Cold storage

Cold describes a key's whole life, not just where it sleeps. A key typed into a laptop once was never cold, whatever happens to it afterwards, while a device that plugs in over USB stays cold as long as the secret never leaves it. The threat this removes is remote theft. The threat it introduces is losing your own backup, and that one has claimed far more coins.

How it works

Cold storage is a workflow, and the signing step is where it becomes real. An online machine builds an unsigned transaction, usually in the partially signed bitcoin transaction format defined by BIP-174. That file crosses to the offline signer by USB, microSD card or an animated QR code. The signer checks the details on its own display, adds signatures, and sends back a signed transaction that the online machine broadcasts. Nothing secret makes the return trip, and the online machine could be fully compromised without changing the outcome.

There is a spectrum rather than a switch. A hardware wallet plugged into a laptop is cold because the key stays inside the chip. An air-gapped signer that has never had a cable attached is colder, since it removes the USB stack from the attack surface. A multisig quorum spread across several devices and several locations is colder still, because no single compromise is enough. Each step up costs convenience, and the right rung depends on the amount, not on how serious you want to appear.

The backup is the part that is actually valuable. Keys are recomputed from a recovery phrase on demand, so the physical record of those words is the asset: 12 or 24 words, ideally stamped into steel, optionally protected by a BIP-39 passphrase that acts as an extra factor stored somewhere else, or split with SLIP-0039 Shamir shares so that a single found copy reveals nothing.

Verification is not optional. Chainalysis estimated in 2020 that around 3.7 million bitcoin were probably lost for good, most of it to keys and backups that no longer exist. Cold storage joins that statistic quietly whenever a backup is written wrong and never tested.

Why this matters when you buy bitcoin

Cold storage earns its inconvenience at a specific point: when the amount you hold is larger than the amount you are willing to lose to a phone infection or an exchange failure. Below that line a phone wallet is fine. Above it, every month you delay is a month of unnecessary exposure, and the setup takes an evening.

Withdraw straight into it. Buying on an exchange and leaving the coins there "until I set up a wallet properly" is the single most common way people end up as creditors in someone else's bankruptcy. Set up the cold wallet first, get its receiving address, and let the exchange withdrawal land directly on it, so the coins spend no time in an intermediate hot wallet.

Realistic threats for a private buyer are dull. Not a state actor, but an infostealer on a laptop, a fake support agent, a family member who finds a phrase in a desk drawer, and a house fire. Cold storage handles the first two outright, and only good backup discipline handles the last two.

Plan for the people who will need this after you. A backup nobody else can find or use is a loss with a delay on it, so write down where the metal lives and what it is for, keep that note separate from the words themselves, and tell one person you trust that both exist.

A cold setup that survives a house fire

Paper ignites somewhere between 218 and 246 degrees Celsius, and a house fire routinely runs several hundred degrees hotter than that, which is why seed backups end up in metal. Independent stress tests by Jameson Lopp, who burned, crushed and dissolved dozens of commercial products, found that stamped or punched stainless steel plates survived where thin plates with slotted tiles or acid-etched coatings did not.

A setup that holds up looks roughly like this. Generate the seed on a signing device you bought new from the manufacturer. Stamp the words into steel rather than writing them, since ink burns and pencil smudges. Keep the metal in a different building from the device, so a single fire or a single burglary cannot take both. If you use a passphrase, memorize it and leave a sealed copy with a lawyer or in a second location, never in the same box as the words.

Then rehearse. Wipe the device, restore from the metal alone, and confirm the first receiving address matches what you had before. Do it once a year, and after any change to the setup. A backup that has been restored is a backup, and everything else is an assumption you are holding on behalf of your future self.

Cold storage vs paper wallet

Cold storage is a practice; a paper wallet is one obsolete implementation of it. A paper wallet is a single key printed as text and a QR code, usually generated in a browser around 2013, and its problems are structural rather than aesthetic. The computer that generated it saw the key. The printer buffered it. Spending required importing the whole key into software, and early tools frequently sent the change somewhere the owner did not expect, which destroyed balances outright. A modern signing device fixes all of that by keeping the secret inside the hardware and never printing it at all.