What is a cold wallet and when to use one
A cold wallet stores private keys offline, so they cannot be reached by online attacks.
A cold wallet is a way to store crypto where the private keys never touch an internet-connected device. The most common form today is a hardware wallet: a small device that keeps the key inside and signs transactions internally, showing the details on its own screen. Other forms include fully offline computers and, historically, paper wallets.
The point of cold storage is to separate long-term savings from daily operations. Malware on a laptop or a breach of a server cannot steal a key that is not there. To spend from a cold wallet, someone must physically connect the device and confirm the transaction, which is slower but much harder to abuse.
For a business, cold storage holds the bulk of accumulated revenue, while a hot wallet covers payouts and refunds. Funds move from hot to cold on a schedule or when a threshold is reached, and back when the hot wallet runs low. Larger teams use multisig or multiple hardware devices so that no single person can move the reserve alone.
Mistakes with cold wallets are usually about backups and procedures, not technology: a seed phrase stored as a photo in the cloud, a single backup in one location, no one other than the founder knowing how to access funds, or buying a hardware wallet from an unofficial reseller. A cold wallet is only as safe as the way its seed phrase is kept.
Moonvex lets merchants withdraw their balance to their own wallet, including a cold wallet, with every payout confirmed by 2FA.
Good practice for cold storage
- buy hardware wallets only from the manufacturer or official resellers
- write the seed phrase on paper or metal, never in a photo or cloud file
- keep backups in more than one secure location
- verify the receiving address on the device screen
- document the recovery procedure for your team