A cold wallet is a crypto wallet whose private keys are kept on something that is not connected to the internet, usually a dedicated hardware device. A wallet does not hold your coins, which stay on the blockchain. It holds the private keys that authorise moving them. Keeping those keys offline makes them much harder to steal remotely. The trade-off is convenience, and you take on responsibility for the device and its backup. The US SEC's investor bulletin "Crypto Asset Custody Basics for Retail Investors" (December 2025) puts it this way: because cold wallets are not connected to the internet, they are "generally more secure from cyberthreats than hot wallets". It also warns that the devices "can be lost, damaged, or stolen, which may result in a permanent loss of your crypto assets."
Keys, not coins
The same SEC bulletin explains what a wallet holds:
- Private key: works like a passcode that authorises transactions. If you lose it, you permanently lose access to the assets it controls.
- Public key / address: what you share so others can send you assets.
- Seed phrase: many wallets generate one so you can recover the wallet.
"Hot" and "cold" describe where the private key lives. A hot wallet runs on an internet-connected phone or computer. A cold wallet keeps the key offline. The bulletin notes that both hot and cold options exist whether you hold the keys yourself (self-custody) or use a third-party custodian.
How a hardware wallet signs a transaction
Hardware wallets are the most common form of cold storage today. Trezor's documentation describes the process:
- Software on your computer or phone prepares an unsigned transaction.
- The device "securely signs the transaction inside the device using your private key". In Trezor's words, "the private key itself never leaves the hardware wallet."
- You confirm the transaction physically on the device and check that the amount and address on its screen match what you intended.
- The signed transaction goes back to the connected computer, which broadcasts it to the network.
Step 3 matters most. Malware on your computer can change what the computer screen shows, so the device's own screen is the one to trust.
Some setups never connect the signing device to a computer. They pass transactions by QR code or memory card instead, which is known as air-gapped signing. Bitcoin's BIP 174 (Partially Signed Bitcoin Transactions, PSBT) was designed for this. It lets "offline signers such as air-gapped wallets and hardware wallets" sign, because "the signer can be offline as all necessary information will be provided in the transaction."
Access to the device is usually protected by a PIN. On Trezor devices the PIN can be up to 50 digits, the wait time grows after each wrong guess, and the device wipes itself after 16 failed attempts. These details are specific to that manufacturer.
The seed phrase is the real wallet
When you set up a hardware wallet, it shows a list of words. Trezor calls this the wallet backup: "a list of words that will allow you to restore access to your wallet if something happens to your Trezor device."
Most wallets follow the standard Bitcoin specification BIP 39:
- A phrase has 12, 15, 18, 21 or 24 words, which encode 128 to 256 bits of randomness plus a checksum.
- Words come from a fixed list of 2,048. Each word encodes 11 bits.
- An optional passphrase is mixed into the seed. Every passphrase produces a valid but different wallet, so a mistyped passphrase opens an empty wallet rather than showing an error.
- The seed is derived with PBKDF2, 2,048 iterations of HMAC-SHA512.
In practice, anyone who has your seed phrase (and passphrase, if you use one) controls your funds without needing the device. If you lose the device but still have the phrase, you can restore the wallet. Bitcoin.org notes that a single backup of the recovery phrase "is sufficient to restore all past and future addresses", and warns that "any backup that is stored online is highly vulnerable to theft." So don't photograph the phrase, type it into a website or keep it in cloud notes.
Would your cold wallet survive losing the device?
Answer four questions about your backup to see what still protects your funds if the device is lost, damaged or stolen, and where the gaps are.
Where is your seed phrase (recovery words) kept?
- Written on paper or metal, stored offline away from the device → next question
- As a photo, a cloud note or a file on a computer or phone → Your backup is exposed to remote theft
- I have no copy of it → Your funds depend on the device alone
Have you practised a recovery with a small amount using that backup?
- Yes → next question
- No → Your backup is still unproven
Do you use an optional BIP 39 passphrase on top of the seed words?
Is the passphrase stored separately from the seed words?
- Yes, in a different place → Two separate things must be found together
- No, it is kept with the words → The passphrase adds little while it sits with the words
If the device is lost, damaged or stolen, the loss may be permanent, and no company can reset a seed phrase. The article's checklist: write the phrase on paper or metal and store it offline, away from the device.
Bitcoin.org warns that any backup stored online is highly vulnerable to theft, and anyone with the phrase controls the funds without the device. The article advises against photographing it, typing it into a website or keeping it in cloud notes.
You can restore the wallet from the phrase if the device is gone, but only if the copy is correct. The article's checklist says to practise a recovery with a small amount before you rely on the backup.
A tested offline phrase restores the wallet, but it works like a bearer instrument: whoever finds it controls the funds. The extra layers the article describes are a passphrase stored separately from the words, or multi-signature with keys on separate devices in separate places.
A thief who finds only the seed words cannot open the funded wallet. Keep both copies safe: every passphrase opens a valid but different wallet, so a mistyped or lost passphrase leads to an empty wallet, not an error message.
The passphrase protects you only if it is stored separately from the seed words. Kept together, anyone who finds one finds both and can open the funded wallet.
This checks your backup habits only. It does not judge a device's security or PIN behaviour, which differ between makers, and it is not security or investment advice.
Paper wallets: obsolete
The original version of this article listed paper wallets as a type of cold wallet. A paper wallet is a single private key and address, usually generated by a website and printed out. The Bitcoin Wiki now calls it "an obsolete and unsafe method of storing bitcoin which was popular between 2011 and 2016" and says it "should not be used." The problems it lists:
- Address reuse: one paper wallet has one address, which encourages reuse.
- Lost change: people import the key, spend part of the balance and assume the rest is still on the paper. In fact the remainder went to a change address in the software wallet.
- Printer exposure: printers can store documents on internal drives, shared printers are often logged, and Wi-Fi printers can leak the key over the air.
The wiki recommends seed phrases instead, which give you offline backup without these problems.
Benefits and risks
What cold storage protects against
- Remote theft of keys by malware or hacked online services, because the key never sits on a networked machine. Bitcoin.org calls offline storage "the highest level of security for savings."
- Quiet approval of a tampered transaction, as long as you check the device screen before confirming.
What it does not protect against
- Losing the seed phrase. No company can reset it. The SEC bulletin says losing a private key means losing access permanently.
- Physical loss, damage or theft of the device, which is only recoverable if you have the backup.
- Someone finding your written phrase. It works like a bearer instrument.
- Inconvenience. The SEC bulletin notes cold wallets are less convenient for frequent transactions.
Extra layers
- Multi-signature: Bitcoin supports transactions that "require multiple independent approvals to be spent" (Bitcoin.org). For example, two of three keys might be required, with the keys kept on separate devices in separate places. One stolen or lost key is then not enough to move or lose the funds.
- Passphrase: a BIP 39 passphrase stored separately from the seed words means a thief who finds only the words cannot open the funded wallet.
- Split hot and cold: a common pattern is a small hot balance for spending and the long-term balance in cold storage.
Practical checklist
- Write the seed phrase on paper or metal and store it offline, away from the device.
- Never enter the seed phrase on a computer, phone or website. A real hardware wallet asks for it only on its own screen during recovery.
- Check the receiving address and amount on the device screen before you approve.
- Practise a recovery with a small amount before you rely on the backup.
Limitations: this is a general explainer, not security or investment advice. PIN and recovery behaviour differs between device makers.
