Cold Wallet
Last Updated: October 30, 2026
Quick Answer: A cold wallet is a cryptocurrency wallet that keeps the private keys offline, usually on a dedicated hardware device, so they are never exposed to the internet. Because the keys stay offline, a cold wallet is much harder to attack remotely than an app or exchange account, which is why it is widely used for long term holdings. The trade off is that the owner alone is responsible for the device and its recovery phrase.
Key Takeaways
- A cold wallet stores private keys offline; the coins themselves always stay on the blockchain
- The US Securities and Exchange Commission describes a cold wallet as “typically a physical device that is not connected to the internet” (Investor Bulletin, December 12, 2025)
- Hardware wallets from makers such as Ledger and Trezor are the most common cold wallets; paper wallets are an older, now rarely recommended form
- The main risk shifts from hacking to loss: a lost device plus a lost recovery phrase can mean the funds are gone for good
- Cold storage reduces remote attack risk but does not remove it: approving a malicious transaction still moves funds
How a Cold Wallet Works
Every crypto wallet is a key manager. The coins live on the blockchain, and whoever controls the private key for an address can move them. A cold wallet generates and stores that key on a device that stays offline.
To send funds, the transaction is prepared on a connected computer or phone, passed to the cold device, signed there, and sent back for broadcast. The private key never leaves the device. Receiving needs no signature: anyone can send coins to your public address while the device sits in a drawer.
During setup, the device shows a recovery phrase, usually 12 or 24 words. That phrase can rebuild the wallet on a new device if the original is lost or broken, which also means anyone who finds it can take the funds. The SEC’s December 2025 bulletin advises: “Store your seed phrase in a secure place and do not share it with anyone.”
Cold Wallet vs Hot Wallet
| Feature | Cold wallet | Hot wallet |
|---|---|---|
| Internet connection | Keys kept offline | Keys on an internet connected device |
| Typical form | Hardware device, rarely paper | Mobile app, browser extension, desktop app |
| Main risk | Physical loss, damage, theft, phishing at signing | Malware, hacks, phishing |
| Typical use | Long term holdings, larger balances | Frequent trading, DeFi, small balances |
| Cost | Device purchase | Usually free |
The SEC sums up the trade off: hot wallets “expose your crypto assets to cyberthreats,” while cold wallet devices “can be lost, damaged, or stolen, which may result in a permanent loss of your crypto assets.”
Types of Cold Wallets
Hardware wallets. A hardware wallet is a small device with a secure chip and its own screen, so you can check the address and amount before approving. This is the most common form of cold storage today.
Paper wallets. A printed private key and address. They were popular in Bitcoin’s early years, but they are easy to damage, hard to spend from safely, and offer no screen to confirm transactions.
Air gapped devices and offline computers. Some devices sign transactions through QR codes or memory cards and never connect by cable or Bluetooth. Institutions run larger versions of the same idea, sometimes requiring several keys to approve a transfer (multisignature).
Cold Wallet Examples in 2026
These are the best known consumer hardware wallet makers, with lineups and figures as shown on their official websites on October 30, 2026:
- Ledger: sells the Ledger Nano Gen5, Flex, Stax and Atom, among others. Its homepage states “8+ million signers sold.” See ledger.com.
- Trezor: sells the Trezor Safe 3, Safe 5 and Safe 7. The company says it has protected crypto owners “since 2013” and is “securing crypto for 2+ million users worldwide.” See trezor.io.
These are company figures, not independently audited numbers. For hands on reviews, see our guide to crypto wallets.
Risks and Common Misconceptions
“My crypto is stored on the device.” It is not. The device holds only the keys. If it breaks, the recovery phrase restores access on a new one, and the coins never moved.
“A cold wallet cannot be hacked.” Remote theft of the key is much harder, but users can still be tricked into approving a harmful transaction or typing their recovery phrase into a fake website. Large organizations are targets too. On or about February 21, 2025, about $1.5 billion in virtual assets was stolen from the exchange Bybit, a theft the FBI attributed to North Korea in a February 26, 2025 public service announcement. In its own incident timeline, published March 3, 2025, Bybit said the funds came from “one of Bybit’s Ethereum cold wallets” and that attackers “exploited the UI of the Safe multisig cold wallet through a sophisticated phishing attack.” How a transfer is approved matters as much as where keys are stored.
“Buying a used device is fine.” A secondhand or tampered device could come with a recovery phrase someone else knows. Buy from the maker or an authorized seller and always set up a new phrase yourself.
Loss and inheritance. If both the device and the recovery phrase are lost, nobody, including the manufacturer, can recover the funds.
Related Terms
Frequently Asked Questions
What is a cold wallet in simple terms?
A cold wallet is a way of storing crypto where the secret keys that control your coins are kept on a device that never connects to the internet. Most people use a small hardware wallet for this. You connect it only to approve a payment, and the key itself stays inside the device, out of reach of online attackers.
Is a cold wallet safer than keeping crypto on an exchange?
It removes one major risk: if an exchange is hacked, freezes withdrawals or fails, coins held there can be lost or locked. With a cold wallet you control the keys directly. The trade off is personal responsibility. If you lose the device and the recovery phrase, or reveal the phrase to a scammer, no company can restore your funds.
What happens if I lose my cold wallet?
Your coins are not on the device, so losing it does not by itself mean losing funds. You can buy a new device and restore the wallet with the 12 or 24 word recovery phrase created during setup. If you lost the phrase too, the funds cannot be recovered. If someone else finds the phrase, they can take the funds.
Is a hardware wallet the same as a cold wallet?
Mostly, yes. A hardware wallet is the most common type of cold wallet, because it keeps private keys offline on a dedicated device with its own screen. Cold wallet is the broader term and also covers paper wallets and offline computers used for signing. Some hardware wallets connect by Bluetooth or cable, but they are designed so the keys stay inside the device.
Do I need a cold wallet?
That depends on how much you hold and how you use it. People who trade often or use DeFi apps usually keep some funds in a hot wallet for convenience. Larger or long term holdings are often moved to cold storage to reduce online risk. Anyone choosing self custody should first be comfortable keeping a recovery phrase safe.
How do I choose a cold wallet?
No single device suits everyone. Common checks include whether the maker publishes firmware and security updates, whether the device has its own screen to confirm addresses, which coins and backup standards it supports, and its price. Buying directly from the maker or an authorized seller matters as much as the model. Every cold wallet is non custodial: you, not a company, hold the keys.
Do you need KYC to use a cold wallet?
Setting up a self custody wallet does not normally involve an identity check, because no company holds your funds. FinCEN guidance from 2019 describes such unhosted wallets as software on a person’s own device that does not need a third party to transact. Buying crypto from a regulated exchange or payment provider still requires that provider’s identity checks, even if the coins then go to a cold wallet.
Data sources: US Securities and Exchange Commission, Investor Bulletin “Crypto Asset Custody Basics for Retail Investors” (December 12, 2025), FBI Internet Crime Complaint Center PSA on the Bybit theft (February 26, 2025), Bybit security incident timeline (March 3, 2025), FinCEN guidance FIN-2019-G001 (May 9, 2019), Ledger and Trezor official websites (October 30, 2026).