Cold storage is offline key storage used to protect crypto assets from direct internet access. Instead of keeping private keys on a server that signs transactions in real time, an operator stores them on air-gapped devices, hardware wallets, or other offline systems. This reduces exposure to remote malware, phishing, and network intrusion.
In cyber security, cold storage is a core custody control for high-value reserves. Attackers often target the “hot” layer first, because internet-connected wallets are easier to reach and drain. Defenders use cold storage to keep most funds out of that blast radius, while limiting hot wallets to small working balances. It is not a complete shield: insiders, physical theft, poor backup handling, or unsafe key ceremonies can still expose assets. Good practice includes strict access controls, segmented signing workflows, and secure recovery procedures so offline keys remain usable without becoming easy to steal.