Cold Wallet: What It Is and How It Works

How a cold wallet works

A crypto wallet does not hold coins; it holds the private keys that authorize moving them. A cold wallet's defining rule is that those keys are created and used only on a device that is never connected to the internet.

Sending funds from a cold wallet takes a short round trip:

1. An online device (a phone or computer running wallet software) prepares an unsigned transaction: recipient, amount and fee.
2. The unsigned transaction is passed to the offline device, by USB cable, QR code or a memory card.
3. The offline device shows the details on its own screen, the user confirms, and the device signs the transaction with the private key.
4. Only the signed transaction, never the key, goes back to the online device, which broadcasts it to the network.

Receiving is simpler: anyone can send funds to a cold wallet's address at any time, because receiving does not need the private key. The address can be generated once and shared, while the keys stay offline.

Because malware on the computer never sees the key, a remote attacker cannot drain the wallet. What they can still try is to trick the owner into signing a malicious transaction, which is why checking the details on the device's own screen matters.

Types of cold wallets

Many people combine these: a hardware wallet for signing, with its seed phrase stamped on a metal backup stored separately.

Cold wallet vs hot wallet

A common approach is to keep a small balance in a hot wallet for everyday use and move the rest to cold storage. Custodial accounts on an exchange are neither: the exchange holds the keys, and its own cold storage protects the exchange rather than giving you control.

Why cold storage became standard

Early Bitcoin users kept keys in a file on everyday computers, where malware and failing disks lost many coins. Offline storage, first with paper wallets and then with dedicated hardware devices, spread as balances grew and as large exchange hacks showed how exposed online keys were.

Today exchanges and custodians keep most customer assets in cold storage and hold only what they need for withdrawals in hot wallets. Some regulators write this into law: South Korea's Virtual Asset User Protection Act, for example, requires exchanges to keep a large majority of users' virtual assets in cold wallets.

Milestones that shaped cold storage:

• 2014: SatoshiLabs' Trezor is generally cited as the first commercial Bitcoin hardware wallet. The same year the collapse of Mt. Gox, then a major Bitcoin exchange, became the best-known lesson about leaving coins on an exchange.
• 2016: Ledger released the Nano S, and small, affordable hardware wallets became the retail standard.
• January 2018: the theft of NEM tokens from the Japanese exchange Coincheck, which were held in a hot wallet, pushed exchanges and regulators toward cold storage requirements.
• 2020: attackers accessed Ledger's e-commerce and marketing database in June 2020, and customer data was dumped online in December 2020. Ledger said devices and crypto assets were not affected, but customers whose names, addresses and phone numbers leaked became long-running phishing targets.
• 2022: the FTX collapse in November 2022 led many users to withdraw from exchanges into self-custody.
• 2023: Ledger's announcement of Ledger Recover, an optional service that backs up encrypted shards of the seed phrase with third parties after an ID check, drew criticism for conflicting with the "keys never leave the device" expectation; the company delayed it and pledged to open-source more of its code.
• Since then: multisig setups (for example from Casa or Unchained), air-gapped Bitcoin signers (such as Coldcard or Foundation Passport) and institutional custodians with geographically distributed keys have become common for larger holdings.

The lesson from these events is that a cold wallet's security depends not only on the device, but on the buyer's personal data, the purchase channel and features the maker adds later. Most hardware wallets keep keys in a secure element, a tamper-resistant chip that stores keys and signs transactions inside the device.

How to set up and protect a cold wallet

• Buy hardware directly from the maker or an authorized seller, and check that the packaging has not been opened. Never use a device that arrives with a seed phrase already filled in.
• Generate the keys on the device and write down the seed phrase by hand. Never photograph it, type it or store it in the cloud.
• Store the backup away from the device, ideally on metal to survive fire and water, and consider a second copy in another secure place.
• Send a small test amount first, then confirm you can see it before moving larger sums.
• Verify every address and amount on the device's own screen before approving. Avoid blind signing of contract data you cannot read.
• Plan for inheritance. If only you know where the backup is, the funds are lost to your family if something happens to you.

Remember that a cold wallet protects the keys, not the value of the assets.