Best Bitcoin Cold Storage Methods: Six Options Compared

Security advisory (updated 3 November 2026): a firmware flaw in some Coldcard models, disclosed in July 2026, produced seeds with far less randomness than intended. Coinkite has released fixed firmware for every affected model, but updating does not repair a seed created on affected firmware. If you created a seed on a Coldcard, read who is affected and exactly what to do, or use the two-minute check. All current advisories: security advisories.

Cold Storage Methods: A Complete Comparison

Cold storage is the practice of keeping Bitcoin private keys on devices or media that never connect to the internet. It is the foundation of Bitcoin security for anyone holding more than pocket change. The concept is simple — keys that never touch the internet cannot be stolen remotely — but the implementation spans a wide range of methods, costs, and complexity levels.

This guide covers six distinct cold storage methods, from single-signature hardware wallets to steel plate backups. Each has different security properties, costs, and operational requirements. By the end, you will know which method matches your holdings, technical comfort level, and threat model.

Why Cold Storage Matters

Most bitcoin thefts you hear about fall into one of two categories: the private keys were on an internet-connected device, or the owner was tricked into signing a malicious transaction. Cold storage eliminates the first category, as long as you type your recovery words only on the device itself, never on a computer, phone or website (The Scams That Empty Self-Custody Wallets explains why). When your keys exist only on an offline device — or stamped into a metal plate locked in a safe — no malware, phishing attack, or exchange hack can reach them.

The trade-off is convenience. You cannot spend from cold storage as quickly as from a phone wallet. Accessing funds requires physical interaction with the storage medium: plugging in a hardware wallet, scanning QR codes, or retrieving a metal plate from a vault. This friction is a feature, not a bug. It forces deliberation before spending and creates physical barriers that remote attackers cannot cross.

For a foundational understanding of how cold and hot wallets work together, read Bitcoin Security: Cold vs Hot Wallet Setup.

Method 1: Single-Signature Hardware Wallet

How It Works

A hardware wallet is a dedicated device that generates and stores your private keys offline (most models guard them with a secure chip), signs transactions on the device itself, and never exposes the raw key material to your computer or phone. You connect it via USB, QR code, or NFC when you want to send bitcoin, approve the transaction on the device’s screen, and disconnect.

Security Profile

A single-sig hardware wallet keeps your keys out of reach of malware on your computer or phone: the keys never exist on a networked device. It can’t stop malware from swapping the address you pay, so check the address on the device’s screen, and type your recovery words only on the device, never into an app or website. Beyond that, the main vulnerabilities are physical: if someone steals both your hardware wallet and your PIN, tampers with its firmware, or obtains your seed phrase backup, they can access your funds.

This is the most common cold storage method and the right starting point for most people. It provides a large security improvement over phone or desktop wallets with minimal complexity.

Cost

From $59 to $369 for the devices in this guide that are priced in dollars (manufacturer stores, checked 3 November 2026). The cheapest are the Trezor Safe 3 ($59) and the original Blockstream Jade ($67). The Trezor Safe 5 costs $129 and the BitBox02 €149 including VAT in its EU store. The Coldcard Mk5 lists at $269 ($219 on sale) and the Coldcard Q at $369 ($319 on sale). Foundation no longer sells the Passport Core; its successor, the Passport Prime, costs €388.95, and we have not reviewed it. See the full Hardware Wallet Buying Guide for detailed comparisons.

Best For

Individuals holding $1,000 to $50,000 in bitcoin who want strong security without significant operational complexity. Also appropriate as the day-to-day signing device in a tiered setup where larger holdings are in multisig.

Method 2: Multi-Signature Hardware Wallet Setup

How It Works

Multisig requires multiple independent private keys to authorize a transaction. A 2-of-3 setup, for example, uses three hardware wallets from three different manufacturers. Any two of the three must sign before a transaction is valid. The three devices are stored in three separate physical locations — your home, a bank safe deposit box, a trusted family member’s safe, etc.

Security Profile

Multisig is the gold standard for individual cold storage security. To steal funds, an attacker needs two of the three keys from two separate places, and a seed backup can give them a key without the device. That holds only if the wallet was set up correctly, so before you fund it, check the cosigner keys and the first address on each device (our 2-of-3 setup guide shows how). A single device failure, theft, or destruction does not result in loss — you can always recover with the remaining two keys. This eliminates the single point of failure that defines single-sig setups.

The flip side is operational complexity. You must maintain three devices, three seed phrase backups, and the wallet configuration file (the descriptor or BSMS file that defines the quorum). Losing the configuration file alongside one key can lock you out: two signatures would be enough to spend, but without the descriptor the two seeds you still have can’t rebuild your addresses, so your wallet software can’t find your coins. Keep a copy of the descriptor with every seed backup.

For long-term savings we recommend a 2-of-3 multisig with devices from three different manufacturers and a passphrase. Three makers means three separate random number generators, so one faulty generator can’t weaken every key. Dice rolls are optional on most devices; a Coldcard on current firmware asks for your own randomness when it makes a seed (see the first item of the checklist below).

Cost

From about $345 for the three devices (manufacturer prices, 3 November 2026). A budget 2-of-3 could pair a Trezor Safe 3 ($59), an original Blockstream Jade ($67) and a Coldcard Mk5 ($219 on sale, $269 list): $345 to $395 in total. Don’t save money by buying three units of the same model. Three keys from one manufacturer share the same firmware and the same random number generator, so one bug can reach all three. A premium setup such as a Coldcard Mk5 + Foundation Passport Prime + BitBox02 mixes dollar and euro prices ($269 list, €388.95 and €149 including VAT, Nov 2026), so we don’t add it up. You also need a metal backup for each seed (about $120-300 for three; see Method 4) and a copy of the wallet descriptor with each one.

Best For

Individuals holding $50,000+ in bitcoin, or anyone for whom the loss of their bitcoin would be financially devastating regardless of amount. Also critical for inheritance planning — multisig is the cleanest way to distribute key custody among heirs and executors. Read Bitcoin Inheritance Planning for guidance on structuring multisig for succession.

For a complete walkthrough of migration from single-sig to multisig, see Singlesig to Multisig Bitcoin Migration.

Method 3: Air-Gapped Signing Devices

How It Works

An air-gapped signing device is a hardware wallet that can operate without any wired or wireless connection to a computer or phone. Transaction data is exchanged exclusively through QR codes (scanned by a built-in camera) or microSD cards. The device is never plugged into a USB port on a networked machine and never connects via Bluetooth or Wi-Fi.

The workflow for spending: your coordinator software (Sparrow, Electrum, Nunchuk, etc.) prepares the transaction on your computer and displays it as a QR code. You scan the QR with the air-gapped device, verify the transaction details on the device’s screen, sign it, and display the signed transaction as a QR code back to your computer. The computer broadcasts the signed transaction to the Bitcoin network. At no point is there a direct data connection between the signing device and any networked machine.

Devices That Support Full Air-Gap

• Coldcard Mk5 / Q: Air-gapped via microSD. The Mk5 has no camera; the Q adds a QR scanner. Both also have NFC, a short-range radio link that is off by default; leave it off to keep the strict air gap described above. The Q runs on its own batteries, and the Mk5 can run from a USB battery pack for fully cordless operation. Coinkite no longer sells the Mk4, which works the same way on current firmware.
• Blockstream Jade / Jade Plus: Air-gapped via built-in camera for QR-code scanning. Can also use USB and Bluetooth, but the camera-based QR workflow avoids all electronic connections.
• Foundation Passport Core (discontinued): Air-gapped via camera (QR) and microSD, with no USB data connection (USB was for charging only). Foundation now sells the Passport Prime, which we have not reviewed.
• Keystone 3 Pro: Air-gapped via its built-in camera and QR codes. Its USB-C port can also carry data (Keystone uses it for firmware updates and some software wallets), but you can switch USB data off in the device settings and leave the port for charging only.

Security Profile

Air-gapping eliminates the USB attack surface entirely. Malware on your computer cannot send malicious commands to the device over USB because there is no USB connection. The remaining attack vectors are limited to: physical theft of the device, compromised firmware (loaded via microSD or QR), and social engineering (tricking you into signing a malicious transaction). For a technical analysis of firmware-level threats to air-gapped devices, see our guide to the Dark Skippy attack.

Cost

Same as buying the hardware wallet itself: from $67 for the original Jade to $369 list for the Coldcard Q (manufacturer prices, 3 November 2026). Air-gapped operation does not cost extra — it is a capability of the device. You may want a dedicated USB battery pack (~$15) for devices that need external power.

Best For

Security-conscious users who want the strongest isolation between their signing device and any networked computer. Particularly valuable for cold storage that is accessed infrequently (monthly or less). The slight workflow friction of scanning QR codes or swapping microSD cards is negligible when you only access funds a few times per year.

Method 4: Metal Seed Backups

How It Works

A metal seed backup is your seed phrase (12 or 24 words on most wallets, 20 words by default on a new Trezor Safe 3 or Safe 5) physically stamped, etched, or engraved into a steel or titanium plate. This serves as a disaster-resistant backup of your wallet. Unlike paper, a stainless steel or titanium plate survives house fires (stainless steel only starts to melt at around 1,400 °C / 2,550 °F, far above a house fire, which can exceed 600 °C / 1,100 °F), floods, and decades of storage without degradation. Avoid aluminum, which melts at about 660 °C, within the heat of a house fire. The design matters as much as the metal: in Jameson Lopp’s fire tests, the letters that were lost fell out of loose parts, not melted steel (details in our metal seed backup guide).

Popular Products

Prices are from each maker’s store on 7 November 2026. Grades are from Jameson Lopp’s stress tests (heat, acid and a 20-ton press), checked the same day.

• Seedplate by Coinkite ($59.97 for 24 words, $39.97 for the 12-word Tiny 12): A 2 mm steel plate printed with a grid of letters; you mark the first four letters of each word with a center punch ($14.99 extra). No loose parts. Lopp grade: A.
• Blockplate: The same punched-grid idea on a thicker stainless steel plate. Lopp grade: A. Its online store was unavailable when we checked on 7 November 2026.
• Cryptosteel Capsule, now sold as Seed24 ($80 list, $50 on sale when we checked): Stainless steel cylinder containing individual letter tiles. You slide the first four letters of each seed word onto a core, then close the capsule. Lopp grade for the original Capsule: A− (every tile survived the heat; the press jammed the cap, so reading the tiles, which Lopp judged intact but could not check, would mean cutting the tube open).
• Billfodl ($99): Letter tiles in tracks inside a flat stainless steel case. Lopp grade: C. In his heat test the tray warped and letters fell out, and the press shook out nearly all of them, so we don’t recommend it for a new backup.

Security Profile

Metal backups protect against environmental destruction — fire, flood, corrosion. They do not protect against theft. If someone finds your metal plate, they have your seed phrase and therefore your funds (unless you also use a BIP39 passphrase, which should be stored separately). Metal backups should be stored in a secure location: a home safe, a bank safe deposit box, or both. Read Seed Phrase Storage Best Practices for a complete storage strategy.

Cost

About $40 to $100 per backup at November 2026 prices, plus a center punch (about $15) for punched plates. For a multisig setup requiring three seed phrase backups, budget about $120-300 for metal backups alone.

Best For

Everyone who uses a hardware wallet. A metal seed backup is not an alternative to a hardware wallet — it is a complement. The hardware wallet is your active signing device; the metal backup is your disaster recovery. If your hardware wallet is lost, stolen, or destroyed, the seed phrase on your metal plate lets you restore its key on any compatible device. To get your wallet back you also need the exact passphrase if you use one, and in a multisig the wallet descriptor kept with each backup.

Method 5: Paper Wallets (Legacy Method — Not Recommended)

How It Works

A paper wallet is a printed document containing a Bitcoin private key and its corresponding public address, typically as both text and QR codes. The concept peaked in popularity around 2013-2016, before hardware wallets became widely available.

Why Paper Wallets Are Problematic

Paper wallets have significant security and usability problems that make them unsuitable for modern Bitcoin storage:

• Key generation risk: Generating a paper wallet requires a secure, offline computer with trusted software. Most users who create paper wallets do so on their everyday computer, which may be compromised by malware that captures the private key during generation.
• Address reuse: Paper wallets encourage address reuse (receiving multiple payments to the same address), which degrades privacy.
• Partial spending danger: Bitcoin transactions must spend the entire UTXO (unspent transaction output). If you have 1 BTC on a paper wallet and want to send 0.1 BTC, the remaining 0.9 BTC is sent to a change address. If the wallet software is not configured correctly, the change goes to a new address that you may not have backed up — resulting in loss. Many people have lost significant amounts this way.
• Physical fragility: Paper degrades. Ink fades. Water destroys it. Fire destroys it. Paper wallets stored for years can become partially or fully illegible.
• No transaction verification: Unlike a hardware wallet, a paper wallet cannot display transaction details for you to verify before signing. You are trusting your computer entirely.

If you encounter old guides recommending paper wallets, understand that the hardware wallet ecosystem has made them obsolete. A $59 Trezor Safe 3 or a $67 Blockstream Jade (Nov 2026) provides vastly better security than any paper wallet.

Best For

Nothing. This method is documented here only for completeness and to steer new users away from outdated advice.

Method 6: Steel Plates and DIY Solutions

How It Works

Beyond commercial metal backup products, some users create their own seed phrase backups using raw steel plates from hardware stores, metal stamping kits, or even angle grinder etching. This approach appeals to those who want to avoid commercial supply chains entirely or who need custom form factors.

DIY Options

• Steel plate + letter stamp set (~$25-40 total): Buy a thick (3mm+) stainless steel plate from a metal supplier and a letter/number stamp set from a hardware store. Stamp each word or the first four letters of each word. Requires a hammer, a hard surface, and patience.
• Steel washer method (~$10-15): Use standard stainless steel washers and stamp one word and its position number on each washer, since loose washers can fall out of order. Thread the washers onto a bolt in order and secure with a nut. Cheap, compact, and highly durable.
• Engraving tool (~$30-50 for tool): A rotary engraving tool (Dremel-style) can etch words into any metal surface. Less precise than stamping but easier for some users.

Security Considerations

DIY solutions are as durable as the metal and stamping quality allow. Stainless steel (grade 304 or 316) provides excellent corrosion resistance and fire survivability. The security risk is the same as any metal backup: physical discovery equals compromise. Store accordingly.

One advantage of DIY: it leaves no commercial paper trail. Ordering a Cryptosteel online creates a record that you likely own cryptocurrency. Buying a steel plate and stamp set from a local hardware store does not.

Cost

$10 to $50 depending on method and materials. The cheapest option in this entire guide.

Best For

Users who want maximum privacy in their backup creation process, those on tight budgets, or users who need multiple backups and want to keep costs down. Also useful for multisig setups where you need three or more seed phrase backups — buying three commercial backups at $40-100 each versus three DIY steel plates at about $15 each is a meaningful cost difference. Lopp has tested several DIY designs, and stamped washers on a bolt lost no letters in any of his tests.

Comparison Table

Method	Security Level	Cost Range	Setup Complexity	Recovery Difficulty	Best For
Single-sig hardware wallet	High	$59 - $369 (Nov 2026)	Low	Low (restore from seed)	Most users, $1K-$50K
Multisig hardware wallets	Very High	From ~$345 (Nov 2026)	High	Medium (need 2-of-3 keys + descriptor)	$50K+, inheritance
Air-gapped signing device	Very High	$67 - $369 (Nov 2026)	Medium	Low (restore from seed)	Security-focused users
Metal seed backup	High (disaster recovery)	$40 - $100 (Nov 2026)	Low	N/A (is the recovery method)	Everyone (complement to HW wallet)
Paper wallet	Low	~$0	Medium (if done securely)	High (partial spend risk)	Not recommended
Steel plates / DIY	High (disaster recovery)	$10 - $50	Low-Medium	N/A (is the recovery method)	Budget-conscious, privacy-focused

Cost Analysis by Security Tier

Hardware wallet prices below come from each manufacturer’s store on 3 November 2026, and metal backup prices from each maker’s store on 7 November 2026.

Tier 1: Basic Cold Storage (~$120)

• Blockstream Jade ($67), which makes a 12-word seed in its standard setup
• Seedplate Tiny 12 by Coinkite for metal backup ($39.97) and a center punch ($14.99)
• Total: ~$120

This setup gives you a fully functional air-gapped signing device with QR-code support and an open-source firmware, plus a metal seed phrase backup that survives fire and flood. It is a dramatic security upgrade over any software wallet and costs less than a nice dinner for two. For users holding $1,000-$10,000 in bitcoin, this is the sweet spot.

Tier 2: Enhanced Cold Storage (~$270-350)

• Coldcard Mk5 ($269 list, $219 on sale) or BitBox02 (€149 including VAT, EU store)
• A metal backup that held up in Lopp’s tests: a 24-word Seedplate ($59.97 plus a $14.99 punch) or a Cryptosteel Seed24 ($50-80)
• On the Coldcard, your own randomness when the seed is made: current firmware asks for it, and 99 fair dice rolls give the full 256 bits (checklist item 1). On the BitBox02, dice are optional.
• BIP39 passphrase enabled (no additional cost)
• Dedicated coordinator software (Sparrow Wallet, free)
• Total: about $270-350 with the Coldcard; with the BitBox02, €149 plus the backup

This tier adds a premium signing device with proven security architecture, a commercial-grade metal backup, and a passphrase for plausible deniability. The passphrase means an attacker who finds your metal backup still cannot access your main holdings without the passphrase. See Wallet Security and Passphrases for passphrase implementation details. Appropriate for $10,000-$50,000 in holdings.

If you use a BitBox02, keep its firmware up to date. Version 9.26.5 (17 August 2026) brought “security improvements”, according to BitBox’s release notes; if your device runs anything older, update it in the BitBoxApp. Details in our BitBox02 advisory.

Tier 3: Multi-Signature Cold Storage (~$480+)

• Three hardware wallets from three different manufacturers (from about $345; see Method 2)
• Three metal seed backups (~$120-300)
• A passphrase (no additional cost); dice rolls are optional, but a Coldcard needs your own randomness: dice, coin flips or key presses (checklist item 1)
• Multisig coordinator software (Sparrow, Nunchuk, or Electrum — free)
• Three secure storage locations (home safe, bank deposit box, trusted third party)
• Total: from about $480 in hardware, plus ongoing safe deposit box costs

This is the configuration used by security-conscious holders with significant bitcoin positions. No single device compromise, no single location theft, and no single seed phrase exposure can result in loss. This setup also integrates naturally with inheritance plans — you can distribute keys among trusted parties who individually cannot access funds but collectively can. Read Multisig Recovery Protocols before committing, so you understand the recovery process.

How to Choose Based on Amount Stored

Rules of thumb are imperfect, but they provide a starting framework:

• Under $1,000: A reputable phone wallet that gives you a seed phrase (BlueWallet or the Blockstream app, for example), with the words written down and stored securely, may suffice. Hardware wallet is optional but still beneficial.
• $1,000 - $10,000: Single-sig hardware wallet + metal seed backup. This is the minimum for responsible custody at this level.
• $10,000 - $50,000: Single-sig hardware wallet + metal seed backup + BIP39 passphrase. Consider air-gapped operation.
• $50,000 - $250,000: Multisig 2-of-3 with multi-vendor hardware wallets. Metal backups for all seeds. Documented recovery process.
• $250,000+: Multisig 2-of-3 or 3-of-5 with geographically distributed keys, formal inheritance plan, and possibly a collaborative custody provider (Unchained, Casa) as one key holder. Multisig in Practice compares collaborative custody services.

These thresholds are subjective. A person whose net worth is $100,000 holding $20,000 in bitcoin might want multisig. A person worth $10 million holding $50,000 in bitcoin might be fine with single-sig. The question is always: what would losing this bitcoin mean to you?

Cold Storage Best Practices Checklist

1. Generate your seed on the hardware wallet. Never type a seed phrase into a computer or phone, and never use a website to generate one. For most devices, the normal setup is the right choice. Coldcards are the exception: a firmware flaw disclosed in July 2026 made them produce seeds with far less randomness than intended (see the advisory at the top), and current Coldcard firmware makes you add your own randomness (at least 50 dice rolls, 128 coin flips or 65 key presses), which it mixes with its own, before it creates a seed. A seed made on affected older firmware must be replaced, even after a firmware update, unless it meets Coinkite’s dice exception (50 or more fair, private rolls entered through Add Dice Rolls and never recorded, and you wrote down the words shown after the rolls); if you are not sure, replace it. On other devices, dice are optional. If you use them, follow your wallet maker’s instructions and roll in private; careless rolls can make a seed weaker, not stronger (our dice rolls guide shows the arithmetic). The BitBox02 and the Blockstream Jade take no rolls on the device: you turn your rolls into the first 23 words (or 11 for a 12-word seed on a Jade) with the maker’s lookup table, enter them as if restoring a wallet, and pick the last word at random from the valid options the device shows (BitBox explains how, and so does Blockstream). A seed made this way comes from your rolls, not the device’s randomness. The Trezor Safe 3 has no dice option. Then add a passphrase (item 7) as a second lock.
2. Verify your seed phrase backup immediately. Most hardware wallets have a “verify backup” feature. Use it before depositing any funds. Confirm every word matches what you wrote down or stamped.
3. Use metal for seed phrase storage. Paper is a temporary solution. Metal is a permanent one. Budget about $40-100 per seed phrase, and choose a design that kept its letters in independent tests: a punched plate, or tiles in a sturdy case (Method 4).
4. Store seed phrase backups separately from hardware wallets. The hardware wallet is a signing device. The metal backup is disaster recovery. In single-sig they should never be in the same location. In a 2-of-3 multisig, one place can hold a key’s device and that key’s own backup, as in the Method 2 figure, because it still holds only one key. Never put parts of two different keys in one place. Giving each seed a place of its own, away from its device, is stronger but needs more places.
5. Test recovery before depositing significant funds. Start with your device’s built-in backup check: you type the words from your backup on the device, and it tells you whether they match without erasing anything. On a Trezor Model One, the standard check has you type the words on the computer instead, so choose Advanced recovery there: the computer never learns your words. Only after that passes, restore on a second hardware wallet, or reset yours and restore, and check that the same first receive address appears. The built-in check covers only the words: if you use a passphrase, test it from its written copy before you reset anything, and type it in during the restore so you compare the passphrase wallet’s first address. In multisig, also import your descriptor into your coordinator and check that the addresses match. Repeat the check after you make a new metal copy, and look over each backup once a year. Our backup test guide covers each brand.
6. Keep firmware updated. Hardware wallet manufacturers release firmware updates to fix security vulnerabilities and add features. Update regularly, but verify the update source. See Firmware Updates Best Practices for safe update procedures.
7. Use a passphrase. The passphrase adds meaningful protection against physical theft of your seed phrase backup, with the trade-off of requiring an additional backup item. In single-sig it is your main second lock; for long-term savings we recommend one in multisig too.
8. Document your setup. Write down which hardware wallet model you use, which coordinator software, which derivation path, and where backups are stored. This documentation is critical for inheritance and for your own reference years later. Store this documentation separately from the seed phrases themselves.
9. Verify receive addresses on the hardware wallet screen. Before giving anyone a receive address, always confirm it matches what your hardware wallet displays. Clipboard-hijacking malware can substitute attacker addresses on your computer screen. In a multisig wallet, check the address on a device that has the wallet registered; a Trezor stores no multisig wallet, so also compare the cosigner keys it shows with your records.
10. Practice operational security. Do not discuss your bitcoin holdings publicly. Do not photograph your seed phrases. Do not store seed phrases digitally: no photos, cloud documents, text files, password managers or email drafts. Physical security fundamentals matter as much as cryptographic security.

For a deeper look at how custody practices have developed, read our multisig custody guide.

Frequently Asked Questions

How long can bitcoin stay in cold storage safely?

Indefinitely, as long as Bitcoin’s cryptography holds. No computer can break its elliptic curve cryptography (secp256k1) as of November 2026. A large quantum computer could one day work out a private key from its public key; the defence would be an upgrade to Bitcoin itself, and meanwhile you lower your exposure by never reusing addresses (Is Bitcoin Safe? explains). The practical limits are physical: your seed phrase backup must remain readable and accessible. Metal backups stored in stable environments will last decades or longer. Review your setup annually — not because the cryptography weakens, but because you might forget details of your own system, your physical locations might change, or your estate plan might need updating.

What happens if my hardware wallet breaks or the manufacturer goes out of business?

Your bitcoin is not stored on the hardware wallet. The hardware wallet stores your private keys and signs transactions. If the device breaks, buy another hardware wallet that accepts your backup’s format, restore from your seed phrase backup (plus your passphrase, if you use one), and your bitcoin is accessible again. Most 12- and 24-word backups are BIP39, which almost every hardware wallet accepts; a 20-word Trezor backup uses SLIP-39, which restores on every Trezor except the original Trezor One, and on wallets that support it, such as Sparrow and Electrum, so check before you buy a replacement, even another Trezor. Your funds exist on the Bitcoin blockchain, not on any device. The seed phrase is the ultimate key. Manufacturer bankruptcy is inconvenient (no more firmware updates, no more customer support) but not catastrophic if you have your seed phrase. For more on how wallets, keys and backups fit together, see What Is a Bitcoin Wallet? and Seed Phrases Explained.

Is a safe deposit box a good location for a seed phrase backup?

A bank safe deposit box provides physical security that exceeds what most home safes offer: fire suppression, flood protection, restricted access, and insurance in some cases. The downsides: bank access is limited to business hours (in most cases), you are trusting the bank’s physical security, and contents of safe deposit boxes can be legally seized in some jurisdictions. For a multisig setup, a safe deposit box is an excellent choice for one of the three key locations — but not all three. Geographic and institutional diversity matters. One key at home, one at a bank, and one at a trusted relative’s location is a robust distribution.

Can I use cold storage and still earn yield on my bitcoin?

No. True cold storage means you hold the keys and no one else can move your bitcoin. Custodial yield products (lending, staking proxies) require you to deposit bitcoin with a third party, which means giving them custody. Self-custodial staking schemes leave the key with you, but they lock your coins in a special script for a set time, some let others slash part of them, and the reward usually comes in another chain’s token. Neither is the plain cold storage this guide describes. Bitcoin you hand to a lender is a promise from that company, not coins you control: when Celsius and BlockFi collapsed in 2022, their customers lost access to their coins. Custodial vs Non-Custodial Wallets explains the difference. Keep your savings where only your keys can move them.

How do I set up cold storage for inheritance without giving heirs immediate access?

Multisig is the cleanest solution. In a 2-of-3 setup, you can hold two keys and give one key to an heir, a lawyer, or a trusted executor. During your lifetime, only you can spend (because you hold two keys). Upon your death, the heir needs one of your two remaining keys to reach the 2-of-3 threshold, plus a copy of the wallet descriptor so the wallet software can find the coins. Document the key locations and recovery process in your estate plan — stored with your attorney, not with the keys themselves. Some users use collaborative custody services like Unchained or Casa, where the company holds one key and assists heirs through a verified recovery process. Read Bitcoin Inheritance Planning for a comprehensive treatment of this topic.