How to Store Crypto Safely
Keep your keys offline and under your own control: the practical steps to store cryptocurrency safely, from hardware wallets to seed-phrase backups.

On this page
Storing cryptocurrency safely comes down to one principle: keep your private keys offline and under your own control. Do that, and the hacks, exchange failures, and phishing scams that drain most people simply cannot reach you.
With roughly $2.2 billion in crypto stolen in 2024 alone, and compromised keys behind nearly half of it, secure storage is not optional. This guide covers the practical steps to store cryptocurrency safely, from choosing the right wallet to protecting your recovery phrase, so your digital assets stay in secure storage under your control.
Not your keys, not your coins. If someone else controls the private keys, you are trusting them with your money; if you control them, security becomes your responsibility, and your advantage.
The core rule of crypto storage
The golden rule: cold for savings, hot for spending
The single most important habit is splitting your holdings by purpose. Keep the bulk of your cryptocurrency in offline cold storage, and only a small spending balance in a connected hot wallet.
A common allocation is to keep the large majority of your funds in a hardware wallet and just a small share on an exchange or mobile wallet for active trading. That way a compromise of the connected wallet only ever exposes the little you keep there, never the whole portfolio. See the full breakdown in hot wallet vs cold wallet.
Choose the right storage method
Each way to store cryptocurrency trades security against convenience, so match the storage method to the job. The main options are hardware wallets, software wallets, exchange accounts, paper wallets, and multisig wallets.
| Method | Security | Best for |
|---|---|---|
| Hardware wallet (cold) | Very high, keys stay offline | Long-term holding of the bulk of funds |
| Mobile or desktop wallet (hot) | Moderate, keys on a connected device | Small amounts for daily spending and DeFi |
| Exchange account (custodial) | Depends on the exchange | Active trading only, not storage |
| Paper wallet | Offline but fragile and error-prone | Rarely recommended today |
| Multisig wallet | Very high, no single point of failure | Large holdings and shared treasuries |
For almost everyone, hardware wallets plus a reputable hot wallet are the right combination. Cold wallets protect the bulk offline, hot wallets handle daily access, and paper wallets are best avoided. A multisig wallet adds another layer for large or shared funds. Whichever wallets you choose, guard against both online theft and the physical loss of a device.
Use a hardware wallet for the bulk of your crypto
A hardware wallet keeps your private keys on a dedicated offline device and signs transactions internally, so malware on your computer can never reach them. It is the safest practical way to hold significant cryptocurrency, and if the device is ever lost you regain access to your funds from the seed-phrase backup.
- Buy new, direct from the maker or an official reseller, never used.
- Check the packaging for tamper-evident seals before setup.
- Set a strong PIN and move funds over with a small test transaction first.
Our best hardware wallets round-up compares the top devices, led by the Ledger Nano X and Trezor Safe 5, each built around a certified secure element.
Protect your seed phrase above all else
Your seed phrase is the master backup of every key. Whoever holds it controls the wallet, so it deserves more care than anything else in this guide.
- Write it on paper or stamp it into metal, never a photo, screenshot, or cloud file.
- Keep it fully offline and store backups in separate secure locations, so one fire or flood cannot destroy every copy.
- Never type it into a website or share it with anyone, including "support" staff.
Metal backup plates survive fire and water that would destroy paper, which is why serious holders use them for long-term storage.
Lock down your accounts
Even with cold storage, the online accounts around your crypto need hardening, because attackers target the weakest link. Keeping software wallets and apps updated, and guarding how you access them, blocks most online attacks before they start.
| Practice | Why it matters |
|---|---|
| Enable app-based 2FA | Use an authenticator app, not SMS, which can be SIM-swapped |
| Strong, unique passwords | A password manager stops one breach from spreading |
| Keep software updated | Updates patch the vulnerabilities hackers exploit |
| Use a clean device | Avoid public Wi-Fi and keep antivirus current |
These steps cost nothing and close the doors that most real-world thefts walk through. Together with offline backups and cold storage, they keep both hot wallets and your savings safe from online risks.
Avoid the common traps
Most losses are not sophisticated hacks; they are avoidable mistakes. The biggest risks to your crypto are online attacks, phishing, and simple human error, and good habits keep your funds safe from all three. Loss of funds is almost always preventable.
- Leaving large sums on an exchange. Exchanges are custodial and a prime target; move long-term holdings to your own wallet.
- Falling for phishing. Never click wallet links in emails or DMs, and always type the address yourself.
- Skipping the address check. Verify the receiving address on your hardware wallet screen, not just the computer.
Attackers rarely break the cryptography. They trick a person into typing a seed phrase into a fake page or approving a bad transaction.
Where crypto theft actually happens
How much to keep, and where
For long-term holders
If you are buying and holding, store almost everything in a hardware wallet and treat that cold storage like a savings vault you rarely open. Hardware wallets keep the private keys offline, so this is the safest long-term storage. Only move funds when you genuinely need to, and keep just enough elsewhere for fees.
For active traders
If you trade often, a larger hot balance is a practical necessity, but it should still be money you could afford to lose. Sweep profits back into cold storage regularly rather than letting a big balance build up on a connected device or exchange.
What if your device is lost or stolen?
Good storage is not just about preventing theft; it is about staying calm when hardware fails or goes missing. If you have followed the steps above, a lost device is an inconvenience, not a disaster.
If you lose a hardware wallet
Your funds are safe as long as you have the seed-phrase backup and a PIN protects the device. Buy a new wallet, restore from the phrase, and move the funds to a fresh setup if you suspect the old device was compromised. Anyone who finds the lost device still cannot open it without the PIN.
If a phone with a hot wallet is stolen
Because only a small spending balance lives there, the exposure is limited. Restore that wallet from its recovery phrase on a new phone, and if you are worried, move the remaining funds to a new address. This is exactly why the bulk of your holdings belongs in cold storage, not on a connected device.
Common crypto storage mistakes
| Mistake | Do this instead |
|---|---|
| Keeping everything on an exchange | Move long-term holdings to a hardware wallet |
| Storing the seed phrase digitally | Keep it offline on paper or metal |
| Using SMS for two-factor codes | Switch to an authenticator app |
| Reusing one password everywhere | Use a manager with unique passwords |
| Moving a large sum with no test | Send a small test transfer first |
Frequently asked
What is the safest way to store crypto?
Keeping the bulk of your holdings in a hardware wallet, offline in cold storage, is the safest practical method. The private keys never touch an internet-connected device, so remote hackers cannot reach them. Only keep a small spending balance in a hot wallet.
Should I keep my crypto on an exchange?
Only what you are actively trading. An exchange is a custodial hot wallet, meaning it holds your keys and is a prime target for hackers. Move long-term holdings to your own hardware wallet, where you alone control the keys.
How much of my crypto should be in cold storage?
A common rule is to keep the large majority in cold storage on a hardware wallet and only a small share in a hot wallet or on an exchange for active trading. Size the hot balance to what you could afford to lose.
How do I protect my seed phrase?
Write it on paper or stamp it into metal, keep it fully offline, and store a second copy in a separate secure location. Never save it as a photo, screenshot, or cloud file, never type it into a website, and never share it with anyone.
Is a hardware wallet worth it?
For anyone holding more crypto than they would be comfortable losing to a hack, yes. A hardware wallet costs around $50 to $200 and keeps your keys offline, which is a small price for removing the biggest risk to your funds.
What is the best 2FA for crypto accounts?
An authenticator app such as Google Authenticator or Authy, not SMS. Text-message codes can be intercepted through SIM-swap attacks, while an app generates codes on your device that an attacker cannot capture remotely.
Can crypto be stolen from a hardware wallet?
Remotely, it is extremely resistant, because the keys stay offline. The realistic risks are physical: a lost seed phrase, a tampered second-hand device, or approving a malicious transaction. Buying new and verifying addresses on the device prevents these.
How do I safely move crypto to a new wallet?
Send a small test transaction first, confirm it arrives, then move the rest. Always verify the receiving address on your hardware wallet screen rather than trusting only the computer, since malware can swap a copied address.
Are paper wallets safe?
They are offline, which is good, but they are fragile and error-prone, and a single mistake can lose the funds. For most people a hardware wallet delivers the same offline security with far less risk, so paper wallets are rarely recommended today.
How do I avoid crypto phishing scams?
Never click wallet or exchange links in emails or direct messages, always type addresses yourself, and treat any request for your seed phrase as a scam. Most theft happens when someone is tricked into entering their phrase on a fake page.
Should I keep backups of my recovery phrase?
Yes. Keep at least two copies in separate secure locations, so a single fire, flood, or burglary does not wipe out your only backup. Metal backups add protection against fire and water that paper cannot survive.
What is the biggest mistake people make storing crypto?
Leaving large amounts on an exchange or in a hot wallet, and storing the seed phrase digitally. Both put your funds one breach away from being drained. Cold storage plus an offline, physical seed-phrase backup removes most of the risk.
See which wallets we actually recommend
Every wallet in the register was bought at our own cost and scored on one fixed standard.
Read the register →