Security · cold storage · 12 min read
Cold storage is a process, not a product.
Taking keys offline can remove entire classes of attack. It cannot protect you from a stolen backup, a bad transaction, fire, coercion or a recovery plan nobody can follow. Good cold storage is a calm operating routine built around those realities.
Why it matters in 2026
The target has moved closer to the person.
Chainalysis estimates that more than $3.4 billion was stolen from crypto services and users in 2025. Its latest stolen-funds analysis recorded roughly 158,000 personal-wallet compromise incidents affecting about 80,000 unique victims, with an estimated $713 million taken from individuals. Those are blockchain-analysis estimates, not official UK crime totals, but the direction is useful: personal operational security now matters alongside exchange security.
The threat is not only digital. Chainalysis also reported a rise in violent theft and home-invasion cases in 2026. That makes privacy part of wallet security: do not advertise the size or location of holdings, and do not leave a complete recovery route where one person can easily find it.
Keep the claim in proportion: cold storage helps most with remote theft and intermediary failure. It can make physical loss, inheritance and coercion harder if the process is badly designed.
First principles
Your coins do not go inside the device.
A blockchain records the assets. A wallet manages the private keys that authorise transactions. A hardware wallet is a separate signing device designed to keep key material away from an everyday computer or phone.
That distinction prevents a dangerous misunderstanding: owning a hardware wallet is not the same as operating cold storage. If its account regularly signs unknown smart contracts or connects to experimental apps, it becomes an active wallet with a good signing device—not a quiet long-term vault.
A cleaner structure uses separate accounts for separate jobs: a long-term vault, a smaller transfer or spending wallet, and—only if needed—a Web3 interaction wallet. One malicious approval then has a smaller blast radius.
Build a threat model
Ask what can fail before choosing where to store.
A useful setup is designed around plausible failures, not the most expensive device.
Account takeover
An attacker gets into an exchange, email account or software wallet and changes access or withdrawal details.
Malware and address replacement
A compromised computer changes a copied address or presents false transaction details.
Malicious signing
A convincing app asks you to approve a smart contract or transaction whose effect you do not understand.
Recovery-phrase theft
A photo, cloud note, fake support form or person with physical access obtains the secret that recreates the wallet.
Loss and environmental damage
Fire, water, a house move, poor handwriting or one misplaced backup makes legitimate recovery impossible.
Physical and family risk
Publicly advertising holdings, coercion, incapacity or an unclear inheritance plan turns security into a human problem.
The critical secret
Treat the recovery phrase as the wallet itself.
Anyone who obtains the correct words can usually recreate the wallet elsewhere. No device PIN is needed.
Never make it conveniently online.
Do not photograph, email, message, scan or cloud-sync it. Never type it into a support form, website or “verification” tool. Enter it only as part of a legitimate recovery process, following the manufacturer’s official instructions.
Protect the offline record from both theft and destruction. Storing the device and its only backup together creates one point of failure. Storing several obvious copies creates several theft opportunities. Your arrangement should reflect who has physical access, local fire or flood risk, and who may need to recover the assets if you cannot.
Do not manually cut a standard recovery phrase into pieces. Partial word lists can leak useful information and create a fragile recovery puzzle. Cryptographic sharing schemes and multisignature setups can remove a single point of failure, but they also add operational complexity. Use them only when you understand how every recovery path works.
Optional passphrases are advanced. A forgotten spelling, spacing or capital letter can open a different empty wallet with no reset route. If you use one, do not rely on memory alone and do not keep it beside the recovery phrase.
A practical setup
Eight steps before a meaningful transfer.
- 01
Decide what the wallet is for
Keep long-term savings separate from a smaller spending or Web3 wallet. A vault should not be the account you connect to unfamiliar apps.
- 02
Buy and initialise carefully
Use the manufacturer’s verified channel, inspect the packaging and let the device create new keys. Never accept a device supplied with a recovery phrase already written down.
- 03
Protect the recovery backup
Write down the words in the correct order and keep them offline, private and protected from theft and environmental damage. The backup is effectively the wallet.
- 04
Verify on the trusted display
Check the complete destination address and transaction details on the hardware device—not only on the computer or phone.
- 05
Send a small test
Move a low-value amount first, confirm it arrived and practise a return transaction before transferring a meaningful balance.
- 06
Prove recovery before relying on it
Use the maker’s official recovery-check process or practise with an empty or low-value wallet. A backup you have never tested is only an assumption.
- 07
Maintain without reacting
Install updates through official channels, ignore direct-message support and stop whenever a request creates urgency.
- 08
Document inheritance
Leave clear, private instructions that help the right person locate the process without placing the full secret in one obvious document.
When not to self-custody
More control is only safer when you can operate it.
If you are likely to lose the backup, skip recovery testing or leave confusing instructions, reputable custody may be operationally safer for you. That does not make an exchange risk-free; it means you are choosing which failure model you can manage.
Compare the provider’s legal entity, account security, withdrawal controls and recovery process. Protect the email account that can reset access, use a unique password or passkey, turn on strong two-step verification and keep software updated. The NCSC recommends those controls for online accounts generally.
Decision test
Can you answer yes to all five?
- • I understand exactly what the recovery backup controls.
- • I can verify an address on a trusted display.
- • I have tested a small transfer and a recovery route.
- • My backup can survive likely physical risks without being easy to steal.
- • The right person can follow an inheritance process without exposing the secret today.
Cold storage FAQ
The questions worth resolving first.
What is cold storage for cryptocurrency?+
Cold storage is a way of keeping the private keys used to authorise crypto transactions away from routine internet exposure. The crypto remains recorded on its blockchain; the offline element is the key-management and signing process.
Is a hardware wallet the same as a cold wallet?+
Not automatically. A hardware wallet is a signing device. It behaves as cold storage when its long-term account is kept separate from everyday apps and risky smart-contract interactions. Repeatedly connecting the same account to unknown services weakens that separation.
What happens if I lose the hardware wallet?+
The device can usually be replaced and the wallet restored with its valid recovery backup. If both the device access and the only correct backup are lost, there may be no provider capable of restoring the assets.
Should I put a crypto recovery phrase in a password manager?+
A recovery phrase for cold storage should not be photographed, emailed, cloud-synced or placed in an ordinary online password manager. Keep it offline and follow the wallet manufacturer’s official backup instructions. Your normal account passwords and passkeys can still benefit from a reputable password manager.
Is keeping crypto on an exchange safer than self-custody?+
It depends on which failure you are more able to manage. Exchange custody adds platform, account and withdrawal risk but can offer a familiar recovery process. Self-custody removes that intermediary but makes you responsible for backups, transactions and succession. Self-custody is not automatically safer if the process is poorly operated.
How much crypto should I own before using cold storage?+
There is no universal pound threshold. Consider the harm a complete loss would cause, how often you need to transact, the cost and complexity of the setup, and whether you can test recovery reliably. The decision should be based on impact and capability, not a promotional number.
Research desk
Primary guidance and current threat research.
Vendor material is used for device mechanics, not product endorsement. Crime figures are attributed to the research organisation that estimated them.
- NCSC · Top tips for staying secure online ↗
Passwords, two-step verification, updates and backups.
- FCA · Crypto investment scams ↗
Fake platforms, impersonation, recovery fraud and reporting routes.
- Chainalysis · 2026 stolen-funds report ↗
Estimated service and personal-wallet theft trends during 2025.
- Chainalysis · Physical crypto attacks in 2026 ↗
Research on coercion, home invasion and physical privacy.
- Trezor · Keeping a wallet backup safe ↗
Threat modelling and offline backup handling.
- Ledger · Hardware-wallet practices ↗
Device verification, test transfers and signing precautions.
Next useful guide
Choose the custody model you can actually manage.
Compare exchange custody, software wallets and hardware wallets before changing where you keep anything.