A cold wallet keeps signing keys offline, or as offline as practical, so everyday internet malware cannot reach them directly. Hardware devices are the common retail form. Paper or metal backups of a seed phrase are part of the same cold story. The point is separation from always-online browsers and phones.
Why it matters
Cold storage lowers remote hack surface for long-term holdings. It does not erase physical theft, supply-chain tricks, lost devices, or ruined backups. A cold wallet whose seed sits in an email draft is not cold. Traders use cold setups for savings they do not need to touch each week, then keep a smaller hot float for activity.
Operational discipline still decides outcomes. Verify receive addresses on the device screen, not only in a companion app. Buy devices from trusted channels. Test a small receive and send before moving size. If you ever enter the seed into a computer “just to check,” you may have warmed the whole stack.
Cold custody also slows reaction time. That friction is often a feature during panic sells and phishing waves. It is a bug if you parked funds you needed for margin. Match the tool to the job: cold for store-of-value stacks, hot for active trading rails, venue accounts only for the float you accept as counterparty risk.
Cold setups still need a recovery plan that another trusted person can follow if you are unavailable. That does not mean sharing the seed casually. It means documenting where sealed backups live and how to identify the real device. Inheritance and travel are when cold plans fail quietly.
Example
You buy a hardware wallet, generate keys on the device, write the seed on paper stored offline, and receive Bitcoin after checking the address on the screen. Weeks later a phishing email offers a firmware “update” that asks for the seed in a browser form. You ignore it. The coins stay cold because the recovery words never left offline storage.