Cold Wallet

This is in contrast to a hot wallet, which resides on an internet-connected device, often through a web or mobile app such as MetaMask. The distinction between the two has major security implications; cold storage has long been seen as the safest place to store long-term crypto holdings, since hacker normally cannot compromise a private key that has never touched the internet.

Instead, cold storage wallets typically reside on specialized devices called hardware wallets, which generate private keys internally and keep them isolated from connected devices. This allows users to sign transactions using the device without the need to expose their private keys to any network.

This comes at the cost of convenience. Hot wallets are generally faster for active daily use, as they do not require carrying a separate device with its own signing process. For this reason, crypto users will often use a mix of hot and cold wallets, with daily trading funds in the former and long-term savings in the latter. A rough analogy is keeping spending money in your pocket and savings in a bank account.

It is worth noting that, although generally more secure than hot wallets, cold wallets can still be compromised under certain circumstances. In July 2026, hackers exploited a firmware bug in hardware wallets manufactured by Coldcard to steal user funds. Later that same year, Ledger discovered that devices sold through a third-party reseller were fitted with internet-connected modifications that stole user seed phrases at generation.

Some users instead opt for paper wallets. These offer another form of cold storage, generated on an offline computer with the details recorded only on a piece of paper. The address generated can be used to receive BTC as the user accumulates. When they eventually want to sell or move their holdings, they simply import the private key into a software wallet.