“Cold storage” sounds like a freezer for money, and that is honestly not far off: it means keeping your private keys on a device that never touches the internet, so remote attackers simply have nothing to reach.
Hot for spending, cold for saving
Think of a hot wallet — your phone app — as the cash in your pocket: convenient, perfect for daily amounts. Cold storage is the safe at home. Most people do well with a simple split: a little online for moving around, the rest offline for sleeping well.
How a hardware wallet works
A hardware wallet is a small device that creates and guards your keys. When you send coins, the transaction is signed inside the device and only the signature travels to your computer. Your keys never leave — even if the computer is riddled with malware.
“Buy the device from the maker, never second-hand. A wallet with a previous owner is not a bargain.”
When to make the move
A good rule of thumb: when your stack passes the amount you could shrug off losing, it belongs in cold storage. Setup takes an evening — initialize the device, write down the recovery phrase on paper, run a tiny test transaction both ways — and then boredom becomes your security strategy.
James Whitfield
Bitcoin Developer — has set up more hardware wallets than he can count.