What is a cold wallet? Cold storage for crypto explained
A cold wallet is a crypto wallet that keeps your private keys offline, on a device or medium that is never connected to the internet. Because hackers can’t reach keys that aren’t online, cold storage is the standard way to hold crypto you don’t plan to trade for months or years. Your coins stay on the blockchain; the cold wallet only holds the keys that move them.
What is a cold wallet in crypto?
A cold wallet is any crypto wallet whose private keys are created and stored offline. “Cold” means disconnected; “hot” means connected to the internet. Every wallet works with a pair of public and private keys: the public key (and the address made from it) lets people send you crypto, while the private key proves you own it and lets you spend it.
Cold wallets store the private key away from your phone, laptop and browser, which is where malware, phishing and other online attacks happen. When you send crypto, the cold wallet signs the transaction internally and only passes the signed result to a connected app. The private key never leaves the device.
Most cold wallets are non custodial wallets: you hold the keys, not a company. That is the heart of self-custody, and also the catch. If you lose the keys and the backup, nobody can recover your crypto for you.
Hot and cold wallets: what’s the difference?
The difference between hot and cold wallets is where the private keys live. A hot wallet keeps them on an internet-connected device, such as a phone app or browser extension; a cold wallet keeps them offline. Hot wallets are built for convenient access and frequent transactions; cold wallets are built for long term storage and extra security.
| Hot wallet | Cold wallet | |
|---|---|---|
| Where the keys are | Phone, computer or exchange server | Offline device or paper |
| Connected to the internet | Yes, all the time | Briefly, or never |
| Main risk | Online threats: malware, phishing, hacks | Losing the device or the backup |
| Good for | Everyday use, frequent trading, small amounts | Significant funds you hold for years |
| Cost | Usually free software | A hardware device, a one-off purchase |
| Examples | Software wallet apps such as Trust Wallet or Coinbase Wallet | Hardware wallets such as a Ledger Nano or Trezor |
Your account on a crypto exchange is a third category: custodial wallets, where the exchange holds the keys for you. Large exchanges keep most customer crypto in their own cold storage and a smaller amount in hot wallets for withdrawals, but you don’t control those keys. So choosing a hot or cold wallet is really choosing who holds the keys, and how exposed they are.
Many people use both: an exchange account or hot wallet for the small amounts they trade, and a cold storage wallet for savings. Our guide to hot wallets vs cold storage compares the set-ups.
Types of cold wallets
There are three main types of cold wallets. They differ in convenience more than in principle: all of them keep your crypto keys completely offline.
Hardware wallets
Hardware wallets are the most common cold storage wallet. A hardware wallet is a small physical device, connected by USB or sometimes Bluetooth, that generates and holds your private keys. Many use a secure element chip, similar to the chip in a bank card, that resists physical tampering, and the device asks for a PIN before it does anything. Some brands publish open source code so outside experts can check how the device works. You manage your coins in a companion app on your phone or computer, but you confirm and sign transactions on the device’s own screen.
Air-gapped wallets
Air gapped wallets go a step further: they never connect by cable or Bluetooth at all. They exchange data with the companion app by scanning a QR code or using a memory card, which shrinks the attack surface even more. Air gapped security suits larger holdings, but the extra steps take getting used to.
Paper wallets and deep cold storage
Paper wallets are private keys printed on paper, often as a QR code. They are cheap but fragile, and spending from them is awkward, so most wallet developers now discourage them. Deep cold storage means keys meant to stay untouched for years, such as a hardware wallet and its backup kept in separate locked places.
How a cold wallet works in practice
Using a cold wallet means buying crypto on an exchange, then withdrawing it to an address your cold wallet controls. This is what that looks like for a reader in the EU.
- Set up the device. Buy a hardware wallet directly from the manufacturer or an authorised reseller, never second-hand. The device creates a new wallet and shows you a seed phrase, also called a secret recovery phrase, usually of 12 or 24 words.
- Write down the recovery phrase. Copy it by hand onto paper or a metal plate and store it somewhere private. Never photograph it or type it into a phone or computer: anyone with this master key can take your crypto using a new device.
- Buy on a licensed platform. Buy the crypto on an exchange authorised under MiCA, the EU’s crypto law. Say you buy €2,000 of bitcoin.
- Send a test amount. Copy the receiving address from the companion app, check it on the device’s screen, and withdraw a small amount first. Confirm it arrives.
- Withdraw the rest. Send the remaining bitcoin and pay the exchange’s network fee. Because the transfer is above €1,000, the travel rule applies: the exchange must check the address belongs to you, for example by asking you to sign a message with the device.
To sell later, you send the crypto back to the exchange and sign that transaction on the device.
Why a cold wallet matters to you
A cold wallet matters because it removes the two biggest risks of keeping crypto online: a failing exchange and a hacked device. On an exchange, you rely on the company staying solvent and honest. Crypto-assets are not covered by investor compensation schemes such as the Dutch one, so if a platform fails there is no €20,000 safety net like the one for shares held at a broker.
MiCA has raised the bar. Since 1 July 2026, only authorised crypto-asset service providers may serve EU residents, and providers that hold crypto for clients must keep it separate from their own. That makes a licensed exchange a sensible place to buy and to keep small amounts. Self-custody in a cold wallet goes further: your crypto no longer depends on any company.
Two practical points for EU readers:
- Taxes don’t change when you move coins. Sending crypto from an exchange to your own cold wallet is not a sale. You still declare it: in the Netherlands crypto counts towards your box 3 wealth on 1 January wherever you store it, and in Germany gains on crypto held for more than a year are tax-free, so keep your purchase dates and exchange statements.
- Withdrawals come with checks. Under the travel rule, exchanges ask about withdrawals to self-hosted wallets, and above €1,000 they must verify that you control the address.
Cold wallet risks and pitfalls
A cold wallet protects you from cyber threats, but it moves the responsibility to you. The most common way people lose crypto in cold storage is not hacking but losing access: a lost recovery phrase, a broken device without a backup, or a phrase handed to a scammer.
- Lose the phrase, lose the crypto forever. If the device breaks, you can restore the wallet on a new device with the recovery phrase. Without the phrase, nobody can help you.
- Fake support and fake devices. No real manufacturer will ever ask for your words. A device that arrives with a recovery phrase already filled in is a scam.
- Physical access. Someone with physical access to both your device and your phrase can empty the wallet. Keep the backup away from the device, and don’t talk about your holdings.
- Wrong address or network. Crypto sent to the wrong address or chain usually can’t be recovered. Always check the address on the device screen.
Extra security measures help: a strong PIN on the device, an optional passphrase, and multi factor authentication or biometric authentication on the exchange and email accounts you use with it.
Should you use a cold wallet?
Use a cold wallet if you hold more crypto than you’d be comfortable losing in a hack, and you’re willing to look after your own backup. For small amounts you trade often, a licensed exchange or a hot wallet is simpler. A common approach: keep what you trade on the exchange, and move long-term holdings to cold storage once they are worth clearly more than the device.
If you’re still choosing where to buy, compare platforms on licence and security in our list of the most secure crypto exchanges, and see how we rate them in our methodology.
Questions people ask
Is a cold wallet completely safe?
No wallet is completely safe. A cold wallet protects your keys from online attacks, but you can still lose your crypto if you lose the recovery phrase, give it to a scammer or buy a tampered device.
Can you lose crypto in a cold wallet?
Yes, mostly by losing access. If the device breaks you can restore the wallet with your recovery phrase, but if the phrase is lost or stolen, nobody can recover your crypto for you.
Is Coinbase a hot or cold wallet?
A Coinbase exchange account is a custodial wallet: Coinbase holds the keys, and keeps much of its customers' crypto in its own cold storage. Coinbase Wallet, the separate self-custody app, is a hot wallet.
How do I put my crypto in cold storage?
Set up a hardware wallet, write down its recovery phrase on paper, then withdraw your crypto from the exchange to the receiving address shown on the device. Send a small test amount first.
What are the disadvantages of a cold wallet?
A cold wallet is slower to use, costs money for a hardware device, and makes you fully responsible for your backup. It is a poor fit if you trade often or move small amounts every day.