Cold wallet

A cold wallet is a wallet whose private keys are generated and stored somewhere that never exposes them to the internet. The most common form is a hardware wallet, a small dedicated device that holds the keys inside a secure chip. Other forms include air-gapped computers and paper or metal backups of a seed phrase. Your tokens never actually leave the blockchain; the wallet only holds the keys that authorize moving them.

When you send tokens, your phone or computer builds the transaction and passes it to the device. The device shows the details on its own screen, you confirm with a physical button, and it signs inside the chip. Only the signed transaction goes back out, so malware on your computer never gets to read the key. Even a compromised laptop can't approve something you didn't confirm on the device.

This matters because most losses come from stolen keys, phishing sites, and malicious approvals. A hot wallet, like a browser extension, keeps keys on a connected device. That is convenient for trading small tokens but more exposed. Many people keep long-term holdings in cold storage and a small balance in a hot wallet for active use. Cold storage won't save you if you sign a bad transaction, though. A malicious token approval or a drainer contract can still empty the wallet if you confirm it.

Buy hardware directly from the manufacturer, never from a reseller, and never use a device that arrives already set up or with a seed phrase written on a card. Write your seed phrase on paper or metal, never photograph it or type it into a computer, and keep a second copy in a different place. Read the transaction details on the device screen instead of trusting the app. Check that the device and its companion app support the chain you use, since support for Solana, BNB Chain, Base, and Ethereum tokens varies. Send a small test amount first, and remember that losing both the device and the backup means permanent loss.