Cold storage means keeping the private keys to your cryptocurrency on something that is never connected to the internet. It is the opposite of a hot wallet, where the keys sit on a phone, a computer or an exchange's servers. This guide explains what cold storage is, the forms it takes, which ones are actually practical, and how to set it up without creating a new way to lose your coins.
Why offline matters
Crypto theft at scale is remote. Attackers do not break into houses; they break into devices that are online, through malware, phishing and malicious apps. If the key that controls your coins is on a device that is never online, that whole class of attack has nothing to reach. What remains is physical risk, which is far easier to manage: a safe, a backup, and not telling people what you have.
Forms of cold storage
Hardware wallets
The practical answer for almost everyone. A Ledger, Trezor or BitBox keeps the key in a Secure Element chip and signs transactions internally. The device connects to a computer or phone to receive unsigned transactions and return signed ones, but the key itself never leaves. This is cold storage you can still use day to day.
Air gapped wallets
Devices such as the Keystone 3 Pro and SafePal S1 go a step further: no cable and no radio. Transactions move by QR code between the device's camera and your phone. It is slower but removes even the USB connection from the picture.
Paper wallets
A key printed on paper, generated on an offline computer. It was the original cold storage and it is now a bad idea: the generation step is easy to get wrong, spending from it safely is hard, and paper does not survive. If you have an old paper wallet, sweep it into a hardware wallet.
Steel seed backups
Not a wallet, but part of every cold storage setup. The 12 or 24 recovery words that restore a hardware wallet, stamped or assembled on a Billfodl, Cryptosteel Capsule or Cryptotag. The device is replaceable; the words are the asset, and steel is how the words outlive paper.
Multisig
A setup where two or three separate keys, often on separate hardware wallets in separate places, must sign together. It protects against a single lost or stolen device. It is the right answer for large holdings and the wrong answer for a first wallet, because the complexity is itself a risk.
What cold storage does not protect against
- Phishing. If you type your recovery words into a website because an email told you to, no device can help. The words are never typed anywhere.
- Blind signing. Approving a transaction on the device without reading it. The screen is there to be read.
- Losing the words. A hardware wallet with no backup is a single point of failure. Make the steel backup and test it.
- Telling people. Physical security starts with nobody knowing you have something worth taking.
Setting it up
- Buy a hardware wallet from the manufacturer or an authorized reseller, sealed. Our best hardware wallets guide compares the current models.
- Set it up offline from any website: PIN, 24 words on the card, confirm.
- Move the words to steel. Store the plate away from the device.
- Send a small test amount from your exchange, confirm it arrives, then send the rest.
- Keep a small hot wallet balance for spending and leave the savings cold.
How much belongs in cold storage?
Everything you are not actively using. A common pattern is a hardware wallet for savings, a software wallet or exchange balance for trading and DeFi, topped up from the cold wallet when needed. Moving coins out of cold storage takes a minute; moving them back costs a network fee. That small friction is a feature, because it makes you think before you spend.
Common questions
Is a hardware wallet really "cold" if I plug it in?
Yes. Cold refers to the key, not the device. The key never leaves the Secure Element, plugged in or not.
Do I need an air gapped wallet?
Only if the USB connection worries you specifically. For most people a Ledger or Trezor is cold enough, and simpler.
Can cold storage be hacked?
Published attacks on hardware wallets have needed physical possession and lab equipment. The realistic threats are the human ones above.
The Crypto Merchant has sold cold storage hardware since 2017 as an authorized reseller for every brand on this page. Devices and steel backups ship from Florida with free US shipping, and our team helps customers set up by phone or email.
