Was ist eine Cold-Wallet (Offline-Wallet)? Top Cold Wallets in 2025

In der Kryptowelt geht es oft zu wie im Wilden Westen. Markets can react to the slightest good or bad news, and new and innovative tech comes out every month. Transactions are immutable, stakes are high, and security threats are very real.

In all of this, one thing is constant: the importance of storing your digital assets properly and safely away from bad actors. Es mag zunächst abschrecken, sich mit der Vielzahl an Betrugsmaschen auseinanderzusetzen, mit denen Krypto-Anwender ins Visier genommen werden. However, armed with the right knowledge and tools, you can keep your assets secure. Of course, the most important tool in crypto is the one you use to manage your assets and store your private keys – your wallet.

Genau hier setzen Offline-Wallets an. To explain, cold wallets provide the ultimate level of wallet security for your digital assets by protecting you from online threats (and sometimes even your own mistakes!).

In diesem Ledger Academy-Artikel erörtern wir, was genau eine Offline-Wallet ist und wie ihr Einsatz deine digitalen Vermögenswerte absichert.

Dann sehen wir uns das einmal genauer an.

Understanding Crypto Wallets

Although it’s commonly said that crypto wallets store cryptocurrency, that’s not actually the case because crypto lives on the blockchain. Instead, today’s crypto wallets serve two essential purposes: providing an interface to access and manage your digital assets, and storing your private keys. 

Private keys are used to prove ownership of assets and authorize blockchain transactions. You can think of them like a unique password to your digital funds. Crucially, whoever has your private keys has full access to your assets, so keeping your private keys – and the wallet that stores them – secure is the first rule of security in crypto.

What is a Crypto Cold Wallet?

Eine Offline-Wallet ist eine Krypto-Wallet, die weder eine Internetverbindung herstellt noch mit Smart Contracts interagiert. Weil Offline-Wallets nicht online gehen, sind sie vor Bedrohungen aus dem Netz – wie Malware oder Spyware – geschützt. Außerdem verhindert die Trennung von Smart Contracts unerwünschte Genehmigungen. Im Grunde genommen sind Offline-Wallets ausschließlich zum Versenden und Empfangen von Vermögenswerten gedacht.

Many use the terms ‘cold wallet’ and ‘hardware wallet’ interchangeably, but it’s important to note that this is not entirely accurate. Offline-Wallets gibt es in unterschiedlichen Varianten, und nicht jede Hardware-Wallet ist eine Offline-Wallet. Um zu verstehen, warum das so ist, schauen wir uns zunächst an, wofür Offline-Wallets gedacht sind.

Wofür ist eine Offline-Wallet gedacht? The Benefits of Cold Storage

A cold wallet is perfect for protecting high-value crypto assets long-term, primarily due to its security features. That is to say, it keeps your keys offline and protects you from on-chain threats. Sehen wir uns an, wie diese Sicherheitsmerkmale funktionieren.

Cold Wallets Allow for Self-Custody

In crypto, self-custody means that you are in control of your private keys. This is important because to truly own your crypto, you must be the only one with access to the keys that control it. When you store crypto on an exchange or other custodial service, you’re essentially trusting that third party with your assets, similar to how a bank holds your money.

By their nature, all cold wallets are noncustodial, which means that when you set up a cold wallet, you are responsible for securing your private keys and recovery phrases. This responsibility comes with both benefits and risks. While you maintain complete control over your assets, you also assume full responsibility for their safekeeping. If you lose access to your cold wallet or forget your recovery phrase, you lose access to the crypto tied to that account.

Offline-Wallets bewahren deine privaten Schlüssel offline auf

As a reminder, your crypto is stored in an account on the blockchain, and your crypto wallet stores the private key that allows you to control that account. Dieses Detail ist wesentlich für das Verständnis, da die Methode, mit der deine Wallet die privaten Schlüssel aufbewahrt, entscheidend für ihre Sicherheit ist.

For example, a software (hot) wallet stores your private keys on a device connected to the internet. Bei der Signierung von Transaktionen mithilfe solcher Wallets könntest du unbeabsichtigt deine privaten Schlüssel über deine Internetverbindung gegenüber Hackern offenlegen. To avoid these threats, cold wallets generate and store private keys offline. So bleibt dein Konto auch beim Signieren von Transaktionen vor Angreifern geschützt.

Offline-Wallets schützen deine Vermögenswerte vor Bedrohungen auf der Blockchain

Zudem bieten Offline-Wallets Schutz für deine Vermögenswerte gegen schädliche Funktionen in Smart Contracts und Apps. To explain, you need to sign approvals to use blockchain apps.

Stell dir vor, du möchtest ein NFT auf einem Marktplatz verkaufen. Damit diese Transaktion auch in deiner Abwesenheit durchgeführt werden kann, muss der Smart Contract des NFT-Marktplatzes deine Erlaubnis haben, einen bestimmten Vermögenswert zu verschieben. This makes decentralized transactions easy, as the marketplace can move assets on your behalf.

However, signing any smart contract approval can also pose a threat to your account. Nicht alle Smart Contracts haben dein Bestes im Sinn, und wenn du einen bösartigen Smart Contract genehmigst, können die Folgen deutlich über den Verkauf eines NFT hinausgehen.

Most crypto scammers will use this exact method to gain access to your funds. Believe it or not, over $2.7 billion was lost to malicious smart contract scams in 2022 alone. That being said, bling signing, when you sign a transaction you don’t fully understand, is a major cause of these kinds of losses. Using a hardware wallet with Clear Signing, such as a Ledger signer, can help prevent falling victim to a malicious smart contract.

Of course, a malicious smart contract can’t touch your assets unless you permit it, so another way to keep your assets safe is to avoid smart contracts entirely, which is another fundamental property of cold wallets.

Types of Cold Wallets

Nicht alle Offline-Wallets sind gleich konzipiert. Each type of cold wallet can fulfill the primary purpose of keeping your private keys offline and avoiding smart contracts, but there are key differences in security, user-friendliness, and accessibility. Sehen wir uns das genauer an:

Hardware-Wallets

Hardware wallets (also known as signer) generate and store your private keys offline in a secure physical device isolated from your internet connection. So, how do they send transactions to the blockchain?

Well, unlike paper or sound wallets, hardware wallets offer you an interface, usually in the form of an app that you install on your computer or smartphone. For Ledger signers, this all-in-one crypto app is Ledger Wallet™. Using a all-in-one crypto app, hardware wallets, also known as signers, can sign transactions offline and then transmit the signed transaction to an internet-connected device. Essentially, you can interact with the blockchain without compromising the security of your private keys.

Another reason hardware wallets are so popular is that they protect your private keys from loss and physical damage. Initiating a Ledger signer will present you with a secret recovery phrase, a simple mnemonic that allows you to restore your accounts using any HD wallet provider. So even if you lose your physical wallet, you can regain access to your accounts by importing your secret recovery phrase into a new hardware wallet. Plus, even if the physical signer falls into the wrong hands, hardware wallets typically protect your assets from physical access too. 

Ledger signers use a PIN code, which guarantees that only the wallet’s owner can unlock the signer. Plus, it also uses a cutting-edge computer chip, the Secure Element, to protect the signer from physical hacks such as side-channel attacks and glitching.

Finally, hardware wallets are the best option for setting up cold wallets due to their capability to generate a near-infinite number of accounts, with each account controlled by a separate private key. Diese Eigenschaft sorgt dafür, dass das Autorisieren einer Transaktion in einem Konto die Sicherheit der anderen Konten unberührt lässt. So kannst du problemlos mehrere Konten für unterschiedliche Anwendungsfälle einrichten.

Beispielsweise kannst du ein Konto für die Nutzung von Smart Contracts vorsehen und ein weiteres, um deine kostbarsten Vermögenswerte sicher aufzubewahren – das ist dann deine Offline-Wallet. Solltest du auf dem ersten Konto eine schädliche Genehmigung erteilen, sind die Vermögenswerte auf dem zweiten Konto dennoch sicher. Diese erstklassigen Funktionen etablieren Hardware-Wallets als bevorzugte Lösung für die Offline-Speicherung von Kryptowährungen.

Paper-Wallets

Paper-Wallets sind ganz normale Zettel, auf die deine privaten Schlüssel gedruckt sind – oft in Form eines QR-Codes. Nutzer können Kryptowährungen an und von der Adresse der Paper-Wallet senden, um Transaktionen durchzuführen. Paper-Wallets gehören zu den ältesten Formen der Krypto-Wallets und erfreuten sich besonders in den Jahren 2013 und 2014 großer Beliebtheit.

While this method keeps your keys offline, paper wallets come with significant risks. Many paper wallet generators have been compromised over the years, with malicious actors creating fake generators that either store copies of generated keys or use predictable random number generation, leading to substantial losses for unsuspecting users.

Paper wallets are also susceptible to physical damage, loss, fire, water damage, and fading ink, with no recovery options since they don’t use secret recovery phrases. Additionally, transferring cryptocurrency from a paper wallet requires importing it into a software wallet via an internet connection, which defeats the security purpose by potentially exposing your keys to bad actors.

So while paper wallets were useful in the earlier days of crypto, they’re frankly impractical in today’s crypto ecosystem with all of the available cold wallet options.

Sound-Wallets

Sound wallets are similar to paper wallets, apart that they store private keys as audio files rather than on paper. Das Aufbewahren von privaten Schlüsseln auf CD, USB-Stick oder sogar Schallplatte ist deutlich zuverlässiger als auf Papier, doch auch diese Speichermedien sind nicht vor physischen Beschädigungen sicher. Du möchtest sicher nicht den Zugang zu deinen Konten verlieren, nur weil du die CD mit deinen privaten Schlüsseln zerkratzt hast.

Sound-Wallets können zudem aufwendig in der Nutzung sein: Zum Decodieren der privaten Schlüssel benötigt man in der Regel spezielle Tools, etwa eine Spektroskop-App. Aufgrund dieser zusätzlichen Komplexität ist ihre Nutzung mit viel Aufwand verbunden und daher eher nicht für Einsteiger geeignet. As such, this is not a commonly used method to store private keys or execute cold storage.

Difference between Cold Wallets and other types of Crypto Wallets

Offline- und Hardware-Wallets: Worin besteht der Unterschied?

While you can use a hardware wallet as a cold wallet, the terms are not synonymous. Each new account you create with your hardware wallet is technically a cold wallet. However, as soon as you connect an account to a smart contract or decentralized application (dApp), that specific account is no longer a cold wallet. 

Offline- und Online-Wallets: Worin besteht der Unterschied?

Online-Wallets, die auch Software-Wallets genannt werden, speichern deine privaten Schlüssel auf einem Gerät, das mit dem Internet verbunden ist. Diese Methode birgt allerdings das Risiko eines Hackerangriffs. Über die Verbindung mit dem Internet kann theoretisch Malware oder Spyware auf dein Gerät gelangen, die deine privaten Schlüssel an Dritte weitergeben oder dich durch Manipulation des Displays dazu verleiten könnte, eine schädliche Transaktion zu autorisieren.

Offline-Wallets sind vor Malware und Spyware sicher, weil sie keine Internetverbindung nutzen. Außerdem können schädliche Genehmigungen hiermit nicht gegeben werden, weil die Geräte nicht mit Blockchain-Anwendungen oder -Services interagieren. Kurz gesagt, Offline-Wallets dienen dem langfristigen Schutz deiner Vermögenswerte und bieten maximale Sicherheit. Im Gegensatz dazu sind Online-Wallets besser für kurzfristige Käufe geeignet; sie sollten aufgrund der Sicherheitsproblematik nie größere Summen enthalten.

Wie funktionieren Offline-Wallets?

As mentioned above, the most important factor of cold wallets is that they never connect to the internet or interact with smart contracts. That being said, you can still send and receive crypto from your cold wallet without compromising its security.

Making a transaction with a cold wallet has two stages. First, the details of the transaction are prepared on an internet-connected device, then transferred to your cold wallet (typically via QR code or USB connection). Your cold wallet then signs the transaction with your private key in an offline environment before the signed transaction is sent back to be broadcast to the blockchain network.

So erstellst du eine Offline-Wallet

If you have a Ledger signer, setting up a cold wallet is easy. All you need to do is create a new account on your signer: Ledger’s security model ensures that your accounts stay separate from one another. In fact, it’s a great idea to designate different accounts for different tasks. The aim is to segregate your crypto assets, protecting accounts containing value from accounts signing potentially malicious approvals.

Sehen wir uns die Schritte im Detail an.

1. Connect your Ledger signer to your computer and navigate to the Ledger Wallet.
2. Zuerst musst du die App für die Kryptowährung installieren, die du nutzen möchtest. Möchtest du beispielsweise ETH-Token (Ethereum) schützen, dann ist die Installation der Ethereum-App erforderlich. If you already have the Ethereum app installed, you can skip this step.
3. Next, you must create a new account for that coin. Don’t worry, even if you already have an account for that network, you can install a new and completely separate account with no issues. Your Ledger signer generates a new key pair for each account.
4. Now your cold account is ready to use, and you can even name it in Ledger Wallet to avoid confusion with your other Ethereum accounts. The most important thing to remember is that you should never sign smart contract approvals with that specific account.

Einrichten einer Offline-Wallet

If you want an extra layer of security, you can also split your assets across multiple hardware wallets, leaving one device completely cold. This means that you don’t sign any approvals with any account on that entire device (signer). 

While separate accounts on your Ledger are completely safe from each other, separating your assets across multiple devices can be a great way to give you peace of mind when traveling, for example. That way, you can leave your cold wallet signer, securing your most valuable assets at home, and take another signer with you. 

Top Cold Wallets for Storing Cryptocurrencies

Ledger Stax

Ledger Stax is a premium signer designed by the godfather of the iPod, Tony Fadell. It is a signer of multiple firsts—the world’s first secure touchscreen, the first-ever curved E Ink touchscreen, and the first organic Thin-Film Transistor (TFT) screen brought to mass production.

The curved E Ink touchscreen of Ledger Stax lets you personalize the lock screen with any image you like, and it stays visible even in standby mode. The curved screen also allows you to name the spine for easy identification if you have multiple devices. Ledger Stax signer also feature embedded magnets, making them stackable.

Ledger Stax also supports Bluetooth and NFC, providing versatile connectivity options for both desktop and mobile platforms. Moreover, the Ledger Stax comes with wireless Qi charging.

Ledger Flex

Ledger Flex is the new entry point into Ledger’s next-generation secure touchscreen signers, offering secure self-custody with an improved user experience. It has a 2.8” customizable E Ink touchscreen, benefiting from the secure touchscreen technology introduced with Ledger Stax and allowing you to read transaction details clearly. 

Like all Ledger signers, also popular referred as hardware wallets, it’s powered by a Secure Element chip and runs on Ledger’s secure OS.

Ledger Flex also allows you to customize its E Ink touchscreen, with the choice to set the lock screen to whichever image, NFT, or digital art piece you like.

Ledger Nano Gen5

The Ledger Nano Gen5 is the latest evolution of Ledger’s iconic signer – designed to make top-tier security effortless and accessible. It features a bright E-Ink Secure Screen for Clear Signing and Transaction Check, ensuring you always know what you’re approving. With Bluetooth connectivity, it pairs seamlessly with the Ledger Wallet app for secure management on the go. Starting at $179, the Nano Gen5 combines trusted Ledger protection with a modern, intuitive experience for everyday users.

Ledger Nano S Plus

Ledger Nano S Plus is an entry-level Ledger with all the essential features you need to secure your digital assets. It doesn’t have the next-gen features of Ledger Stax and Ledger Flex, but it’s a great option for newcomers just trying crypto out.

It’s highly versatile, offering support for most major cryptocurrencies, including Bitcoin, Ethereum, Solana, Tezos, and Cosmos.

Ledger Nano X

Like the Nano S Plus, the Ledger Nano X supports multiple cryptocurrencies. At $149, the Ledger Nano X is a great signer for on-the-go use, thanks to its Bluetooth and iOS connectivity, plus a battery life of up to 5 hours.

Comparison Table of Cold Wallets

Ledger Signers: The Simplest Cold Storage Solution

Using your Ledger signer for cold storage allows you to take advantage of Ledger’s security model. Ledger signers store your private keys offline on a Secure Element chip, an industry-grade computer chip resistant to physical hacks. Next, the secure element connects directly to the signer’s secure screen, allowing you to verify transactions in confidence before you sign. Ledger signers also use a custom secure OS responsible for running your separate apps on the Secure Element.

To ensure these features keep your crypto safe, Ledger’s world-class team of white hat hackers, The Donjon, thoroughly tests each of these security elements. With Ledger, you can manage your assets via one easy-to-use interface, Ledger Wallet. 

So what are you waiting for? Buy a Ledger signer and set up your first cold wallet to start exploring Web3 with security. Because that’s what true self-custody is all about.

FAQs About Cold Wallets

Are cold wallets 100% safe?

While cold wallets are one of the safest ways to secure your digital assets, they cannot be considered 100% safe because they do not rule out the possibility of human error. Accidentally exposing your cold wallet to a smart contract ot dApp compromises its status, as does attempting to use a wallet whose private keys were ever exposed to the internet.

What are EAL ratings?

EAL ratings help evaluate and certify the security robustness of secure element chips based on the Common Criteria for Information Technology Security Evaluation – an international standard for computer security certification. EAL ratings range from EAL1 to EAL7, with each level representing a progressively higher degree of assurance.

What is the safest cold wallet?

The safety of your cold wallet depends on how it is set up and maintained. Ledger signer can make it possible to seamlessly switch between your wallet accounts, keeping your cold wallet segregated from your active wallets and keeping your valuable assets safe.

What is the best cold wallet for beginners?

While the best cold wallet for a beginner may vary person to person, many beginners may be looking to maximize security without having to invest too much if they’re just getting started with cold storage. In that case, a signer such as the Ledger Nano S Plus might be a good option, as it provides everything you need for a cold storage solution at an entry level.

The Shift: From Hardware Wallet to signer 

Crypto may have begun as a bold experiment, but adoption has grown as the technology and user experience have rapidly evolved; the language used to describe it, has however, stayed stuck in its infancy.

We called our devices “hardware wallets,“ mislabelling the role of secure hardware, and obfuscating the role of software (Ledger Live). Along the way, users were left behind.

People believed:

• That value was stored on the device (it isn’t).
• That if you lose the device, you lose your assets (you don’t).
• That the device itself was the endgame (it’s not).
• That those 24 words were a burden only tech-savvy users could manage (not true anymore).

These are more than misconceptions. They are adoption blockers. So at Ledger, we believe that clarity is essential for the next stage of adoption

We’re changing how we speak about our products. And by doing so, we’re changing how people understand digital ownership itself.

Hardware wallets  → signers

Ledger devices don’t store value. They sign transactions. They prove intent. They verify identity. They’re not vaults, they’re the secure bridge between who you are and what you do online. They don’t just hold keys. They empower you to trust yourself.

We call them signers now, because that’s what they truly are.

In a world where AI grows more powerful every day, proof of humanity matters more than ever. A signer is more than a security device, it’s your cryptographic proof of you. It gives you a secure foundation to own, authorize, and protect your digital life without relying on anyone else. From sending a transaction to signing a contract or verifying your credentials, your signer  ensures you, and only, can provide digital consent – proof of you.Together, signer and Ledger Wallet redefine what digital ownership looks like, clear, secure, and free from compromise.