What is a cold wallet?

Think of a safe that can’t be opened remotely: to use what’s inside, you need an offline process. That’s the idea behind cold storage. The key difference is that the crypto isn’t stored inside the device. It stays recorded on the blockchain, while the wallet protects the private keys that allow it to be moved.

For example, you prepare a transaction on your computer and pass it to a device that keeps the keys isolated. There you check the details and approve the digital signature. The signed transaction then goes back to a connected app to be broadcast to the network. The private key never needs to go online.

A hardware wallet is a common way to implement this kind of protection. The two terms aren’t identical, though: a cold wallet describes how the keys are stored, not a specific product. A plain USB stick with a key file saved on it doesn’t automatically offer the same security.

Why it matters

Unlike a hot wallet, where the keys are available in an internet-connected environment, cold storage limits their direct exposure to malware. To receive crypto at your address, the cold wallet doesn’t need to be active or connected. You can also check your balance without exposing the keys.

In our view, the main trade-off is convenience: sending takes more steps than with an everyday mobile wallet. When you hold the keys yourself, you also take on responsibility for backups and recovery.

What to watch out for

Isolating the keys doesn’t prevent a wrong approval. If you sign a transfer to the wrong address or grant a malicious token approval, the device won’t cancel your choice. Check the details on the device’s trusted screen, where there is one, and not only on your computer.

The seed phrase (recovery phrase) needs the same level of protection. If you photograph it, save it to the cloud or type it into a website, you undermine cold storage. If both access to the keys and the valid recovery backup are lost, there is no central service that can restore access.