What is cold storage? How offline Bitcoin custody works, why governments and companies rely on it, and the best practices that keep reserve keys safe.
Cold storage means keeping the private keys that control bitcoin on a device or medium that has never touched the internet — a hardware wallet, an air-gapped computer, or even engraved metal. Because the keys are physically isolated from online systems, remote attackers have nothing to steal. It is the opposite of a hot wallet, whose keys live on an internet-connected device for convenience at the cost of exposure.
A bitcoin wallet is really a key pair: a public address anyone can send to, and a private key that authorizes spending. Cold storage generates and stores that private key offline. To spend, an unsigned transaction is prepared on an online machine, transferred to the offline device (via QR code, SD card, or USB), signed there, and the signed transaction — which reveals nothing secret — is broadcast from the online side. The private key never touches a networked computer. Institutional setups layer on multisig (requiring, say, 3 of 5 geographically separated keys), tamper-evident hardware security modules, and strict operational procedures.
Every serious holder on this site is a cold-storage story. The US Strategic Bitcoin Reserve's roughly 328,372 BTC sit in law-enforcement cold custody described by officials as a "digital Fort Knox." El Salvador keeps its national reserve in a cold wallet it has publicly displayed. Corporate treasuries from Strategy down rely on qualified custodians running institutional cold-storage infrastructure — and when Texas made the first US state purchase, it bought an ETF precisely because its comptroller had not yet contracted cold-storage custody for raw coins. The asset's bearer nature means custody is not a back-office detail; it is the whole game.
Holders face a spectrum. Pure self-custody (your own hardware, your own keys) maximizes sovereignty and responsibility — lose the keys, lose the coins, forever. Qualified custodians professionalize the process for institutions that need auditability and insurance. Spot ETFs push custody entirely onto the fund's custodian, trading away direct ownership for brokerage convenience — the route chosen by companies like Figma. There is no universally right answer, but the industry maxim endures: not your keys, not your coins.
The classic failures are mundane: seed phrases photographed and synced to the cloud, single points of failure, heirs who cannot find or use the keys, and physical coercion (the "$5 wrench attack"). Mitigations are equally practical — metal seed backups stored separately, multisig to eliminate single points of failure, documented inheritance procedures, and never digitizing a seed phrase. For institutions, segregation of duties matters more than any single device: no one person should be able to move treasury coins alone.
Cold storage is how bitcoin becomes a reserve asset rather than a hacking target. Whether the holder is a hardware-wallet hobbyist or the US Treasury, the principle is identical: keys offline, procedures redundant, and verification — via the public blockchain — available to anyone.
Deepen this topic with Private Key — the thing cold storage actually protects — and HODL, the strategy that makes long-term custody matter. For institutional context, see how treasury companies on our public index handle custody, and how sovereigns approach it in What Is a Strategic Bitcoin Reserve?