Candleread
Crypto and DeFi · Custody and Security

Cold wallets: the setup that matters

Explain what a hardware wallet is, how it works, and when a trader should actually buy one.

3 min read+25 XPLesson 62 of 79
Start reading

Lesson path

Crypto and DeFi

Custody and Security

Lesson 62 of 7978%
Lesson 62 of 79Crypto and DeFiCustody and Security

Today's tiny win: make one idea click.

Explain what a hardware wallet is, how it works, and when a trader should actually buy one.

Learn itSpot itPass the check

What 'cold' actually means

Cold means offline. A cold wallet is usually a small dedicated device — a hardware wallet — that holds your private keys and never lets them leave. You connect the device to your computer or phone to send a transaction. The device shows you the details on its own screen. You press a physical button to approve. Only then does a signed transaction go out. The key itself stays inside the device, even when it's plugged in.

Wick holds a shield labeled its screen that blocks falling candles from a lying computer, showing why a hardware wallet's screen is the source of truth.Lying computerSee the truthItsscreen
Wick saysThe device's own screen shows what you really sign, even if your computer lies.

Why does that matter? Because most crypto theft happens when an attacker reaches keys that were sitting on an internet-connected machine. If the keys never touch the internet — never sit in a browser, a phone app, a desktop file — there is nothing for a remote attacker to reach. They'd have to be holding the device.

The leading consumer hardware wallets are well known and well audited. The setup is roughly the same across them: take it out of the box, generate a fresh seed phrase on the device itself, write the seed down, set a PIN, and you're running. The device handles thousands of transactions over its life and the seed phrase becomes the only thing that can rebuild the wallet if the device is lost.

Two cards: a green card says buy direct from the maker, a coral card says grab a reseller discount, teaching why tampered devices make resellers risky.Do thisBuy direct fromthe makerNot thisGrab a resellerdiscount
Wick saysBuy a hardware wallet direct from the maker, since a reseller box could be tampered with.

Two non-negotiables. One: buy direct from the manufacturer, not from a reseller marketplace where a tampered device could have been inserted into the box. Two: when you set up, the seed phrase the device generates must be a fresh seed it just generated — never accept a seed that someone else 'gave you' or that came pre-printed in a box. A pre-set seed means someone else has the keys.

Cost-benefit for a small account: a hardware wallet runs roughly $60-$200. At a $500 trading capital level, that's a heavy tax. The honest call is to skip dedicated hardware until your long-term holdings are large enough that the cost is rounding error — usually $5,000 and up. Below that, a mobile wallet used carefully is reasonable. Above that, hardware is the floor.

Wick points at a chalkboard: device costs $60 to $200, under $5,000 wait, $5,000 and up yes, showing when a hardware wallet is worth its price.When to buy oneDevice: $60 to $200Under $5,000: wait$5,000 and up: yes
Wick saysOn a $500 account a $60 to $200 device is a heavy cost; around $5,000 held, it is the floor.

Recap: a hardware wallet keeps the key off the internet and shows the truth on its own screen. Buy direct, generate a fresh seed, and don't bother until you have enough at stake to make the cost worth it.

Knowledge check

Answer before moving on.

0 / 3 answered

1. What is the core security property of a hardware wallet?

2. You see a 'great deal' on a popular hardware wallet from a third-party reseller. Should you buy?

3. You have a $500 active trading account on a reputable exchange. Should you buy a hardware wallet today?

Lesson handoff

Pass the check before saving.

Use the knowledge check first. After you pass it, this card turns into the save-and-continue handoff.