Cold Storage

Cold storage is the security gold standard for holding significant cryptocurrency because offline keys are fundamentally immune to remote hacking, phishing, and malware. 'Hot' wallets (MetaMask, exchange accounts, mobile wallets) are internet-connected and convenient but constantly exposed to attack surface. Cold storage eliminates this attack surface entirely — there is no path from an internet-connected hacker to your private keys. The trade-off is reduced accessibility and physical security requirements.

Hardware wallets (Ledger, Trezor, Coldcard) are the most practical cold storage for most users. They store private keys on a dedicated microcontroller that never exposes the key material to the connected computer — even when signing transactions. The computer sees only the transaction to be signed; the key never leaves the device. Ledger's controversial 2022 firmware 'Ledger Recover' announcement (which proposed optional cloud sharding of the seed phrase) highlighted that hardware wallet security depends on trusting the manufacturer's firmware. Open-source alternatives like Coldcard (for Bitcoin) and Foundation Passport address this concern.

Paper wallets — private keys printed or handwritten on paper — are simple and cheap but fragile: paper deteriorates, ink fades, fires/floods destroy them, and they're vulnerable to physical theft. Steel backup plates (Cryptosteel, Bilodal) solve the durability problem. Air-gapped computers — machines permanently offline, never connected to wifi or USB drives from connected machines — represent the highest security tier used by institutions. For most individuals, a reputable hardware wallet stored in a fireproof safe with seed phrase backup on metal plate in a separate location represents appropriate cold storage security.