What is a Cold Wallet? Offline Crypto Storage Explained

Summary: A cold wallet keeps the private keys that control your crypto on something that has never been connected to the internet, so a remote attacker cannot reach them. In practice that usually means a hardware wallet: a small device that signs transactions internally and only ever hands back a signature. It removes the biggest category of loss, which is malware and phishing on an internet-connected machine. It does not remove every risk, and one incident in 2026 showed exactly where the remaining one sits.

• Cold means the keys were generated offline and never leave the device.
• It stops remote theft. It does not stop you losing the recovery phrase.
• A cold wallet is only as strong as the randomness used to create its seed.
• For anything you are not actively trading, cold storage is the default answer.

What Cold Actually Means

Every crypto wallet is really a pair of keys. The public key produces the addresses people send funds to. The private key authorises spending. Whoever holds the private key holds the money, which is the whole of crypto security in one sentence.

A hot wallet keeps that private key on a device with an internet connection: a phone app, a browser extension, an exchange account. Convenient, and reachable. A cold wallet keeps the private key on something that has never been online and never will be. Cold and hot are not product categories so much as a description of whether the key has ever been exposed to a network.

Our beginner's security guide covers where cold storage fits among the other habits that matter. This page is about the mechanics of the thing itself.

How Does a Cold Wallet Work?

The part that surprises people is that your crypto is not stored on the device. Coins only ever exist as entries on the blockchain. The device stores the key that lets you move them, which is why a broken hardware wallet does not destroy your funds and a stolen one does not automatically hand them over.

Signing a transaction goes like this. Your computer or phone builds the unsigned transaction and passes it to the device. The device displays the amount and destination on its own screen, you approve it with a physical button, and it computes the signature internally. Only the signature comes back out. The private key never crosses the cable.

That design is why malware on your laptop is not enough. An infected machine can propose a transaction, but it cannot sign one, and it cannot alter what the device's own screen shows you. Checking that screen rather than the one on your computer is the entire point of the physical confirmation step.

What is the Point of Having One?

Most crypto is not lost to broken cryptography. It is lost to a leaked recovery phrase, a convincing fake website, or a token approval signed without reading it. Cold storage takes the first two off the table for the balance you are not touching. Concretely, it helps when:

• Your computer or phone is compromised and you do not know it.
• You fall for a phishing site, because the site cannot extract a key that isn't there.
• An exchange freezes withdrawals or fails, because self-custody sidesteps that entirely.
• You want to hold for years without thinking about it.

Custody is the underlying question. Leaving coins on an exchange means somebody else holds the keys and you hold a claim, which is fine until it isn't. A cold wallet swaps that counterparty risk for personal responsibility, and whether that is an upgrade depends entirely on how carefully you handle a recovery phrase.

What Are the Disadvantages of a Cold Wallet?

This is where most guides go quiet, so here is the honest list.

You become the recovery department. Lose the recovery phrase and the funds are gone. There is no reset link. Our guide to what a seed phrase is covers how to store one properly, and it matters more than the choice of device.

It is slower. Spending from cold storage means fetching the device, connecting it and confirming. That friction is a feature for savings and a nuisance for anything you spend weekly.

Supply chain risk is real. A device tampered with before it reaches you can be built to leak keys. Buy from the manufacturer or an authorised seller, never second-hand, and set it up yourself so the seed is generated in front of you.

Physical loss and inheritance get complicated. Fire, flood and death are now part of your threat model. Anyone holding a meaningful balance needs a plan for how a family member would recover it.

And the one you cannot inspect: the device's own randomness. This is the subtle one, and 2026 produced a textbook case of it.

The Coldcard Incident, and Why It Applies to Every Manufacturer

A seed phrase is supposed to be drawn from a pool so large that guessing is arithmetically hopeless. Hardware wallets include a dedicated hardware random number generator precisely so that this does not depend on software. In late July 2026 it became clear that some Coldcard devices, made by Coinkite, had not been using theirs.

According to reporting on Block's engineering analysis, a build setting shipped in firmware 4.0.0 in March 2021 told affected devices to skip the hardware generator and fall back to software randomness seeded from the chip's serial number and clock registers. Neither is secret. Seed strength fell from an intended 128 bits to roughly 72, which brought guessing within reach. An attacker reconstructed seeds offline and swept about 594 BTC from roughly 500 single-signature wallets in 25 minutes, without touching a single device. Later waves pushed the running total past 1,300 BTC. Coinkite's early guidance was that seeds created on Mk3 units running firmware 4.0.1 or later were exposed while Mk4, Q and Mk5 were not, and that seeds made with a passphrase or 50-plus dice rolls were not considered at risk.

The reason to include this on a page explaining cold wallets is not that one manufacturer erred. It is that device-side entropy is the single link in the chain a user has no way to check. Backup discipline, passphrase hygiene and air-gapped signing all assume the seed was random to begin with. That assumption applies to every brand on the market, including the ones sold here, and the industry-wide question the incident raised was whether manufacturers submit their randomness to independent audit.

Two practical takeaways survive it. Keep firmware current, since the fix arrives that way. And for balances you would genuinely mourn, consider a multi-signature setup across devices from different manufacturers, because every wallet drained in that incident was single-signature.

Cold Storage Without a Hardware Wallet

Paper wallets and metal seed plates are also cold, in that nothing is connected to anything. They are a reasonable backup medium and a poor primary wallet, because spending from one usually means importing the key into software and undoing the point of it. Two rules hold regardless: never accept a paper wallet or preloaded card generated by somebody else, and never photograph or type a seed into anything.

Air-gapped signing sits between the two, where a device communicates by QR code or SD card rather than USB. Useful for larger holdings and needless complexity for small ones.

Which Devices People Actually Use

Ledger and Trezor are the two long-established names and between them cover most of the market. Tangem takes a different shape, a card rather than a device with a screen, which suits people who want cold storage without a charging cable. SafePal is the usual cheap entry point.

Coupons for Ledger, Trezor and SafePal are all available if you are buying for yourself or for somebody else. For a gift, a coupon is genuinely the safer choice, because the recipient then generates their own seed on a sealed unit rather than inheriting one you have seen. Which model suits which holder is a longer question, and worth its own comparison rather than a paragraph here.

Deciding Whether You Need One Yet

The rough threshold is simple: if losing the balance to a stolen phone or a phishing email would genuinely hurt, the answer is yes, and the device costs a fraction of what it protects. If you hold spending money you move weekly, a hot wallet is the sensible tool and cold storage is overhead. Most people end up with both, a small hot balance for spending and the rest offline. If you are working out where crypto fits alongside ordinary spending, the comparison of crypto debit cards and gift cards covers the other half of that decision, and you can browse hardware wallet coupons when you are ready to set one up.