SeedSigner review 2026: open-source DIY air-gapped Bitcoin signing device. Stateless design, full transparency, ~$50 in parts. Who should build one?
Moving Bitcoin from an exchange to cold storage is the most important action a Bitcoin holder can take. Not your keys, not your coins — and exchanges have failed, been hacked, and frozen withdrawals throughout Bitcoin's history. Cold storage puts your private keys on a device that never touches the internet, making remote theft effectively impossible.
This guide walks through the entire process: choosing a hardware wallet, setting it up securely, and moving Bitcoin from an exchange with verified addresses.
Why Cold Storage Matters
When you hold Bitcoin on an exchange, you hold an IOU — not Bitcoin. The exchange controls the private keys. If the exchange is hacked (Mt. Gox, Bitfinex, FTX), insolvent (Celsius, BlockFi), or freezes withdrawals, your access to your Bitcoin is at their discretion.
Cold storage means you hold the private keys. The exchange becomes irrelevant. Your Bitcoin is accessible as long as you have your hardware wallet or seed phrase — regardless of what happens to any company.
Step 1: Choose a Hardware Wallet
For most people moving Bitcoin to cold storage for the first time, we recommend one of three devices:
Blockstream Jade Plus — Best for beginners ($65) Air-gapped QR code signing, open-source firmware, solid companion app. The best value in the market.
BitBox02 Bitcoin-Only Edition — Best for simplicity ($149) Plugs in via USB-C, excellent BitBoxApp, straightforward setup. Swiss-made, strong track record.
Foundation Passport — Best overall ($199) Open-source hardware and firmware, air-gapped QR workflow, beautiful design. Recommended for those moving more than $10,000 to cold storage.
Coldcard Mk4 — Best for advanced users ($150) Highest security, air-gapped, Duress wallet, advanced PSBT. Best choice if you want maximum control and are willing to invest time learning.
Avoid: Ledger devices have had notable security incidents (customer data breach, Ledger Connect Kit hack). Trezor's Model T had a vulnerability exposing seed phrases to physical attackers. Neither is disqualifying for cold storage, but better options exist at similar price points.
Step 2: Set Up the Hardware Wallet Securely
Physical security first
- Set up in a private location, away from cameras and other people
- Do not photograph the seed phrase or enter it digitally anywhere
- Ensure no screen recording software is running on any nearby device
Initialize the device
- Plug in (or power on) the hardware wallet
- Follow the setup wizard to generate a new wallet
- The device generates a 24-word seed phrase — this is the master key to all funds
Write down the seed phrase
- Write all 24 words in order on the provided paper card
- Double-check each word carefully — even one wrong word makes recovery impossible
- Verify: most devices ask you to confirm words in random order to ensure you copied correctly
Back up the seed phrase properly
Paper (short term): Fine as temporary backup. Vulnerable to fire and water.
Steel backup (permanent): Stamp or engrave the seed words into a steel plate. Products like Billfodl and BlockPlate are purpose-built for this. A steel backup survives house fires (paper does not).
Location: Store the seed phrase separately from the hardware wallet. If both are in the same location, one physical compromise exposes everything. Common setup: hardware wallet at home, steel seed backup in a bank safe deposit box.
Set a PIN
Every hardware wallet lets you set a PIN. Use a PIN that's memorable but not guessable. Write it somewhere separate from the seed phrase — ideally memorize it.
Optional: Add a passphrase (25th word)
Hardware wallets support an optional passphrase (sometimes called a 25th word) that creates a completely separate wallet within the same seed. This is an advanced feature — if you use it, document it carefully or you will lose access to those funds permanently.
Step 3: Get Your Cold Storage Receive Address
Before transferring from an exchange, you need your hardware wallet's Bitcoin receive address.
- Open the companion app (BitBoxApp, Sparrow Wallet, BlueWallet, etc.) on your computer or phone
- Connect your hardware wallet
- The app displays your wallet's receive address — a string of letters and numbers starting with "bc1"
- Verify the address on the hardware wallet screen — this is critical. A compromised computer could display a malicious address in the app. Always confirm the address matches on the hardware wallet's own screen.
Send a test transaction first. Before moving your full balance, send $20-50 worth of Bitcoin. Wait for confirmation. Verify it arrived. Only then send the remainder.
Step 4: Withdraw from the Exchange
On your exchange (Coinbase, Kraken, Gemini, etc.):
- Navigate to "Send" or "Withdraw" Bitcoin
- Paste your hardware wallet receive address
- Verify the address character by character — especially the first 6 and last 6 characters
- Enter the amount (start with a test amount)
- Complete any 2FA verification the exchange requires
- Submit the withdrawal
Network fees: Bitcoin withdrawals incur an on-chain transaction fee paid to miners. Exchanges typically show the estimated fee before confirmation. During congested periods, fees can be $5-50. During quiet periods, $1-5.
Confirmation time: Bitcoin transactions typically confirm in 10-60 minutes. Some exchanges require additional internal confirmations (1-6 blocks) before the funds appear in your wallet. This is normal.
Step 5: Verify the Bitcoin Arrived
Once the transaction is broadcast:
- Your companion app should show the transaction as "pending" and then "confirmed"
- You can also look up the transaction on a block explorer (mempool.space) using the transaction ID
- After 1-3 confirmations, the balance appears in your hardware wallet
- Now repeat with your full balance
Hardware Wallet vs. Software Wallet for Cold Storage
| Hardware Wallet | Software Wallet | |
|---|---|---|
| Key storage | Dedicated secure chip, offline | Phone or computer, online |
| Remote attack resistance | Very high | Medium |
| Cost | $65-$250 | Usually free |
| Recommended for | Any amount above $1,000 | Spending wallet only |
See our full hardware wallet vs software wallet comparison for more detail.
After You've Moved Bitcoin to Cold Storage
Test your recovery: With no funds on the wallet, practice restoring from your seed phrase on the same device (using the recovery option). This confirms your backup works. Do this before sending significant funds.
Don't reconnect to the exchange. Once you've moved to cold storage, the point is not to move it back. Your cold storage address is for long-term holding.
Consider your inheritance plan. Your heirs need to know your seed phrase exists and where to find it. See our Bitcoin letter of instruction guide.
For larger amounts ($100k+), consider multisig. A 2-of-3 multisig wallet distributes your keys across multiple devices and locations, eliminating single points of failure. See our Bitcoin multisig guide.
Cold Storage Checklist
- Hardware wallet purchased from official manufacturer (not third parties)
- Device initialized with a new seed (never use a pre-loaded seed)
- 24-word seed phrase written down and verified
- Steel backup created and stored separately from the device
- Companion software installed and wallet confirmed accessible
- Receive address verified on hardware wallet screen (not just the app)
- Test transaction sent and confirmed
- Remaining balance transferred
- Recovery tested (seed phrase restore successfully confirmed)
FAQ
Can I use the same hardware wallet for multiple addresses? Yes. Hardware wallets generate a near-infinite number of addresses from your seed. You can receive to different addresses each time for privacy — all are controlled by the same seed phrase.
What if I lose my hardware wallet? Buy a new hardware wallet, enter your seed phrase, and your Bitcoin appears. The hardware is just a key — the seed phrase is the actual wallet.
Can I store multiple cryptocurrencies on one hardware wallet? Most hardware wallets (except the BitBox02 Bitcoin-Only Edition) support multiple coins. If you're only holding Bitcoin, the Bitcoin-only edition has a smaller attack surface (less code = less risk).
Do I need internet to receive Bitcoin? No. You can generate and share your receive address without the device being connected to anything. Bitcoin is sent on the network — your device just stores the keys to access it.
How do I spend Bitcoin from cold storage? Connect your hardware wallet, open the companion app, create a transaction, confirm the address and amount on the hardware wallet screen, sign with your PIN. The signed transaction broadcasts to the network. Your Bitcoin moves.