Cold Wallet

A cold wallet is a cryptocurrency wallet whose private keys are stored completely offline and never connected to the internet. That makes it immune to the remote hacking, malware and phishing attacks that can compromise hot wallets (internet-connected wallets). Cold wallets include hardware wallets (dedicated physical devices like Ledger and Trezor), paper wallets, and air-gapped computers, and are the recommended storage method for any significant long-term cryptocurrency holdings.

A cold wallet keeps private keys on a device that never touches the internet, such as a hardware wallet, an air-gapped computer or a carefully stored paper backup. Transactions are signed offline and then broadcast from a connected device. That makes remote theft much harder. The main risks shift to losing the device or backup, buying a tampered unit, or being tricked into signing something malicious.

How signing works offline

The key never leaves the cold device. A connected computer or phone builds the unsigned transaction and passes it to the device by USB, Bluetooth, QR code or memory card. The device shows the details on its own screen, you approve, it signs, and the signed transaction goes back to be broadcast. On Bitcoin, the PSBT format (partially signed Bitcoin transactions) standardizes that handoff.

You can watch balances without the key at all, using a watch-only wallet loaded with public keys.

Types of cold storage

Hardware wallets: dedicated signing devices with their own screen. The common choice; see hardware wallets compared.
Air-gapped setups: devices or computers that never connect at all and pass data only by QR code or SD card.
Paper and metal backups: a written seed phrase. Old-style paper wallets holding a single private key are easy to misuse; metal plates for seed backups survive fire and water better than paper.

Where the risk moves

Cold storage blocks most remote attacks. It does not remove risk; it relocates it.

Backup loss: lose the device and the seed and the funds are gone. Test recovery with a small amount before you need it.
Theft and coercion: a seed phrase is a bearer instrument. An optional passphrase adds a factor that someone who finds the seed does not have.
Supply-chain tampering: buy devices directly from the maker, check the packaging, and never use a device that arrives with a seed already set up.
Signing something malicious: a cold device signs whatever you approve. Token approvals and contract calls you do not understand can drain a wallet as thoroughly as a hack. Read the screen.

Cold, hot and in between

Most people keep a small hot wallet for daily use and cold storage for savings. Exchanges do the same at scale, keeping most customer funds offline; see cold-to-hot wallet ratios. Large holders often combine cold storage with multisig so that no single device or person controls the funds.

Cold storage turns a hacking problem into a filing problem. Most people are better at filing.