Cold storage
Cold storage is a custody arrangement in which the private keys needed to spend bitcoin are kept offline. Transactions may be prepared on a networked device, but signing occurs in the offline environment and only the signed transaction is transferred back for broadcast.[1]
Cold storage reduces exposure to malware and remote compromise. It does not by itself protect against physical theft, fire, damaged media, weak randomness, disclosure of recovery material, signing a misleading transaction, or an unusable backup. The appropriate design therefore depends on both the online and physical threat model.
Methods
An offline computer can generate and hold keys while a separate online wallet watches addresses and prepares unsigned transactions. Partially Signed Bitcoin Transactions (PSBTs) define a standard format for moving the information required for signing between programs without placing the private keys on the online device.[2]
A hardware wallet keeps keys inside a dedicated signing device. Because the device is normally connected when used, it is better understood as isolated signing than as a device that is permanently offline. Its security still depends on authentic hardware and software, correct address and transaction verification, and a protected recovery backup.
A paper wallet records a key or seed on paper. It was used historically as a form of cold storage, but safe generation, printing, storage and later import are difficult. Printers, cameras, browser tools and reused addresses can expose the secret, while water, fire or transcription errors can destroy it. A paper copy is not automatically secure merely because it is offline.
Custody design and depth
The term describes how spending keys are connected, not who owns them. An individual may use cold storage directly, while a custodian may operate cold and online systems on behalf of clients. Some institutional designs keep a limited operational balance available for withdrawals and move a larger reserve into cold storage; the split trades faster access against a smaller online attack surface.[3]
Deep cold storage adds deliberate operational friction: keys or signing devices may be held in distant secured locations, and retrieval may require a delay or several people. A watch-only wallet can still receive and monitor funds while the authorization material remains remote. This can reduce impulsive or remote spending risk, but it also makes urgent recovery harder.
Control can be distributed with multisignature, so that no single key is sufficient to spend. Signers may be separated across people and locations, and PSBT can carry an incompletely signed transaction among them.[4] Published protocols such as Glacier illustrate deep-storage designs built around geographically separated multisignature keys.[5] This removes some single points of failure but introduces policy, coordination and recovery risks: loss of too many keys, unclear signer succession or lost wallet metadata can still make funds inaccessible.
Cold-storage media include paper or metal records, removable digital media, general-purpose offline computers and dedicated signing devices. Each has different failure modes. Legibility, corrosion, fire and water exposure matter for physical records; flash media and disks can fail or become unreadable; devices and file formats can become obsolete. Redundant copies in genuinely independent locations can address a single local disaster, while inheritance or incapacity planning must specify how an authorized successor can identify the wallet and recover it without exposing the secret prematurely.
Backup and recovery
An offline key without a recoverable backup can make funds permanently unspendable. Backups should be created from securely generated material, stored in physically protected locations, and tested with the documented recovery procedure. Copies improve resilience to a single loss but also increase the number of objects an attacker can steal.[1]
Recovery phrases, private keys and passphrases are secrets. They should not be entered into websites, support chats or general-purpose online devices. A human-chosen phrase used directly as a key is a brainwallet, not a safe substitute for wallet-generated entropy.
Operational considerations
Cold storage separates routine observation from authorization. A watch-only wallet can show balances and construct transactions without holding spending keys. Before signing, the offline device or signer should display and verify the destination, amount and fee; otherwise an infected online computer may substitute transaction details.
Long-term custody also requires compatibility information. The owner may need to preserve the wallet type, derivation path, script type, multisignature policy or other non-secret metadata needed to reconstruct addresses. Recovery should be rehearsed without exposing or spending the production keys.
See also
References
- ↑ 1.0 1.1 Bitcoin.org, “Securing your wallet”, checked 15 September 2026.
- ↑ BIP 174: Partially Signed Bitcoin Transaction Format, checked 15 September 2026.
- ↑ U.S. Securities and Exchange Commission, filing describing a digital-asset custodian's hot and cold storage controls, 2023.
- ↑ Bitcoin Core, “PSBT Howto”, checked 15 September 2026.
- ↑ Glacier Protocol repository, checked 15 September 2026.