Skip to main content

Cold Wallet

Last updated 17 October 2026Last verified 17 October 2026

What is a cold wallet?

A wallet whose keys are stored offline, typically on a hardware device or air-gapped machine. Slower to use, harder to compromise remotely. The appropriate storage mechanism for assets not needed for frequent transactions. See the full self-custody risk framework at self-custody risk guide.

TradFi equivalentDeep vault storage, holdings kept away from the operating account because they are not needed day to day. The difference is that no custodian can retrieve them if the device and its backup are both lost.

The definition above treats offline storage as the control. What it does not cover is that a cold wallet still has to sign, and signing tests its isolation. A transaction is built online, carried to the offline device by cable, QR code or memory card, signed, and carried back for broadcast. The private key never touches the network, but the unsigned transaction does, and the offline device signs whatever it is handed.

That makes the transaction display the real boundary. A hardware wallet that shows the full destination and amount on its own screen lets the holder verify what is authorized. One that shows only a hash asks the holder to trust the online machine, which reintroduces the exposure cold storage was meant to remove.

The vault analogy holds for the physical part: restricted access and a separate operating balance in a hot wallet for daily use. It breaks on backup. A vault's contents survive the loss of a key because the bank can drill the box. A cold wallet survives the loss of its device only if the seed phrase survives, so the backup becomes a second cold wallet with weaker physical protection.

The decision is therefore less about which device to buy than about where the backup lives, who can reach it, and how much value sits cold rather than hot.