July 26, 2023

What is Cold Storage in Crypto?

dYdX
What is Cold Storage in Crypto?What is Cold Storage in Crypto?

Just as pickpockets prowl the streets to steal innocent people's money, hackers surf cyberspace to break into vulnerable crypto wallets. Unfortunately, these bad actors can successfully drain thousands or millions of dollars worth of cryptocurrency. 

For example, hackers stole $4.5 million from Solana wallets in August 2022, and the crypto app Trust Wallet reported a hack of $4 million in 2023. Because cryptocurrencies like Bitcoin (BTC) are on decentralized networks, there aren't any banks or companies for traders to call to recover their stolen digital funds. 

Thankfully, a few tools and security strategies dramatically reduce crypto cyberattack risk. For instance, crypto traders sometimes use cold storage devices to prevent their wallet's sensitive information from leaking onto the internet. 

But what’s crypto cold storage, how does it work, and why is it considered the gold standard in cryptocurrency security? Here’s all you need to know to make informed decisions. 

What is Cold Storage in Crypto? 

Cold storage in cryptocurrency refers to storing a wallet's essential passcode, called a private key, offline. Like an online account password, a wallet's private key is a long alphanumeric code. Anyone with a crypto wallet’s private key can control a trader's cryptocurrency, making it a critical part of crypto security. Cold storage cryptocurrency wallets maximize users' safety by keeping private keys off the internet. 

In cryptocurrency's early history, paper wallets were one of the most popular cold storage methods. As the name suggests, crypto traders who used paper wallets printed their private keys on paper, usually as a scannable QR code. However, since paper is fragile (and humans are mistake-prone), crypto wallet developers sought to create a more secure, reliable, and convenient way to interact with digital assets. In 2014, a team of Czech developers introduced the first cold storage hardware wallet, the Trezor One, which stores the private key inside a physical device, similar to a USB. Following Trezor's success, other manufacturers, such as Ledger and KeepKey, entered the industry, and more crypto traders gravitated toward hardware wallets as their primary cold storage solution. When traders want to transfer crypto from a hardware wallet, they link it to their PC with a cord or wireless Bluetooth connection and manually confirm each transaction with their device. Most hardware wallets also require users to create a secret PIN as a primary line of defense when hooking up their unit, further preventing thieves from getting their hands on a user's crypto. 

How are Hot Wallets Different from Cold Wallets? 

Hot wallets have many of the same features as cold wallets but don't keep a user's private key offline. Instead, these mobile or desktop software applications are always on the internet, so there's less of a barrier between a person's private key and the World Wide Web. Although hot wallet developers use encryption technologies and firewalls to prevent hackers from getting into their apps, these wallets risk exposure to more cybersecurity issues, such as malware and viruses. 

Why Do People Use Cold Storage Crypto Wallets? 

Security is the primary benefit of using a cold storage crypto device. Because cold wallets keep users' private keys off the internet, there's more of a barrier between online hackers and each holder's cryptocurrency. Unless a thief knows a person's private key or steals their physical device plus the private PIN, getting into a high-quality cold storage device is difficult. Since cold storage wallets have the highest reputation for security, long-term crypto purchasers (aka hodlers) often use these units to store digital assets they want to hold for years. Keeping cryptocurrency on a cold storage device gives people the peace of mind that their funds aren't as vulnerable to hacks or cybersecurity issues. 

Are There Downsides to Using Cold Storage? 

The main selling point for cold storage devices is their enhanced security, not their affordability or convenience. Granted, some hardware wallet models aren't relatively "expensive," and a few of these units make it easier to connect with a PC or mobile device with a wireless connection. However, compared with most hot wallets, cold storage devices can't compete on price because many software wallets like MetaMask and Trust Wallet are free. Also, being "cumbersome" is essential to a cold wallet's design.

Remember, many people use cold wallets to store their cryptocurrency for long periods, so these devices aren't tailored for daily trading activity or for use in decentralized applications (dApps). Traders, gamers, or non-fungible token (NFT) collectors more interested in using their cryptocurrency often prefer hot wallets due to a seamless internet connection.

What Does Deep Cold Storage Mean? 

Deep cold storage means a crypto trader deliberately makes it difficult to access their crypto account. For instance, instead of keeping a hardware wallet on their property, a trader might store their device and a copy of their private key in a vault at a bank. Since banks ask for personal identification before letting people access their assets, it creates extra inconvenience for would-be criminals. Another option is to write half of the private key on one sheet of paper and the other half on another to lock these documents in two safety deposit boxes. 

Some cold storage crypto wallets  also let people create an "optional passphrase" for their accounts. This helps traders remember the passcode, and the passphrase isn't literally stored on the hardware device with the private key. So, in this example, even if a criminal had a hardware wallet's private key, they can't transfer the cryptocurrency without the optional passphrase. And if a crypto trader memorized their optional passcode, there's no physical trace of this important word. This makes it impossible for a hacker to break into a crypto wallet unless they get the victim to admit it. 

How to Store Crypto in Cold Storage

Hardware crypto wallets aren't the only way to store crypto in cold storage, but they’re popular and accessible for crypto traders.

We recommend reviewing the highest-rated crypto hardware wallets and double-checking each device’s features and supported cryptocurrencies. When you find the right crypto cold storage wallet for your needs, order directly from the manufacturer's website to receive an authentic product. E-commerce shops like Amazon and eBay offer second-hand hardware devices, but there have been cases where scammers set up the private keys on these wallets beforehand to siphon a victim's crypto funds.

After receiving a hardware wallet in the mail, open the device and link it to a PC. Every cold wallet has a different setup process, but most connect to a proprietary software wallet application, such as Ledger's "Ledger Live" or Trezor's "Trezor Suite." After connecting a hardware wallet to a software application, you’ll need to set up a PIN and write down a list of 12–24 words called the "seed phrase," which is a readable representation of the private key. Ensure you keep these words in a secure and secret place. After completing these preliminary steps, click on a cryptocurrency in the wallet’s software app and select "Receive" to move crypto to cold storage.

For example, if you want to send BTC from a Coinbase account to a Trezor One, here’s what you need to do:

  • Be sure to connect the Trezor One to a PC
  • Click "Bitcoin" in the Trezor Suite app
  • Select "Receive BTC"
  • Copy the public Bitcoin blockchain address, or leave the QR code open
  • Log in to the Coinbase app
  • Select "Bitcoin"
  • Choose "Withdraw BTC"
  • Enter the amount of BTC to send, and paste the Trezor address or scan the QR code
  • Finally, confirm the transaction 

Learn How to Keep Crypto Safe on dYdX Academy 

Although software wallets are often cheaper and more convenient to use—especially when making quick trades or interacting with dApps—cold storage is the best option for hodlers. However, no matter which wallet you use, it's imperative to keep your private keys secret.

Head to dYdX's blog and Academy to learn tips on avoiding security risks and common scams in Web3. We have a wealth of educational materials and resources on subjects such as custodial versus non-custodial wallets, blockchain nodes, and more.

Not only this, but dYdX also lets you trade perpetual contracts with up to 20x more buying power.

Start trading on dYdX today!

Legitimacy and Disclaimer

Crypto-assets can be highly volatile and trading crypto-assets involves risk of loss, particularly when using leverage. Investment into crypto-assets may not be regulated and may not be adequate for retail investors. Do your own research and due diligence before engaging in any activity involving crypto-assets.

dYdX is a decentralised, disintermediated and permissionless protocol, and is not available in the U.S. or to U.S. persons as well as in other restricted jurisdictions. The dYdX Foundation does not operate or participate in the operation of any component of the dYdX Chain’s infrastructure.

The dYdX Foundation’s purpose is to support the current implementation and any future implementations of the dYdX protocol and to foster community-driven growth in the dYdX ecosystem.

The dYdX Chain software is open-source software to be used or implemented by any party in accordance with the applicable license. At no time should the dYdX Chain and/or its software or related components be deemed to be a product or service provided or made available in any way by the dYdX Foundation. Interactions with the dYdX Chain software or any implementation thereof are permissionless and disintermediated, subject to the terms of the applicable licenses and code. Users who interact with the dYdX Chain software (or any implementations thereof) will not be interacting with the dYdX Foundation in any way whatsoever. The dYdX Foundation does not make any representations, warranties or covenants in connection with the dYdX Chain software (or any implementations and/or components thereof), including (without limitation) with regard to their technical properties or performance, as well as their actual or potential usefulness or suitability for any particular purpose, and users agree to rely on the dYdX Chain software (or any implementations and/or components thereof) “AS IS, WHERE IS”.

Nothing in this post should be used or considered as legal, financial, tax, or any other advice, nor as an instruction or invitation to act by anyone.  Users should conduct their own research and due diligence before making any decisions. The dYdX Foundation may alter or update any information in this post in the future at its sole discretion and assumes no obligation to publicly disclose any such change. This post is solely based on the information available to the dYdX Foundation at the time it was published and should only be read and taken into consideration at the time it was published and on the basis of the circumstances that surrounded it. The dYdX Foundation makes no guarantees of future performance and is under no obligation to undertake any of the activities contemplated herein.

dYdX is a decentralised, disintermediated and permissionless protocol, and is not available in the U.S. or to U.S. persons as well as in other restricted jurisdictions. The dYdX Foundation does not operate or participate in the operation of any component of the dYdX Chain's infrastructure.

Nothing in this website should be used or considered as legal, financial, tax, or any other advice, nor as an instruction or invitation to act in any way by anyone. You should perform your own research and due diligence before engaging in any activity involving crypto-assets due to high volatility and risks of loss.

Depositing into the MegaVault carries risks. Do your own research and make sure to understand the risks before depositing funds. MegaVault returns are not guaranteed and may fluctuate over time depending on multiple factors. MegaVault returns may be negative and you may lose your entire investment.

The dYdX Foundation does not operate or has control over the MegaVault and has not been involved in the development, deployment and operation of  any component of the dYdX Unlimited software (including the MegaVault).

Crypto-assets can be highly volatile and trading crypto-assets involves risk of loss, particularly when using leverage. Investment into crypto-assets may not be regulated and may not be adequate for retail investors. Do your own research and due diligence before engaging in any activity involving crypto-assets.