Monero Cold Storage Guide — Hardware Wallets, Paper Wallets & Air-Gapped Security
How to store Monero offline so it can't be hacked, seized, or stolen. Updated for 2026.
TL;DR: The best Monero cold storage is an air-gapped Feather Wallet on Tails OS (free, maximum security). For convenience, use a Trezor Model T or Trezor Safe 3 hardware wallet. Paper wallets work for long-term storage but are harder to spend from. Always back up your 25-word seed phrase on metal, not paper.
Why Cold Storage Matters
If your Monero is in a hot wallet (connected to the internet), it's only as secure as your computer. A single malware infection, phishing attack, or clipboard hijacker can drain your funds. Monero's privacy protects you on-chain, but it can't protect keys stored on a compromised device.
Cold storage means your private spending keys never touch an internet-connected device. Even if every computer you own gets hacked, your cold-stored Monero remains untouched.
The rule of thumb: if losing the XMR would hurt, it belongs in cold storage.
Cold Storage Methods Compared
| Method |
Security |
Convenience |
Cost |
Best For |
| Air-gapped Feather |
Highest |
Low |
Free (need spare PC/USB) |
Large holdings, maximum paranoia |
| Trezor Model T / Safe 3 |
Very High |
High |
~$70–$180 |
Regular cold storage + spending |
| Ledger Nano S+ / X |
Very High |
Medium |
~$80–$150 |
Multi-coin users already on Ledger |
| Paper wallet |
High |
Very Low |
Free |
Long-term "forget it" storage |
| Metal seed backup |
Highest (fire/flood proof) |
Low |
$20–$80 |
Disaster-proof seed storage |
Method 1: Hardware Wallets (Trezor & Ledger)
Hardware wallets store your private keys on a tamper-resistant chip. Transactions are signed on the device itself — your keys never leave the hardware. This is the most convenient form of cold storage.
Trezor (Recommended for Monero)
Supported Models
- Trezor Model T — Full touchscreen, native Monero support. The gold standard.
- Trezor Safe 3 — Newer, secure element chip, Monero supported. Budget-friendly.
- Trezor Model One — Does NOT support Monero. Too limited.
Setup Steps
1 Buy from trezor.io directly. Never buy from Amazon/eBay (supply chain attacks). Verify the holographic seal on arrival.
2 Initialize the device. The Trezor generates a 12/24-word seed. Write it down on the included recovery card. Store safely.
3 Install Monero GUI or Feather Wallet on your computer. Both support Trezor as a signing device.
4 Connect Trezor → Open wallet → Select "Create wallet from hardware device". The wallet communicates with Trezor for all key operations.
5 Receive Monero. Generate a subaddress in the wallet. Share it with your sender. Funds arrive and are secured by the Trezor's chip.
6 Spending: Create a transaction in the wallet software → Trezor asks you to confirm amount & destination on its screen → Sign on device → Broadcast. Keys never leave Trezor.
Ledger
Ledger Nano S Plus and Ledger Nano X both support Monero via the Monero app (install through Ledger Live). You use the Monero GUI wallet as the interface — Ledger Live itself does not display Monero.
Ledger Caveats: In 2023, Ledger suffered a customer database breach (emails, names, addresses leaked). The hardware remained secure, but the data breach eroded trust. Ledger also introduced a controversial "Recovery" feature that theoretically extracts seed shards from the device. If you use Ledger, never enable Ledger Recover and consider the supply-chain implications of their data breach. Many Monero users prefer Trezor for this reason.
Hardware Wallet Comparison
| Feature |
Trezor Model T |
Trezor Safe 3 |
Ledger Nano S+ |
Ledger Nano X |
| Monero support | Native | Native | Via app | Via app |
| Screen | Color touch | OLED | OLED | OLED |
| Secure element | No | Yes | Yes | Yes |
| Open source firmware | Yes | Yes | No | No |
| Companion wallet | Feather / GUI | Feather / GUI | GUI only | GUI only |
| Price | ~$180 | ~$70 | ~$80 | ~$150 |
| Bluetooth | No | No | No | Yes |
Verdict: For Monero specifically, Trezor Safe 3 offers the best value ($70, native support, open-source firmware, secure element). Trezor Model T if you want the touchscreen. Ledger only if you already own one for other coins.
Method 2: Air-Gapped Feather Wallet (Maximum Security)
The most secure Monero cold storage method. Your keys are generated and used on a computer that has never been connected to the internet. No hardware wallet vendor trust required. No supply chain risk. No proprietary firmware.
What You Need
- A spare laptop or PC (even an old one works)
- Tails OS USB boot drive (amnesic, leaves no trace)
- A second USB drive for transferring unsigned/signed transactions
- Feather Wallet AppImage (downloaded on a separate device, transferred to Tails via USB)
Setup: The Offline Computer
1 Disable WiFi/Bluetooth permanently. On the spare laptop: physically remove the WiFi card, or use a desktop PC with no network card. If neither is possible, boot Tails and verify airplane mode is on — but physical removal is always better.
2 Boot Tails OS from USB. Tails runs entirely in RAM. When you shut down, nothing is saved to disk. This is your air-gapped signing environment.
3 Copy Feather Wallet AppImage to Tails. Use the second USB drive. Transfer the AppImage from your internet-connected computer to Tails. Verify the GPG signature if possible.
4 Run Feather Wallet → Create New Wallet. It generates your 25-word Monero seed phrase. Write it down on paper or stamp into metal. This seed never touches an internet-connected device.
5 Export view-only wallet. In Feather: Wallet → View-Only → Create view-only wallet file. Save this file to your USB drive. The view-only wallet contains your private view key (can see incoming funds) but NOT your spend key (cannot send funds).
Daily Use: View-Only Wallet (Online)
6 Import the view-only wallet into Feather Wallet on your regular (internet-connected) computer. This wallet shows your balance and incoming transactions but cannot spend.
7 Receive Monero by sharing subaddresses from the view-only wallet. Funds go directly into cold storage.
Spending: Offline Signing Workflow
8 Online computer: Create an unsigned transaction in the view-only wallet. Export the .unsigned.txset file to USB.
9 Air-gapped computer: Boot Tails. Open Feather with your full wallet. Load the unsigned transaction from USB. Review the details. Sign it. Save the .signed.txset file to USB.
10 Online computer: Load the signed transaction in the view-only wallet. Broadcast to the Monero network. Done — keys never touched the internet.
Security note: The USB drive is the only bridge between your air-gapped and online computers. Use a dedicated USB drive for this purpose only. Consider using a
USB data blocker for the online side to prevent firmware-level attacks.
Method 3: Paper Wallets
A paper wallet is simply your 25-word seed phrase and primary address written or printed on paper. No device needed for storage — just paper and ink.
Creating a Paper Wallet Securely
1 Boot an air-gapped computer with Tails OS (same setup as above).
2 Run monero-wallet-cli or Feather Wallet.
3 Create a new wallet. Write down: the 25-word seed phrase and the primary address (starts with 4).
4 Optional: also note the private view key (for creating a watch-only wallet later).
5 Shut down. Tails erases all data from RAM.
6 Store the paper in a fireproof safe or safety deposit box.
Paper wallet risks: Paper degrades (water, fire, ink fading). For anything over a few hundred dollars, use a metal seed backup instead. Never print from an internet-connected printer (print queues store documents). Hand-write or stamp.
Spending from a Paper Wallet
To spend, you must restore the full wallet from the seed phrase on an air-gapped device, create and sign the transaction, then broadcast from an online device. This is the same workflow as the air-gapped Feather method above. Paper wallets are "cold" but not convenient for regular spending.
Seed Phrase Backup: Paper vs. Metal
Your 25-word seed phrase IS your Monero. Everything else (hardware wallets, software, devices) is replaceable. The seed is not. How you store it determines whether your Monero survives a house fire.
| Backup Method |
Fire Resistant |
Water Resistant |
Tamper Evident |
Cost |
| Paper (handwritten) | No | No | No | Free |
| Laminated paper | No | Yes | No | $2 |
| Cryptosteel Capsule | Yes (1400°C) | Yes | Yes (sealed) | ~$80 |
| Billfodl / Blockplate | Yes (1200°C+) | Yes | Partial | $50–70 |
| DIY metal stamping | Yes | Yes | No | $15–30 |
Recommendation: For holdings under $1,000, handwritten paper in a fireproof safe is fine. Over $1,000, use a metal backup. DIY steel stamping is the best value: buy a letter stamp set (~$15) and a stainless steel plate (~$5) from a hardware store. Stamp all 25 words. Done.
Advanced: Split Seed Storage
For very high-value holdings, consider splitting your seed so no single location compromise reveals the full key:
2-of-3 Shamir's Secret Sharing
Split your seed into 3 shares. Any 2 shares reconstruct the seed, but 1 share alone reveals nothing. Store each share in a different physical location (home safe, safety deposit box, trusted family member).
Tools: iancoleman.io/shamir/ (run offline on air-gapped device) or ssss-split (Linux CLI).
Trade-off: More complex recovery. If you forget where you stored a share, or two locations are compromised simultaneously, you lose access or get robbed. Only use this for holdings where the complexity is justified.
View-Only Wallets Explained
A view-only wallet contains your private view key and public address but NOT your private spend key. This means:
- Can see: Incoming transactions, balance (partially — outgoing transactions are invisible without the spend key)
- Cannot do: Spend, sign transactions, or reveal the spend key
- Use case: Monitor cold storage from your everyday computer, or prove income to an auditor without exposing spending ability
Creating a view-only wallet in Feather Wallet: Wallet → View-Only → Create view-only wallet. This exports a wallet file you can open on any computer.
Privacy note: Anyone with your view key can see all incoming transactions to your wallet. Only share it with people you trust with your financial information. Monero's
privacy properties protect you from the public, but the view key deliberately bypasses that privacy for the key holder. The upcoming
FCMP upgrade does not change view key behavior.
Cold Storage for P2P Traders
If you buy Monero without KYC or sell Monero for cash, cold storage is essential for protecting profits:
Recommended Setup for Active Traders
- Hot wallet (Feather Wallet): 1–3 XMR for active trades. Quick access.
- Cold storage (Trezor or air-gapped Feather): Everything else. Move profits from hot to cold regularly.
- Generate a fresh subaddress for each trade (hot wallet). Never reuse addresses.
- After completing a trade, send profits from hot wallet to cold storage. Use churning (self-transfers) if you want additional privacy between hot and cold wallets, though Monero's default privacy is already strong.
For Cash by Mail trades where settlement takes days, keep the trade amount in your hot wallet until the trade finalizes on Haveno or escrow. Then sweep to cold storage.
Common Mistakes to Avoid
Storing seed digitally
Screenshots, text files, cloud notes, password managers. All are vulnerable to malware, breaches, and data leaks. Write on paper or stamp on metal. Period.
Buying hardware wallets from resellers
Amazon, eBay, and third-party sellers can pre-seed devices with known keys. Buy directly from trezor.io or ledger.com only. Verify tamper-evident packaging.
Using web-based "paper wallet generators"
Any website that generates keys for you can steal them. Keys MUST be generated offline. If you can't verify the code, don't use it.
Forgetting to test recovery
Before sending significant funds to cold storage, restore from the seed on a different device. Confirm you get the same address. Only then trust it with real money.
Single-location backup
If your house burns down and both your device and seed are in the same building, everything is lost. Keep at least one backup off-site.
Not using a view-only wallet
Without a view-only wallet, you can't check your cold storage balance without exposing your spend key. Always set one up.
Quick Decision Guide
Under $500: Feather Wallet (hot) is fine. Write down your seed phrase and keep it safe. Cold storage is optional.
$500–$5,000: Get a Trezor Safe 3 ($70). Easy to use, solid security. Metal seed backup recommended.
$5,000–$50,000: Trezor Model T or air-gapped Feather on Tails. Metal seed backup (Cryptosteel or DIY stamp). Consider 2-of-3 split storage.
$50,000+: Air-gapped Feather + Tails. Metal seed backup in 2-of-3 Shamir split across 3 geographic locations. View-only wallet for monitoring. Test recovery annually. Consider multisig (2-of-3) for institutional-grade security.
Buy or Sell Monero — Then Store It Right
I offer private XMR ↔ EUR trades via Cash by Mail (EU-wide) and Face-to-Face in SW Germany.
683 completed trades • 454 partners • 100% feedback
Previously chingchongfalung on LocalMonero/AgoraDesk (archived proof)
Telegram: @arnoldnakamura |
Signal: +7578818677 |
Session: 05397126c...ccc71e