What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Cold storage means keeping the private keys used to control your cryptocurrency offline—not placing coins inside a physical device. For most people, the practical method is a hardware wallet: the wallet keeps signing keys protected while companion software connects to the internet to display balances and broadcast transactions.
The safest workflow is to buy a genuine device, create a new wallet, write down and verify its recovery phrase offline, confirm the receiving address on the device screen, match the asset to the correct network, and send a small test transaction before moving the rest.
What cold storage protects—and what it does not
An exchange normally controls the private keys associated with your account. With self-custody, you control the keys or recovery material. The blockchain records your BTC, ETH, stablecoins, and tokens; the wallet protects the credentials needed to authorize transactions. See Ethereum.org’s security guidance and Bitcoin.org’s wallet-security guide.
A hardware wallet reduces exposure to malware, phishing, compromised computers, exchange failures, and online account attacks. It does not protect you from:
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →#1 Best Overall
- Proven security at scale: Over 9 years and millions of cards issued with no known remote hacks, while military‑grade EAL6+ security keeps your private keys locked inside the chip. Your cryptocurrencies stay strongly protected from online attackers.
- Tap once to manage your entire crypto wallet across 90 blockchains - no USB cables or Bluetooth, no batteries, no setup. Access 14,100+ coins & tokens, DeFi, NFTs, and staking instantly from your phone
- Smart backup: Use your second Tangem Wallet as your Backup keys with end‑to‑end encryption; no more papers, pictures. If one card is lost, the remaining can still restore full access, with an optional seed phrase available for advanced users.
- Engineered to last up to 25 years: Waterproof (IP69K), shockproof and tested for extreme temperatures from −25°C to 50°C. A durable cold wallet with long‑term protection and independently audited security.
- Trusted by 6 million users worldwide - buy, sell, swap, stake, and spend cryptocurrency directly. The secure offline storage wallet designed for how people actually use crypto wallets
- A stolen, photographed, typed, or uploaded recovery phrase.
- A counterfeit or compromised device.
- Sending funds to the wrong address or network.
- Approving a malicious smart contract.
- Losing the only backup or misrecording a word.
- Physical theft, coercion, or poor inheritance planning.
Cold storage is therefore a security process, not simply a product purchase.
Choose the right storage method
| Method | Best suited to | Main trade-off |
|---|---|---|
| Hardware wallet | Most users holding long-term crypto | Requires careful backups and transaction checks |
| Offline or air-gapped signing | Technically experienced Bitcoin users | Requires watch-only wallets, unsigned transactions, secure file transfer, and recovery knowledge |
| Multisignature | Large balances, businesses, or households wanting multiple independent keys | More complex to configure, document, test, and pass to heirs |
| Paper wallet | Generally not recommended for modern beginners | Generation, printing, storage, address-reuse, and spending risks |
A hardware wallet is usually the best balance between offline key protection and usability. Keep a smaller amount in a hot wallet if you need frequent spending, trading, staking, DeFi, or NFT activity. Separate long-term savings from accounts that connect to applications.
What to look for in a hardware wallet
Do not assume one brand is universally safest. Compare:
- Support for your exact assets, networks, account types, and country.
- Whether the device displays the complete transaction details you need to verify.
- The recovery and backup model.
- Firmware-update and companion-software practices.
- Compatibility with reputable third-party wallet software.
- Whether it requires a computer or supports mobile use.
- Optional cloud-recovery or subscription features and whether they fit your threat model.
Examples include Ledger, Trezor, BitBox, Coldcard, Foundation Passport, Blockstream Jade, SeedSigner, and Cypherock. Bitcoin-only devices can be a good fit for Bitcoin holders but are unsuitable for people who need Ethereum, Solana, stablecoins, or other networks. DIY and air-gapped devices generally require more technical knowledge.
Free tools Windows power users keep installed
One-click scans. No signup required.
Availability, prices, taxes, shipping, bundles, and optional services change. Check the manufacturer’s current page for the exact model rather than relying on a generic “best wallet” list.
Buy and verify the device safely
- Buy directly from the manufacturer or an explicitly authorized reseller.
- Avoid used devices and marketplace listings with unclear provenance.
- Follow the manufacturer’s current authenticity and packaging checks. These differ between vendors.
- Download companion software only from the manufacturer’s official website or a verified app-store listing.
- Never use a device that arrives with a prewritten recovery phrase. The device must generate your wallet’s phrase during setup.
Do not enter a recovery phrase into a website, support chat, exchange form, computer, phone, cloud note, email, password manager, or any other digital service. Legitimate support will not ask for it. Ethereum.org warns against sharing recovery phrases and photographing them.
Rank #2
- All your digital assets in one place. You can manage thousands of crypto including Bitcoin, Ethereum, Solana, Tether and more.
- Defend your identity against hackers: secure your online accounts with passwordless, hardware backed, 2FA logins for all your favorite apps and websites.
- Connectivity: USB-C cable connection only. No Bluetooth.Compatible with the Ledger Wallet crypto app, both desktop (Windows, macOS, Linux) and mobile (Android only). Not compatible with iOS.
- Protect your digital assets with the industry's best security: keep your private keys offline in your private signer, battle-tested by the Donjon's white hat hackers, CC EAL 6+ certified Secure Element, constantly updated Ledger OS.
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
Set up a new cold wallet
1. Prepare privately
Have the hardware wallet, a clean and updated computer or phone, official companion software, a pen and paper or suitable physical backup, and access to the exchange or wallet sending the funds. Set up the device somewhere private—not while being recorded, livestreamed, observed, or assisted remotely.
2. Create a new wallet
Choose the device option equivalent to Set up as new device, Create new wallet, or Generate new wallet. Do not choose Restore unless you are recovering a wallet that already exists.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallCrashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteThe device should generate the recovery phrase through its secure workflow. Write every word in the displayed order and preserve the numbering. Never accept a phrase supplied by another person.
3. Verify the recovery phrase
Complete the device’s word-confirmation process carefully. A phrase copied incorrectly is not a valid backup. If you need redundancy, manually create another physical copy; do not type the phrase into a computer to make a second copy.
4. Set a PIN
Choose a unique PIN that is not reused elsewhere. The PIN primarily protects the physical device. It is not a replacement for the recovery phrase: someone with the phrase may restore the wallet on another compatible device.
5. Install firmware and required applications
Use only the official update process and install only the asset applications you need. Menus and firmware differ by vendor, model, and version. Asset support can also vary by firmware, companion app, country, and network.
Rank #3
- Unparalleled Security: Protect your assets with EAL 6+ Secure Element, offering robust defense and complete transparency
- Simple & Secure Interface: Manage your digital assets easily with a clear OLED screen for secure on-device confirmations
- Supports 1000s of Coins & Tokens: Securely handle thousands of assets, including Bitcoin, Ethereum, and more, all in one wallet
- Effortless Asset Management: Monitor and transact seamlessly with Trezor Suite, our intuitive desktop and mobile app
- Enhanced Backup Solution: Multi-share Backup eliminates single points of failure for secure cold wallet recovery
6. Add the appropriate account
Add a Bitcoin account, Ethereum account, or other supported account in the companion application. The account is derived from the wallet’s keys; the coins are not stored inside the app. For Ethereum-compatible assets, an address may work across several EVM networks, but the sending service, receiving wallet, and selected network must still match.
Back up the wallet correctly
The recovery phrase is effectively the master key. Anyone who obtains it may be able to restore the wallet and move its assets. If it is lost, recovery may be impossible.
- Keep the phrase offline and away from cameras, phones, computers, and cloud storage.
- Protect it from fire, water, theft, unauthorized household access, and accidental disposal.
- Consider a metal backup when long-term durability or resistance to fire and water matters. Metal is not theft-proof and does not prevent incorrect transcription.
- Store the device and recovery phrase separately where practical.
- Document enough information for recovery and inheritance without exposing the phrase unnecessarily.
An optional passphrase can derive a separate wallet from the same recovery phrase. It is not the PIN. A typo can open a different, apparently empty wallet; forgetting it can permanently block access. Beginners should use one only if they can document it securely and test recovery in a controlled way. See Ledger’s passphrase explanation.
Transfer crypto from an exchange or hot wallet
1. Open the receiving account
In the companion application, select the exact asset and account, then choose Receive or the equivalent control.
2. Verify the address on the device
Display the address in the application and confirm the full address on the hardware-wallet screen. Copy or scan it rather than typing it manually, as recommended by Ethereum.org’s wallet guide. Clipboard malware can replace copied addresses, so the device display is the final check.
3. Match the asset and network
Before submitting the withdrawal, check all of the following:
Rank #4
- Dual-chip architecture for maximum protection: The next-gen, fully auditable TROPIC01 chip works alongside a certified EAL6+ Secure Element—completely NDA-free—to deliver radically transparent, industry-leading defense against physical attacks.
- Quantum-ready security: Get protection against future threats with the first-ever hardware wallet designed with quantum-ready architecture.
- See every detail with confidence: Our largest high-resolution color touchscreen makes it easy to navigate your assets, review transactions and manage your coins with clarity.
- Wireless freedom with encrypted Bluetooth control: Manage, buy, swap and stake securely using Trezor Suite on desktop or mobile. Qi2-compatible wireless charging keeps your Trezor powered up. No cables required—security meets convenience.
- Works seamlessly with Android, iOS and desktop: Connect wirelessly or via USB-C to your phone or computer. Manage your crypto anywhere with our companion Trezor Suite app.
- Asset: BTC, ETH, USDC, USDT, or the exact token.
- Network: Bitcoin, Ethereum, Arbitrum, Base, Polygon, Solana, or another specific chain.
- Address format and account.
- Memo, tag, destination tag, or payment ID, if required.
- Withdrawal minimum, network fee, and any exchange warning.
- Whether the receiving account supports that asset on that network.
A ticker alone does not identify a token. USDC or USDT may exist on several networks, and the sender and recipient must use the same supported route. A wrong-network transfer may sometimes be recoverable, but only under specific technical or custodial conditions.
4. Send a small test transaction
- Send an amount small enough that a mistake is tolerable but large enough to cover fees and demonstrate the process.
- Wait for the exchange or source wallet to show that the transaction was broadcast.
- Wait for the required blockchain confirmations.
- Confirm that the balance appears in the cold-wallet account.
- Check the transaction hash in an appropriate block explorer.
5. Send the remainder
Repeat the address, asset, and network checks. Confirm the destination on the hardware-wallet display before approving. Exchange withdrawals may be delayed by fees, minimums, compliance checks, address whitelisting, or withdrawal holds; timing varies by exchange and jurisdiction.
6. Save a record
Keep the transaction hash, asset, network, account description, and any recovery documentation needed for your future self or heirs. Do not record the recovery phrase in that digital or cloud-based record.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Asset-specific warnings
Bitcoin
Bitcoin wallets may offer legacy, SegWit, native SegWit, and Taproot address types. Do not select an address format solely because it is newer; confirm that the exchange supports the format and that the hardware wallet’s current account options match.
Ethereum, stablecoins, and EVM networks
Ethereum addresses begin with 0x, but a compatible-looking address does not guarantee support on every EVM network. Confirm the network, token contract, fees, and receiving-wallet support. An asset sent over an unsupported network may require specialized recovery or remain inaccessible.
Solana and other non-EVM assets
Do not assume an Ethereum account or EVM address can receive assets from another blockchain. Use the hardware wallet’s supported account and the sending service’s matching network. Check current compatibility before transferring.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Scan for outdated or missing drivers - takes under a minute3Repair Windows errors before they cause bigger problemsBest Value
- Proven security at scale: Over 9 years and millions of cards issued with no known remote hacks, while military‑grade EAL6+ security keeps your private keys locked inside the chip. Your cryptocurrencies stay strongly protected from online attackers.
- Tap once to manage your entire crypto wallet across 90 blockchains - no USB cables or Bluetooth, no batteries, no setup. Access 14,100+ coins & tokens, DeFi, NFTs, and staking instantly from your phone
- Smart backup: Use your second Tangem Wallet as your Backup keys with end‑to‑end encryption; no more papers, pictures. If one card is lost, the remaining can still restore full access, with an optional seed phrase available for advanced users.
- Engineered to last up to 25 years: Waterproof (IP69K), shockproof and tested for extreme temperatures from −25°C to 50°C. A durable cold wallet with long‑term protection and independently audited security.
- Trusted by 6 million users worldwide (4.9 App Store, 4.8 Google Play) - buy, sell, swap, stake, and spend cryptocurrency directly. The secure offline storage wallet designed for how people actually use crypto wallets
NFTs, staking, and DeFi
Holding an asset in a hardware-wallet account does not make every later interaction safe. Connecting a savings account to a malicious site or approving a malicious contract can expose assets. Use a separate operational account for trading, staking, NFTs, and DeFi. Distinguish keys held offline from assets committed to a smart contract, delegated for staking, or held by a custodian.
Secure the wallet after the transfer
- Disconnect and physically secure the device when it is not in use.
- Keep the device separate from the recovery backup where appropriate.
- Update firmware only through the official process, after confirming the source.
- Limit the savings account’s connections to websites and applications.
- Review transaction details on the hardware-wallet screen—not only on the computer or phone.
- Plan for death, incapacity, fire, theft, and inheritance.
For physical recovery backups, examples include Ledger’s seed-storage information, Cryptosteel, and Billfodl. Compare construction, supported formats, durability, and privacy; no metal backup is automatically superior.
What happens if the device is lost or damaged?
If the recovery phrase is intact, you can generally restore the wallet on a compatible replacement device. The exact result depends on the wallet standard, derivation path, account type, asset support, and any passphrase. A replacement device may not immediately show every account unless the correct account and derivation settings are restored.
Test your recovery plan in a controlled way before the original device becomes unavailable. Never test by entering the phrase into an internet-connected website or app. A device thief may be blocked by the PIN, but a thief who also finds the recovery phrase can restore the wallet elsewhere.
If something goes wrong
Recovery phrase exposed
Treat it as compromised. Create a completely new wallet with a new phrase and transfer funds to it. Changing only the device PIN does not change the wallet’s keys.
Wrong address
Blockchain transfers are usually irreversible. Recovery may be impossible unless the recipient controls the destination address. Contacting an exchange cannot guarantee reversal.
Wrong network or missing funds
Stop sending more funds. Confirm the transaction hash, destination address, token contract, and network in a block explorer. Contact only the official exchange or wallet support channel. Recovery depends on the network and who controls the destination; never give support your phrase or private key.
Fake support or suspicious approval
Stop interacting with the message or website. Do not disclose secrets. If you approved a suspicious smart contract, use the affected network’s reputable tools and documentation to investigate and revoke approvals where possible, then move remaining assets to a clean wallet if key exposure is suspected.
Quick Recap
Cold-storage checklist
- □ Device bought from the manufacturer or an authorized seller.
- □ Official companion software installed.
- □ New wallet generated on the device.
- □ Recovery phrase written down, numbered, and verified.
- □ Phrase never photographed, typed, uploaded, or shared.
- □ Unique device PIN set.
- □ Correct asset application and account selected.
- □ Receiving address verified on the hardware-wallet screen.
- □ Asset, token contract, and network checked.
- □ Memo or destination tag checked where required.
- □ Small test transaction completed and confirmed.
- □ Final transfer confirmed on the correct network.
- □ Device and backup stored securely and separately where appropriate.
- □ Recovery and inheritance plan documented without digitizing the phrase.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
