Cold Storage
In plain English
Keeping your private keys on a device that never touches the internet, so an online attacker has nothing to reach.
What is cold storage?
Cold storage means holding crypto with private keys kept entirely offline. The opposite is a hot wallet — a browser extension or phone app that is connected to the internet and therefore exposed to whatever can reach that device.
Why it works
Most crypto theft is remote: malware that reads files, a malicious website that tricks you into signing a transaction, or a compromised phone. All of these need the key to be reachable from an online device. If the key has never existed on an internet-connected machine, none of those attacks apply.
Common forms
A hardware wallet is the usual choice. It is a small dedicated device that stores keys in a secure chip and signs transactions internally — the key never leaves it. You connect it to sign, confirm the details on the device's own screen, and the signed transaction goes out. Even a fully infected computer cannot extract the key.
A paper or metal backup of a seed phrase is also cold storage, though it is a backup rather than a way to transact.
The trade-offs
Cold storage is slower to use, which is the point: it suits long-term holdings, not daily trading. A common approach is to split funds — a small amount in a hot wallet for everyday use, the bulk in cold storage.
The risk shifts rather than disappearing. You now have to protect a physical object and its backup from loss, fire and theft, and you must verify what you sign on the device screen. A hardware wallet cannot save you if you approve a malicious transaction yourself, so always read what the device is asking you to confirm.