What Is a Cold Wallet? Australia 2026 Crypto Guide

What a cold wallet actually means

Every crypto wallet is really a key manager. Your coins are entries on a blockchain, visible to anyone. What makes them yours is a private key: a long secret number that can sign a transaction moving those coins. Whoever controls the key controls the coins. Our crypto wallet explainer covers the basics of public addresses and private keys.

“Cold” describes where that key lives. A cold wallet keeps the private key on something that is not connected to the internet. A “hot” wallet keeps it on something that is, such as a phone app, a browser extension or an exchange’s servers. The words come from older computing and finance slang, where “cold storage” meant backups or reserves kept offline.

The point of going cold is to shrink the ways a thief can reach your key. Malware on a laptop, a compromised browser extension or a hacked platform cannot easily read a key that never touches those systems. To steal from a well-managed cold wallet, someone usually needs physical access to the device and its PIN, or they need to trick you into handing over your recovery phrase.

A cold wallet does not make crypto safer as an investment. Prices still move, and a coin can still lose most of its value. Cold storage only changes who can move your coins, not what they are worth.

Cold wallet vs hot wallet

Most people meet crypto through a hot wallet, often without realising it. The balance shown in an exchange app is usually a custodial account: the exchange holds the keys and you hold a login. A phone or browser wallet such as the one in our MetaMask guide is non-custodial — you hold the keys — but they sit on an internet-connected device.

Connection. A hot wallet’s keys live on a connected device. A cold wallet’s keys stay offline, and only signed transactions leave it.

Convenience. Hot wallets are quick for everyday use, trading and apps. Cold wallets add steps: find the device, connect it, enter a PIN, check and confirm on its screen.

Main risks. Hot wallets are more exposed to malware, phishing sites and platform failures. Cold wallets shift the risk to physical loss, damaged or lost backups, tampered devices and social engineering.

Cost. Most hot wallets are free apps. A hardware wallet is a device you buy.

Typical use. Many people split funds the way they split cash: a smaller amount in a hot wallet for spending or trading, and longer-term holdings in cold storage. That is a common pattern, not a rule.

The idea is often summed up in the phrase “not your keys, not your coins.” If a platform holds the keys, you are relying on that business. If you hold them, you are relying on yourself.

Cold wallet vs hardware wallet

People search for “cold wallet” and “hardware wallet” almost interchangeably, and in everyday use they usually mean the same thing. Strictly, a cold wallet is the idea — keys kept offline — and a hardware wallet is the most common way of doing it.

A hardware wallet is a small dedicated device, often the size of a USB stick or a credit card. It generates and stores private keys in protected hardware, and it signs transactions inside the device. When you send crypto, your phone or computer prepares the transaction, the device shows the details on its own screen, you confirm with a button press, and only the signed result goes back out. The key itself never leaves.

Hardware wallets differ in ways that matter more than the brand name:

Connection method. Some connect by USB cable, some by Bluetooth, and some are fully air-gapped, passing transactions by QR code or memory card so the device never connects to a computer at all.

Screen. A built-in screen lets you verify the receiving address and amount on the device itself, which protects you if your computer is compromised.

Coin support. Not every device supports every coin or network. Bitcoin-only devices exist, as do devices that cover many chains.

Openness. Some makers publish their firmware or hardware designs for outside review; others do not. People weigh this differently.

A hardware wallet is not automatically cold in practice. One that stays plugged into an everyday computer, or that is used to approve every transaction without reading it, gives up much of the benefit. Comparisons of specific devices are in our best crypto wallets guide and best Bitcoin wallet guide; this page stays brand-neutral.

Types of cold storage

Hardware wallets. The mainstream option described above, balancing security with reasonable ease of use.

Air-gapped devices. Hardware wallets or dedicated offline computers that never connect to the internet or another computer directly, exchanging data by QR code or memory card. More isolated, more steps.

Paper wallets. Keys printed on paper. Once popular, now generally considered outdated: paper is easy to damage or photograph, and spending from it safely is fiddly.

Recovery phrase backups. The 12 or 24 words that can recreate a wallet are themselves a form of cold storage. Some people stamp them into metal plates to survive fire or flood. Our seed phrase guide explains how they work.

Multisignature setups. Wallets that need several keys, held on separate devices or by separate people, to approve a transaction. They remove a single point of failure but are more complex to set up and recover.

How a cold wallet works

Receiving. Receiving does not need the private key. The wallet gives you a public address, which you can share. Coins sent there are recorded on the blockchain, and the device does not even need to be connected at the time. Before sharing an address, many people check it on the device screen rather than trusting the computer.

Sending. A companion app on your phone or computer builds the transaction. The cold wallet receives it, displays the destination and amount, and asks you to confirm physically. It signs with the key inside and returns only the signature. The app then broadcasts the signed transaction to the network.

Recovery. When you set up a wallet, it creates a recovery phrase. That phrase can regenerate the same keys on another compatible device. If the device is lost, broken or stolen, the phrase is how you get back in — and, equally, how someone else could.

PIN and passphrase. Most devices are locked with a PIN and wipe themselves after repeated wrong attempts. Many also support an optional extra passphrase, which adds protection but is one more thing that, if forgotten, can lock you out permanently.

Setting up a cold wallet: the general steps

Every device has its own instructions, and you should follow the maker’s official guide. In general terms, setup looks like this:

1. Get the device from a trusted source. Buy from the maker or an authorised reseller. Tampered second-hand devices, or ones that arrive with a recovery phrase already printed, are a known scam.

2. Download software only from the official site. Fake companion apps and lookalike websites are common. Type the address yourself rather than following ads or links in messages.

3. Let the device create a new wallet. The recovery phrase should be generated by the device during setup, not supplied to you by anyone.

4. Write the recovery phrase down offline. On paper or metal, never in a photo, cloud note, email or password manager connected to the internet. Store it somewhere safe and private, and consider how a trusted person could access it in an emergency.

5. Test with a small amount. Send a small amount in and out first, and practise checking addresses on the device screen.

6. Keep firmware updated carefully. Updates come through official software only; a message telling you to urgently “update” by entering your phrase is a scam.

Common cold wallet mistakes and risks

Cold wallets remove some risks and add others. Most losses come from people, not from broken cryptography.

Typing the recovery phrase into a website or app. This is the classic phishing attack. A genuine wallet maker, exchange or support agent will never ask for your phrase. Once someone has it, they do not need your device.

Storing the phrase digitally. Photos, screenshots and cloud documents can be synced, hacked or found.

Having only one backup, in one place. A fire, flood or move can destroy both the device and the only copy of the phrase.

Approving transactions blindly. Malicious apps can ask you to sign something other than what you think. Read what the device screen shows before confirming.

Falling for fake support. Scammers pose as wallet makers on social media, by email or by phone, especially after publicised data leaks. In 2020 one large wallet maker disclosed that a customer contact database had been exposed, and customers later reported phishing emails and letters. Our crypto scams guide covers the common patterns.

Forgetting about inheritance. If nobody else knows the wallet exists or how to access it, the funds can be lost to your family. Planning access without handing anyone the keys today is part of cold storage.

Our crypto security best practices guide covers broader habits such as two-factor authentication and device hygiene.

Who uses cold wallets, and who may not need one

People who tend to consider cold storage include long-term holders who rarely move their coins, people holding amounts they would hate to lose to a platform failure, and people who want direct control of their own keys.

People who may find it less useful include those holding very small amounts, active traders who move funds frequently, and anyone who is not confident they can keep a recovery phrase safe for years. For some, a reputable regulated exchange with strong account security is a simpler fit; for others it is the risk they want to avoid. Our crypto exchange guide explains how exchange custody works in Australia, and our guide to buying Bitcoin in Australia covers the first step most people take before any of this matters.

This is a description of common choices, not a recommendation for you.

Why self-custody became a big deal

Interest in cold wallets has tended to jump after platform failures. In 2014 Mt. Gox, then one of the largest Bitcoin exchanges, collapsed after losing a very large amount of customers’ bitcoin, and customers waited years for partial repayment. In 2022 a string of crypto lenders and the exchange FTX failed during the crypto bear market, and many customers found their funds frozen inside a failed company.

Each time, the phrase “not your keys, not your coins” spread further. Cold storage is not the only answer to platform risk — regulation, audits and choosing providers carefully also matter — but it is the one most directly in an individual’s control.

The Australian angle

Most cold wallet explainers are written by wallet makers or for US readers. Four Australian details are worth separating out.

Tax does not care where the keys are. Holding crypto in a cold wallet does not change your tax obligations. Moving coins between wallets you own is generally not a CGT event, but selling, swapping for another coin or spending them generally is. Network fees and records still matter, so keep a log of every transfer, including dates and amounts in Australian dollars. The ATO receives data from Australian exchanges, and blockchain transactions are public. Check ATO guidance or a registered tax agent; students can see our crypto tax guide for Australian students.

Buying the device. Hardware wallets are sold online and in some Australian retail stores. Buy from the maker or an authorised seller, check the packaging and setup process match the maker’s instructions, and be wary of marketplace listings and “pre-configured” devices.

Scams target Australians heavily. Scamwatch, run by the ACCC, says Australians lose more money to investment scams than any other type, and that crypto lost to scams is rarely recovered. Fake wallet support and “wallet validation” requests are common lures. ASIC’s Moneysmart crypto assets page explains crypto’s risks in plain English, including theft and unlicensed providers.

Estate planning. Australian wills and estate processes were not designed with private keys in mind. People holding significant crypto often record where wallets and backups are kept, without writing the phrase into the will itself, and speak to a lawyer about how their executor could access them.

Eagle BTM Pty Ltd ACN 659 281 820 publishes this education site and is an AUSTRAC-registered DCE/VASP. AUSTRAC registration is not an Australian financial services licence, and nothing here is a recommendation to buy, sell or hold any asset or to use any wallet. Jittie is in pre-launch. Join the waitlist for launch updates.

How it sits next to other ideas

Bitcoin is the asset most cold wallets were first built for, though many now support other networks.

Stablecoins can also be held in cold storage, but some issuers can freeze tokens at their end, so self-custody does not remove every third party.

If you came for the definition, you can stop here. If you want launch news, the waitlist is the only ask on this page. Education only — not financial, tax, or legal advice.

Frequently Asked Questions