk cold for long-term storage.