Cold Storage

The core idea behind cold storage is the "air gap": by keeping keys on a device or medium that never touches the internet, an attacker has no remote path in. Even if a computer or phone is later infected with malware, the funds themselves stay untouched because signing happens offline.

Cold storage takes several practical forms. Hardware wallets are the most common active method, generating and storing a private key on a dedicated chip and only outputting a signed transaction, often via QR code or USB, without ever exposing the key. Passive methods include paper wallets and metal backups, which record a seed phrase or key as plain text or engraved characters with no electronics involved. A permanently offline computer used solely to sign transactions is sometimes called an air-gapped wallet, another cold storage variant.

Cold storage matters most for holders with meaningful balances or long time horizons, where the minor inconvenience of retrieving a device to sign each transaction is a fair tradeoff for reduced exposure. Large exchange breaches over the years have repeatedly shown that funds left on internet-connected, custodial systems are the primary target for attackers, reinforcing the practice of moving long-term holdings off exchanges entirely.

The tradeoff is recovery risk rather than hack risk: there is no password reset. Losing the device and its backup, or damaging a paper or steel seed record, can permanently destroy access. Most experienced users therefore keep only a small operational balance in a connected wallet and hold the bulk of their crypto in cold storage, with the seed phrase backed up separately in a secure, offline location.