Cold wallet: storage that never touches the internet

Why Offline Means Safer

A cold wallet stores your private keys on a device that never connects to the internet. The most common form is a hardware wallet—a small USB-like device that holds keys in a secure chip and signs transactions internally. The computer or phone you connect to it never sees the keys, even if it is fully compromised by malware.

Cold storage matters because the vast majority of crypto theft happens through online compromise: phishing sites, malicious browser extensions, infected operating systems, or compromised exchange accounts. Keys that never touch the internet cannot be stolen by any of these vectors. For balances meant to be held for months or years, cold storage is the default recommendation across the industry.

The tradeoff is convenience. Signing a transaction requires physically interacting with the device, confirming details on its tiny screen, and approving with a button press. This makes cold wallets unsuited for active trading or frequent DeFi use, where a hot wallet holds smaller spending balances. The standard pattern is a tiered setup: hot wallet for daily activity, cold wallet for long-term holdings, with most value sitting in the cold tier.