Cold storage in one paragraph
A wallet manages private keys that authorize spending and derives public addresses for receiving funds. A private key creates signatures; it is not itself a signature. Public addresses can reveal balances and activity, so sharing them has privacy consequences. "Cold" refers to where that private key lives. In a cold wallet it lives on a dedicated offline device — usually a small USB-shaped hardware wallet with a Secure Element chip. When you want to send crypto, the unsigned transaction is passed to the device, you approve it on the device's own screen, and only the signed transaction (never the key) comes back out.
Hot wallet vs cold wallet
| Hot wallet | Cold wallet | |
|---|---|---|
| Where the key lives | Phone, browser, exchange server | Offline chip / air-gapped device |
| Examples | MetaMask, Phantom, Coinbase, Binance | Ledger, Trezor, BitBox02, Coldcard |
| Remote hack risk | High | Very low |
| Convenience | Instant | Extra confirmation step |
| Best for | Spending money, small balances | Long-term savings, large balances |
Types of cold wallets
- Hardware wallets. Purpose-built devices (Ledger, Trezor, BitBox02, Coldcard, Keystone) with a Secure Element or MCU that signs transactions offline. This is what most people mean by "cold wallet" in 2026.
- Air-gapped wallets. Devices or operating modes that transfer transaction data by QR codes or microSD rather than a live USB or Bluetooth data connection (Keystone 3 Pro, Coldcard Q, NGRAVE ZERO). A power or firmware-update port may still exist. Air-gapping reduces some attack paths but does not eliminate malicious transaction data or signing risk.
- Paper wallets. A printed private key or seed phrase. Truly offline, but easy to lose, damage or photograph accidentally. Considered legacy — hardware wallets replaced them for good reason.
- Metal seed backups. Not a wallet by themselves, but the standard way to back up a cold wallet’s exact backup format against fire and flood, including BIP-39 12/24-word and supported SLIP-39 20/33-word backups.
How a cold wallet actually signs a transaction
- You build the transaction in a companion app (Ledger Wallet (formerly Ledger Live), Trezor Suite, Sparrow, Rabby).
- The unsigned transaction is sent to the hardware wallet over USB, Bluetooth or QR.
- On models with a trusted display, review the destination, amount and available contract details there. Screenless wallets use the phone interface and have a different verification model.
- You confirm on the device. Its protected signing environment creates the signature; chip architecture varies by model.
- In normal signing, the device returns a signature or signed transaction rather than the private key.
Verify the destination, amount and contract action on the trusted device display. A hardware wallet cannot undo a malicious transaction you approve, and blind signing removes important checks. Funds deposited in DeFi contracts remain exposed to those contracts even when the original deposit was signed with a hardware wallet.
When you should use a cold wallet
A rough rule from the security community: if you'd be upset to lose it, cold-store it. More concretely, move funds to a cold wallet when your on-exchange or hot-wallet balance exceeds what you can afford to lose to a single phishing click, browser exploit or exchange insolvency. There is no universal dollar threshold: cost, your ability to maintain backups, and the consequences of loss matter more than a fixed balance.
Picking a cold wallet
Important factors include generation integrity and update history, recovery compatibility, a trusted display and signing transparency, physical protections, source-code scope, supply-chain controls and support for your assets. No certification or air gap alone proves safety.
See the full 2026 hardware wallet comparison
Ledger, Trezor, BitBox02, Coldcard, Keystone, OneKey, Tangem and NGRAVE — scored on Secure Element, open-source, air-gap, price and passphrase support.
Compare cold wallets →FAQ
Is a cold wallet the same as a hardware wallet?
A hardware wallet can provide cold storage, but an imported seed that was previously exposed online is not made safe by the device. Cold storage also includes properly isolated computers; paper private-key wallets have substantial backup risks.
Can a cold wallet be hacked?
Keeping keys offline reduces remote exposure, but does not guarantee safety. Risks include backup theft, supply-chain tampering (buy direct from the manufacturer), malicious firmware, blind-signing sketchy contracts, weak seed generation, and physical coercion (see our wrench attack archive).
What happens if my cold wallet is lost or destroyed?
You can usually recover with the correct backup, any passphrase and compatible wallet software. BIP-39 and SLIP-39 are different formats; derivation paths, supported assets and multisignature configuration can also matter. Test your recovery process before relying on it.
Do I need a cold wallet for small amounts?
Not really. A cold wallet makes sense once the amount at stake is larger than what a phishing click would cost you to replace. For smaller balances, weigh the device cost against the risk and your backup discipline.