The short answer
Use a hosted exchange wallet for trading, a mobile wallet for spending money, and a hardware wallet for savings. Trezor Safe 3 is the simplest open-source entry point; Ledger Nano S Plus covers more assets cheaply; Nano X suits phone-first users. In Miami the crucial extra step is the backup: a metal seed plate with at least one copy stored outside the flood zone, never anything digital.
9,000+
assets supported by Trezor Safe 5 via Suite and external wallets
0
FDIC or SIPC insurance on custodial crypto balances
12 / 24
words in a recovery phrase — the only thing that actually matters
1
test recovery you should perform before trusting any backup
The only question that matters: who holds the keys?
Strip away the vocabulary and there is one distinction. Either you control the private keys to your crypto, or a company does on your behalf. Everything else — hot, cold, hardware, software, mobile, desktop — is implementation detail sitting on top of that single fork.
If a company holds the keys, what you own is a claim against that company. That claim can be excellent — a well-capitalised, licensed, insured custodian is a perfectly reasonable place to keep a trading balance — but it is a claim, not the asset. And unlike a bank deposit, it carries no FDIC or SIPC protection. Private insurance varies: Coinbase and Gemini insure a portion of crypto holdings and carry FDIC cover on cash balances, while Kraken carries no crypto insurance and no FDIC cover on cash.
If you hold the keys, you own the asset outright, and nobody can freeze it, lend it out, or lose it in an insolvency. You also cannot call anyone when you make a mistake. That is the trade, honestly stated.
Six wallet types, and what each is genuinely for
Custody types What to use for what, and the realistic risk of each
| Type | Keys held by | Use it for | The real risk |
|---|---|---|---|
| Hardware walletCold storage | You | Long-term savings | Losing the recovery phrase, or being tricked into signing a malicious transaction. The device itself is rarely the weak point. |
| Mobile walletHot | You | Spending money, day-to-day | Phone malware, and losing the phone without a backup. Keep the balance to what you would carry in a physical wallet. |
| Desktop walletHot | You | Active management | The machine it runs on. A desktop that also browses the web and opens attachments is not a secure environment. |
| Browser extensionHot | You | dApps and on-chain activity | Malicious approvals. The wallet works exactly as designed while a contract you approved drains it. Review approvals periodically. |
| Exchange walletCustodial | The platform | Trading balances only | Insolvency, freezes and account lockouts. No FDIC or SIPC cover. Fine short-term, wrong for savings. |
| Multi-signatureAdvanced | Split | Large holdings, estates, businesses | Complexity. Requires several keys to authorise a spend, which removes single points of failure and adds real operational burden. |
A sensible arrangement uses three of these at once: an exchange account for buying, a mobile wallet for spending, and hardware for the rest. Very few people need multi-signature, but those who do usually know it.
Ledger versus Trezor, without the tribalism
These two companies dominate consumer hardware wallets and the online argument between their supporters is exhausting. The genuine differences are narrower and more boring than either camp suggests.
Trezor is the better choice for someone who wants simple, transparent cold storage. It is open source, the setup is straightforward, and the Safe 3 in particular is an inexpensive and easy first device. The Safe 5 adds a touchscreen that makes verifying transactions and entering a passphrase on the device noticeably less fiddly, and supports over 9,000 assets through Trezor Suite and external wallets. The trade-off is architectural: Trezor firmware runs on a general-purpose microcontroller, which is less resilient than a dedicated Secure Element against certain classes of physical attack.
Ledger is the better choice for breadth and mobility. Its signers use certified Secure Element chips with secure screens driven by that element, which is genuinely stronger hardware protection against physical and remote attack. The Nano S Plus supports a very wide asset list at a low price; the Nano X adds Bluetooth and a battery, which matters if your phone is your primary crypto device; the Stax is the premium option with the most approachable interface. Ledger is also generally better for NFTs, staking and dApp access.
Our rule of thumb: if your holding is bitcoin and a handful of majors, and you want the least complicated cold storage available, buy Trezor. If you hold many different assets, use a phone as your main device, or interact with on-chain applications, buy Ledger. The physical-attack distinction matters if you are a plausible target for someone with your device in hand — which, if you are storing serious money in a city with Miami's profile, is not a purely theoretical concern.
Buy a hardware wallet when…
- The balance is more than a few thousand dollars
- You intend to hold for years rather than trade
- You have somewhere genuinely secure for the backup
- You hold assets across several chains
- You would be materially hurt by an exchange failure
Do not bother yet if…
- Your balance is smaller than the price of the device
- You trade weekly and need same-hour access
- You have nowhere safe to store a recovery phrase yet
- You would store the seed phrase as a photo — fix that first
- You have not yet tested a recovery on anything
The South Florida backup problem
Here is the part that generic wallet guides skip, and it is the part that actually matters if you live in Miami-Dade. Your recovery phrase is a physical object, and you live in a place where physical objects are periodically destroyed by weather.
A recovery phrase written in biro on the card that came in the box, kept in a bedside drawer in a ground-floor apartment in a flood zone, is not a backup. It is a hostage. Storm surge, roof failure, a burst window during a named storm, or simply the humidity that ruins everything in this city over a long enough period will all defeat it. And unlike a lost photograph, a lost seed phrase means the coins are gone permanently, with no institution to appeal to.
A setup that actually works for most people
Not a maximalist configuration — a realistic one that we would recommend to a friend in Coral Gables with a five-figure holding and no interest in becoming a security hobbyist.
Keep an exchange account for buying and selling, with two-factor authentication via an authenticator app rather than SMS. SIM-swap attacks are common and SMS is the weakest widely offered second factor. Leave only what you are actively trading in it.
Keep a mobile wallet with a spending balance — the digital equivalent of the cash in your pocket. If you use it to pay around Miami, this is the wallet that does it. Back up its phrase properly even though the balance is small, because people habitually grow these balances without noticing.
Keep everything else on a hardware wallet, with the seed on metal, one copy in a bank safe deposit box and one at home in a fireproof container above the flood line. Test the recovery once. Write down the locations for your family, not the words.
That is it. Three wallets, one tested backup, one authenticator app. It takes an afternoon and it eliminates most of the ways people lose money that are actually within their control.
How people actually lose coins
Not exotic cryptographic attacks. These five, in roughly this order.
Typing the seed phrase into something. A fake wallet-support page, a browser pop-up, a "migration tool", a helpful person in a chat. Legitimate support never asks for a recovery phrase, and there is no situation in which typing it into a website is correct. This single rule prevents most self-custody losses.
Approving a malicious contract. With a browser-extension wallet you can grant a smart contract permission to move your tokens, and that permission persists. The wallet then behaves exactly as designed while your balance leaves. Review and revoke old approvals periodically, and treat any unexpected signature request as hostile.
Scanning a QR code someone else supplied. The dominant mechanic in Florida crypto fraud. Anyone who sends you an address or a code to scan is telling you where they want your money to go. The FBI logged 13,460 crypto kiosk complaints in 2025 with $389 million in losses, and Florida ranked second nationally. See the Miami scam playbooks.
Losing the only backup. House fire, storm, a move, a well-meaning relative clearing out a drawer. Two copies in two places, one of them out of the flood zone.
Sending to the wrong address or network. Blockchain transactions are irreversible and sending a token on the wrong network usually means it is unrecoverable without technical intervention. Always send a small test amount first, always check the network selector, and never trust a copied address without verifying the first and last few characters.
The bottom line
One good device, one tested backup, one boring routineWallet choice is genuinely less important than the two habits around it: never let the recovery phrase touch anything digital, and test the restore before you rely on it. Both Ledger and Trezor are competent; pick on asset breadth and mobile use, not on internet arguments.
What is distinctly local is the backup medium and location. If you live between the bay and the ocean, plan for water. Metal seed plate, geographic separation, one tested recovery — and then go back to ignoring it, which is what a good custody setup should let you do.