{"id":11,"date":"2026-08-30T11:38:44","date_gmt":"2026-08-30T11:38:44","guid":{"rendered":"https:\/\/getbitcoin.guide\/articles\/what-is-a-cold-wallet\/"},"modified":"2026-08-30T14:34:15","modified_gmt":"2026-08-30T14:34:15","slug":"what-is-a-cold-wallet","status":"publish","type":"post","link":"https:\/\/getbitcoin.guide\/articles\/what-is-a-cold-wallet\/","title":{"rendered":"What Is a Cold Wallet? Cold Storage Explained Properly"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">A cold wallet is one where the private keys never touch an internet connected device. That is the whole definition, and everything else follows from it.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The point is that an attacker on the other side of the world has nothing to attack. They can compromise your laptop, your phone and your email and still not reach keys that have never been on any of them. That is a genuinely strong property, and it is also narrower than people assume.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">The spectrum, from least to most isolated<\/h2>\n\n\n\n<figure class=\"wp-block-table is-style-stripes\"><table><thead><tr><th>Approach<\/th><th>How cold<\/th><th>Practical problem<\/th><\/tr><\/thead><tbody><tr><td>Software wallet on a spare phone<\/td><td>Not cold, just separate<\/td><td>Still connects, so still exposed<\/td><\/tr><tr><td>Paper wallet<\/td><td>Cold<\/td><td>Fragile, easy to generate badly, awkward to spend<\/td><\/tr><tr><td>Hardware wallet<\/td><td>Cold in practice<\/td><td>Connects to sign, though keys stay inside<\/td><\/tr><tr><td>Air gapped signer<\/td><td>Fully cold<\/td><td>Signs via QR or SD card, never connects<\/td><\/tr><tr><td>Multisignature across locations<\/td><td>Cold and distributed<\/td><td>Complexity, and complexity causes losses<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Most people land on a hardware wallet, which is the reasonable middle of that range. It is meaningfully more isolated than anything running on a phone, and meaningfully less awkward than a genuinely air gapped setup.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What cold storage actually protects against<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li>Malware on your computer or phone<\/li>\n\n\n<li>Phishing sites that would capture keys typed into them<\/li>\n\n\n<li>Remote compromise of any online account you hold<\/li>\n\n\n<li>An exchange failing, freezing withdrawals or being hacked<\/li>\n\n\n<li>Anyone who gains access to your devices without gaining access to the wallet itself<\/li>\n\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1200\" height=\"627\" src=\"https:\/\/getbitcoin.guide\/articles\/wp-content\/uploads\/2026\/08\/what-is-a-cold-wallet-2.jpg\" alt=\"Steel backup plate for recording a recovery seed offline\" class=\"wp-image-10\" srcset=\"https:\/\/getbitcoin.guide\/articles\/wp-content\/uploads\/2026\/08\/what-is-a-cold-wallet-2.jpg 1200w, https:\/\/getbitcoin.guide\/articles\/wp-content\/uploads\/2026\/08\/what-is-a-cold-wallet-2-300x157.jpg 300w, https:\/\/getbitcoin.guide\/articles\/wp-content\/uploads\/2026\/08\/what-is-a-cold-wallet-2-1024x535.jpg 1024w, https:\/\/getbitcoin.guide\/articles\/wp-content\/uploads\/2026\/08\/what-is-a-cold-wallet-2-768x401.jpg 768w\" sizes=\"auto, (max-width: 1200px) 100vw, 1200px\" \/><figcaption class=\"wp-block-image__caption\">Paper burns. Steel is the reason backup plates exist.<\/figcaption><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">What it does not protect against, which is the part that gets people<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Cold storage solves remote attack. It leaves everything else, and everything else is where most losses actually happen.<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n\n<li><strong>Losing the backup.<\/strong> The commonest way to lose self custodied funds is not theft. It is a recovery phrase that was never written down properly, or was stored somewhere that later flooded, burned, or was thrown out by someone tidying up.<\/li>\n\n\n<li><strong>Someone finding the backup.<\/strong> The other side of the same coin. A recovery phrase in a desk drawer is a bearer instrument sitting in a desk drawer.<\/li>\n\n\n<li><strong>Being tricked into signing.<\/strong> A hardware wallet will sign whatever you approve. If you approve a transaction that drains your wallet because the interface lied about what it was, the device did its job perfectly.<\/li>\n\n\n<li><strong>Physical coercion.<\/strong> Unpleasant to think about and a real category. Not advertising what you hold is the practical countermeasure, and it is more effective than any technical one.<\/li>\n\n\n<li><strong>A defect in the device itself.<\/strong> Which brings us to 2026.<\/li>\n\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\">The year the last assumption broke<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">In July 2026 bitcoin began disappearing from Coldcard hardware wallets. The devices had not been stolen, the owners had not been phished, and the seeds had never been online.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Coinkite disclosed that a build configuration error, introduced in a firmware release in March 2021, had caused seed generation to fall back on a weak software random number generator rather than the hardware entropy source. Affected Mk4, Mk5 and Q devices produced seeds with roughly 72 bits of entropy instead of the intended 128. Older Mk3 devices fared worse. Once the flaw was known, the remaining search space was small enough to brute force, and an attacker did, across more than five thousand addresses.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">There is a genuinely interesting detail in Coinkite&#8217;s advisory: users who had added at least 50 private dice rolls during seed creation were not exposed to this particular defect, because their own randomness supplemented the faulty source. The people who did the paranoid optional step were fine.<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">If you hold a Coldcard, do not act on this article. Read the <a href=\"https:\/\/blog.coinkite.com\/coldcard-mk3-seed-generation-warning\/\" rel=\"nofollow noopener\" target=\"_blank\">Coinkite security advisory<\/a> directly and follow their steps, which involve updating firmware, generating a new seed, verifying the backup, testing with a small transaction, and only then moving the rest.<\/p>\n<\/blockquote>\n\n\n\n<h2 class=\"wp-block-heading\">What to take from it<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Not that cold storage is pointless. The overwhelming majority of hardware wallets have never had a defect like this, and the alternative, keys on an internet connected device, has a considerably worse track record.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">What it should change is the framing. Cold storage is not a solved problem you buy your way out of. It is a set of trade offs where you are trusting a manufacturer&#8217;s engineering, your own backup discipline, and your future self&#8217;s ability to find and use a piece of paper. Two of those three are within your control.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">The passphrase, and why it cuts both ways<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Most hardware wallets support an optional extra word, often called a passphrase or a twenty fifth word, added on top of the recovery phrase. It produces an entirely separate wallet.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This is genuinely powerful. Someone who finds your written recovery phrase gets a wallet, but not the one holding your funds, unless they also have the passphrase which exists only in your head. It is the strongest available answer to the backup being discovered.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">It is also the most reliable way people lose everything. The passphrase is not recoverable, is not stored anywhere, and a typo makes a different valid wallet rather than an error message. There is no warning, just an empty balance and no way to tell whether you mistyped or misremembered.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li>Use it only if you genuinely understand that there is no recovery and no error message<\/li>\n\n\n<li>Test recovery with the passphrase before it matters, not after<\/li>\n\n\n<li>Consider whether anyone who needs to inherit this could ever reproduce it<\/li>\n\n\n<li>Never store it alongside the recovery phrase, or the whole point is lost<\/li>\n\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Inheritance, which almost nobody plans<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Cold storage done properly means holdings that nobody else can access. That is the goal right up until the moment it is a problem.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you were gone tomorrow, could anyone recover this? For most self custodied holders the honest answer is no, and the funds would simply sit there permanently. That is a solvable problem and solving it takes an afternoon.<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n\n<li>Write down, on paper, what exists and roughly how to access it. Not the recovery phrase itself, the instructions.<\/li>\n\n\n<li>Store those instructions separately from the backup, with someone who would act rather than someone who would panic.<\/li>\n\n\n<li>Make sure at least one person knows the arrangement exists, even if they do not know where either piece is.<\/li>\n\n\n<li>Review it when anything changes, because a plan describing a wallet you stopped using is worse than none.<\/li>\n\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\">Doing it sensibly<\/h2>\n\n\n\n<ol class=\"wp-block-list\">\n\n<li>Buy the device from the manufacturer directly rather than a marketplace, because a tampered device is a real risk.<\/li>\n\n\n<li>Update firmware before generating a seed, not after.<\/li>\n\n\n<li>Where the device supports adding your own dice entropy, do it. 2026 made the case for that better than any argument could.<\/li>\n\n\n<li>Write the recovery phrase on something durable. Steel plates exist because houses flood and burn.<\/li>\n\n\n<li>Store copies in more than one place, and never digitally in any form.<\/li>\n\n\n<li>Test recovery onto a different device before you move a meaningful amount. An untested backup is a guess.<\/li>\n\n\n<li>Make sure someone you trust can find it if you cannot.<\/li>\n\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">For how this fits the wider decision, <a href=\"https:\/\/getbitcoin.guide\/articles\/best-crypto-wallet\/\">choosing a wallet<\/a> covers choosing between wallet types and <a href=\"https:\/\/getbitcoin.guide\/articles\/self-custody-crypto\/\">what self custody commits you to<\/a> covers what self custody commits you to.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Frequently asked questions<\/h2>\n\n\n<div id=\"rank-math-faq\" class=\"rank-math-block\">\n<div class=\"rank-math-list \">\n<div id=\"faq-q-1\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question \">What makes a wallet cold rather than hot?<\/h3>\n<div class=\"rank-math-answer \">\n\n<p>Whether the private keys ever touch an internet connected device. A hot wallet keeps them on a phone or computer that goes online. A cold wallet keeps them on something that does not, so remote attacks have nothing to reach.<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-q-2\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question \">Is a hardware wallet the same as cold storage?<\/h3>\n<div class=\"rank-math-answer \">\n\n<p>Mostly. A hardware wallet keeps keys on a dedicated device and signs transactions internally, so the keys never leave it even when the device is plugged into a computer. Strictly air gapped setups go further and never physically connect at all.<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-q-3\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question \">Is a paper wallet still a reasonable option?<\/h3>\n<div class=\"rank-math-answer \">\n\n<p>Rarely. Paper wallets are genuinely cold but fragile, easy to generate insecurely, and awkward to spend from without exposing the key. Most people are better served by a hardware wallet with a durable offline backup.<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-q-4\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question \">Can a cold wallet be hacked?<\/h3>\n<div class=\"rank-math-answer \">\n\n<p>Not remotely, in the ordinary sense, because there is nothing to reach. It can still fail: the device can be lost or stolen, the backup can be destroyed or found, you can be tricked into signing something, and as 2026 showed, the device itself can have a defect.<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-q-5\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question \">How should I store the backup?<\/h3>\n<div class=\"rank-math-answer \">\n\n<p>Offline, physically, in more than one place, and never in any digital form. Steel backup plates exist because paper burns and floods. Never photograph it and never type it into anything, including a password manager.<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-q-6\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question \">Do I need to worry about the manufacturer?<\/h3>\n<div class=\"rank-math-answer \">\n\n<p>Yes, more than most guides admit. When you use a hardware wallet you are trusting that the device generates keys properly, and you cannot verify that yourself. That trust was tested in 2026 and it did not entirely hold.<\/p>\n\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<p class=\"wp-block-paragraph\"><em>This article is educational and is not financial advice. Nothing here is a recommendation to buy, sell or hold anything. You are responsible for your own security decisions.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Cold storage is a spectrum, not a category. Here is what it protects against and what it quietly does not.<\/p>\n","protected":false},"author":1,"featured_media":9,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","rank_math_title":"What Is a Cold Wallet? Cold Storage Explained Properly","rank_math_description":"Cold storage means keys that never touch an internet connected device. Here is the spectrum from paper to air gapped, what it protects against, and what it does not.","rank_math_focus_keyword":"cold wallet crypto","rank_math_canonical_url":"","rank_math_breadcrumb_title":"","rank_math_facebook_title":"","rank_math_facebook_description":"","rank_math_facebook_image":"","rank_math_twitter_title":"","rank_math_twitter_description":"","rank_math_twitter_image":"","rank_math_pillar_content":"","rank_math_robots":[],"rank_math_advanced_robots":[]},"categories":[3],"tags":[],"class_list":["post-11","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-self-custody"],"_links":{"self":[{"href":"https:\/\/getbitcoin.guide\/articles\/wp-json\/wp\/v2\/posts\/11","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/getbitcoin.guide\/articles\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/getbitcoin.guide\/articles\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/getbitcoin.guide\/articles\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/getbitcoin.guide\/articles\/wp-json\/wp\/v2\/comments?post=11"}],"version-history":[{"count":1,"href":"https:\/\/getbitcoin.guide\/articles\/wp-json\/wp\/v2\/posts\/11\/revisions"}],"predecessor-version":[{"id":12,"href":"https:\/\/getbitcoin.guide\/articles\/wp-json\/wp\/v2\/posts\/11\/revisions\/12"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/getbitcoin.guide\/articles\/wp-json\/wp\/v2\/media\/9"}],"wp:attachment":[{"href":"https:\/\/getbitcoin.guide\/articles\/wp-json\/wp\/v2\/media?parent=11"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/getbitcoin.guide\/articles\/wp-json\/wp\/v2\/categories?post=11"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/getbitcoin.guide\/articles\/wp-json\/wp\/v2\/tags?post=11"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}