Hardware Wallets and Cold Storage
How hardware wallets actually work, the differences between brands, and how to set up bulletproof cold storage.
11 min · intermediate · part of Security Mastery: Protecting Your Assets
What you'll learn
- Why Hardware Wallets Matter
- Major Hardware Wallet Brands (2024-2025)
- Hardware Wallet Setup Walkthrough
- Multisig and Advanced Setups
- For Deeper Reading
Key terms
- Hardware wallet
- A dedicated physical device whose only job is to hold private keys and sign transactions. Keeps keys isolated from the internet-connected computer.
- Secure element (SE)
- A tamper-resistant chip designed for cryptographic operations and key storage. EAL5+ or EAL6+ certified secure elements are standard in reputable hardware wallets.
- Air-gapped wallet
- A wallet that has no electrical connection (USB, Bluetooth, NFC) to internet-connected devices. Communication via QR codes or microSD only. Coldcard and Keystone are leading examples.
- Passphrase (BIP-39 25th word)
- An optional additional secret combined with the seed phrase to derive a different wallet. Provides plausible deniability and protection against seed phrase theft.
- Multisig (multi-signature)
- A wallet requiring multiple keys to authorize spending. Common configurations: 2-of-3, 3-of-5. Protects against single-key loss or compromise.
- Safe (Gnosis Safe)
- The dominant smart contract multisig wallet for Ethereum and EVM chains. Currently holds approximately $50-58 billion TVL.
- Ledger Recover
- A controversial $9.99/month optional service from Ledger (launched Oct 2023) that pre-encrypts and shards seed phrases across three custodians. Many users opted out due to philosophical concerns.
- Tamper-evident seal
- Holographic stickers or sealed packaging on hardware wallets designed to make supply-chain attacks visually obvious. Always verify before initial setup.
- Casa, Unchained Capital, Onramp
- Professional multisig custody services that hold one or more keys in a multisig setup, providing inheritance planning and recovery for substantial holdings.
- Cold storage
- Storing private keys offline (hardware wallet, paper/metal seed backup) for long-term holding. Contrast with "hot wallet" (online, used for daily activity).
- Duress PIN
- A secondary PIN that opens a "trick wallet" containing decoy funds, deployed under coercion. Coldcard offers this; useful for physical safety scenarios.
- Glacier Protocol
- A detailed step-by-step protocol for highly secure cold storage of substantial Bitcoin holdings. Free, open-source, well-vetted.
Read the full lesson in the CryptoBipto app.
Open lessonEducational only — not financial advice.