What is cold storage?

Holding the keys to crypto on a device or medium that has never touched an internet-connected machine.

The definition is about the key, not the coins. Coins never leave the blockchain. What cold storage moves offline is the ability to authorize a transaction, which is the thing an attacker actually needs.

Exchanges keep the bulk of customer assets this way and leave only a working float in hot wallets. For an individual it usually means a hardware wallet or an air gapped wallet, with the recovery phrase written down offline.

How it works

The security property is that the signing key never exists in the memory of an internet-connected computer. A transaction is built on an online machine, carried to the offline device, signed there, and carried back as a signed transaction to be broadcast. Malware on the online machine can see what you are doing and can alter what you are asked to sign, but it cannot extract a key that was never there.

That is why the device screen matters so much. A hardware wallet displays the destination and amount it is actually signing, independently of the computer, which is the check that defeats clipboard malware and a compromised web page alike.

Cold storage shifts the risk rather than eliminating it. The failure modes become loss, damage, and inheritance: a recovery phrase written on paper and stored in one place is destroyed by one fire. Backup strategy is the substantive work, not the purchase of the device.

Air-gapping is a spectrum. A hardware wallet connected by cable is not literally air-gapped but keeps the key inside a secure element. A device that only ever communicates by QR code or SD card is stricter, and a paper wallet is stricter still and considerably easier to get wrong.

Example

Illustrative. You buy 2,000 dollars of Bitcoin on an exchange and withdraw it to a hardware wallet. You write the recovery phrase on the supplied card and keep it in a drawer. That protects against the exchange failing and against remote theft, and leaves you exposed to a house fire and to anyone who opens the drawer. Splitting the phrase across two locations, or using a metal backup in a second building, addresses the failure that is now most likely, which is not theft.

Why it matters when you buy

Cold storage is what a purchase becomes if you intend to hold rather than trade. The decision affects how you buy, because withdrawing from an exchange costs a network fee that does not scale with amount, so many small withdrawals cost far more than one large one. The fee comparison shows withdrawal fees by venue, and move crypto off an exchange covers the mechanics.

Related terms

hardware wallet — the usual device; air gapped wallet — the stricter variant; hot wallet — the connected contrast; seed phrase — what actually needs protecting; shamir backup — splitting a backup across locations.

Questions

Is cold storage worth it for a small amount?

The device cost is fixed, so it matters more as the amount grows. Below the price of the device, the honest answer is that a well-secured account with strong two-factor authentication may be the more proportionate choice.

Can I hold every coin in cold storage?

Most hardware wallets support the major chains and many tokens, but coverage is not universal, particularly for newer chains. Check the device's supported asset list before withdrawing, since an unsupported asset sent to the device may be unreachable without technical recovery.

What happens if the device breaks?

Nothing, provided you have the recovery phrase. The device holds a key derived from that phrase, so a replacement device restored from the phrase controls the same funds.