Cold Storage

Cold storage is any method of holding Bitcoin private keys on a device that is kept offline. The defining property is that the keys were generated without network access and are used to sign transactions offline, so a remote attacker has no path to them. There is no internet connection to exploit, no malware delivery vector to the signing environment, and no way to compromise the keys without physical access to the device that holds them.

Cold versus convenient

The strength of cold storage is also its cost: spending requires deliberate steps. You typically build a transaction on an online machine, move it to the offline signer, sign there, and bring the signed transaction back to broadcast. That friction is a feature for long-term savings you rarely touch, and a nuisance for coins you spend weekly. Many Bitcoiners split holdings, keeping a small spending balance hot and the bulk cold.

Forms cold storage takes

Cold storage can be a dedicated hardware signer, a permanently offline laptop, or a paper or metal backup of a seed phrase. The cryptographic security is identical regardless of form; what differs is durability and usability. Metal seed plates survive fire and flood that destroy paper. Whatever the medium, the rule is the same: if the private key has never touched an online device, it is cold.

What cold storage does and does not protect against

Being offline eliminates one entire class of attack — remote compromise — and leaves the others untouched. Cold storage does not protect against physical theft of the backup itself: anyone who finds an unprotected seed phrase owns the coins, no hacking required. It does not protect against coercion, against a compromised computer swapping the destination address on a transaction you sign (only on-device verification does that), or against you losing the backup. It is best understood as a division of labor: the air gap handles the internet's threats, while backup design, a passphrase, and physical security handle the meatspace ones. A passphrase in particular means a discovered seed plate alone is not enough to steal the funds — at the price of one more secret you must never lose.

Backup engineering

The backup, not the device, is the actual long-term store: hardware fails and is replaceable, the seed is not. Sound practice treats backups like an engineering problem — redundancy against loss (more than one copy), separation against local disaster (copies in different physical locations), and minimal exposure against theft (each location secured, no copy labeled for what it is). Avoid clever schemes like splitting a seed phrase into halves stored separately; improvised splitting often reduces security while increasing loss risk. Test the recovery path once with a small amount before trusting it with a large one, and revisit the setup whenever life changes — a backup only your past self could find is a slow-motion loss. Document the recovery procedure in plain language for whoever inherits the task; cold storage that dies with its owner has protected the coins from everyone, including the people it was saved for.

The operational workflow

In practice, cold storage pairs with a watch-only wallet: an online computer that knows your addresses (so it can show balances and draft transactions) but holds no keys. Unsigned transactions travel to the cold signer via QR code or SD card as a PSBT, come back signed, and broadcast from the online side — keys never touching the network at any step. See air-gapped signing for that workflow in full.

Compare with the everyday convenience of a Hot Wallet, and see how a Hardware Wallet implements cold storage in practice.