Cold Storage

In cold storage, the private keys that control your Bitcoin are generated and stored on a device that is never connected to the internet. A hardware wallet, for example, signs transactions internally and only exposes the signed result to a connected computer—never the private key itself. This means even if your computer is infected, the attacker cannot steal keys they can never reach.

Other forms include paper wallets (keys printed on paper) and fully air-gapped computers. Each method trades convenience for security: the more offline the keys are, the harder they are to steal remotely—but the more care you need to avoid loss or physical damage.

For larger Bitcoin holdings, cold storage is widely considered the safest practical option. Exchanges and hot wallets are convenient but remain targets for hackers because their keys are internet-connected. Cold storage puts you in full self-custody: no exchange failure, no phishing attack, and no malware can move your Bitcoin if the keys are offline. The trade-off is that you become solely responsible for your backups.

You keep spending money in a hot wallet on your phone for small purchases, but store most of your Bitcoin on a hardware wallet locked in a safe. Even if your phone is compromised, the bulk of your funds remains unreachable because those keys never go online. To spend from cold storage, you connect the hardware wallet, sign a transaction, and confirm on the device's screen.

Some believe cold storage means Bitcoin itself is 'frozen' and cannot be spent. In reality the Bitcoin is always on the blockchain; only the keys are kept offline. You can move funds from cold storage any time by signing a transaction with the offline keys—nothing is locked or suspended.