I’m looking for a reliable cold wallet to store my BTC and ETH long term after nearly losing funds on a hacked exchange. I’m confused by all the options (Ledger, Trezor, Steel backups, etc.) and worried about security, seed phrases, and future compatibility. What cold wallets and backup setups are you using that feel truly safe and easy enough for daily use if needed?
You are thinking in the right direction by moving off exchanges. Here is a simple path that works well for long term BTC and ETH.
- Pick a hardware wallet
Top safe picks right now:
• Ledger Nano X or Nano S Plus
Pros: Widely used, solid security, supports many coins.
Cons: Past data leak of customer info (names, addresses, emails). No seed exposure issue, but their OPSEC sucked. If you value privacy, this matters.
• Trezor Model T or Trezor One
Pros: Open source, audited a lot, good UX. Seed phrase visible on device screen.
Cons: No secure element chip like Ledger. Needs strong physical security at home.
• Foundation Passport or Coldcard (for BTC only)
Pros: Bitcoin focused, great for long term BTC storage, airgapped workflows.
Cons: Not ideal for ETH. More nerdy UX.
Since you want BTC and ETH, I’d look at:
• Ledger Nano S Plus if you want cheap and simple.
• Trezor Model T if you want open source and nicer screen.
If you are paranoid about Ledger’s data leak, go Trezor.
- Set up process to avoid common traps
When you unbox:
• Buy direct from the official site, not Amazon or random reseller.
• Check the box seal and device for any tampering.
• Use only the official app. Ledger Live for Ledger, Trezor Suite for Trezor.
Seed phrase:
• Generate the seed on the device with it offline.
• Never type the seed into a computer or phone.
• Write it by hand on paper first. Do not take photos. Do not store in cloud.
• Do a test restore with a spare device or in a safe way later, to confirm you wrote it right.
- Steel backup vs paper
Your main risk is fire, water, or you messing up the writing.
• Paper:
Cheap, simple, but hates fire and water.
Use two paper copies. Store in two different secure spots. For example, safe at home, plus safe deposit box.
• Steel backup:
Good brands: Cryptosteel, Billfodl, CypherWheel, Seedplate.
These survive house fires and floods much better than paper.
If your stack is 5 figures or more, steel makes sense.
Common setup:
• One steel backup of your 12 or 24 word seed.
• Stored in a safe or safe deposit box.
• Optional second backup in another location.
- Security basics that matter more than brand
• Never share your seed with support chats, “devs”, or anyone else. Every scam tries this.
• Bookmark the official sites. Do not follow random links from Telegram, Discord, Twitter.
• Use a clean, updated computer when you connect the wallet.
• Keep your device PIN strong. No 0000 or 1234.
• Enable passphrase feature if you want an extra layer, but write it down somewhere safe. If you forget the passphrase, the coins are gone.
- Simple long term strategy
• Move your BTC and ETH from the exchange to your new hardware wallet addresses in smaller test amounts first.
Send 50 bucks worth. Confirm it arrived. Then move the rest.
• Do not chase every new token. More coins means more attack surface and more mistakes. If your main goal is long term BTC and ETH storage, keep it simple.
- If you want max safety with minimum headache
One realistic setup:
• Trezor Model T.
• One steel backup of your 12 or 24 word seed, in a home safe.
• One paper backup in a different location.
• Check your Trezor balances every few months, not every day.
• Keep the Trezor unplugged and stored safe most of the time.
Or:
• Ledger Nano S Plus.
• Same backup plan as above.
• Accept that Ledger had a marketing data leak before, so use a PO box or fake name if you are paranoid and they allow it.
You almost lost funds once. That is your warning shot. A decent hardware wallet plus a proper seed backup fixes 90 percent of your risk. The last 10 percent is you not typing that seed into some fake site at 2 AM when you are stressed.
You’re already 90% of the way there just by deciding “no more exchange custody.”
@ombrasilente covered the “classic” route really well (Ledger/Trezor + steel backup), so I’ll hit angles they didn’t focus on and push back on a couple points.
1. Consider how “cold” you actually need
People throw “cold wallet” around for anything not on an exchange. You actually have a spectrum:
- True cold storage
Device stays offline almost always, no frequent signing, long term stash. - Warm-ish storage
Hardware wallet used a few times a month, plugged into a PC, interacting with DeFi, etc.
If you’re only doing long term BTC & ETH with rare moves, focus on:
- Simple setup
- Minimal software dependencies
- Something you don’t have to “remember how to use” every week
Sometimes this means less features, more boring. Fancy DeFi toys are how people get wrecked.
2. Don’t sleep on multi‑vendor redundancy
One thing I mildly disagree with @ombrasilente on is just picking a single hardware brand and calling it a day.
If this is meaningful money for you:
- Use one hardware wallet brand for BTC, another for ETH, or
- Use 2 devices from different vendors for the same seed (as a backup signer, not multi‑sig)
Why:
- If one vendor has a critical bug or supply chain issue, you are not locked into them.
- You can test recovering the same seed on a different vendor’s device and prove your backup actually works.
Example setups:
- BTC & ETH on a Ledger seed, test‑restored on a Trezor (or vice versa)
- Or BTC on a Bitcoin‑focused wallet, ETH on a “general” hardware wallet
You don’t have to actually use both day to day. Just knowing you can restore on another brand is huge peace of mind.
3. Steel vs paper: think like a burglar, not a YouTuber
Everyone obsesses over house fires. Realistically:
- Far more common:
- Theft
- You telling one wrong person
- You mislabeling or “hiding” it so well you forget
Steel is great, but the big risk is someone finding it and understanding what it is.
A few tricks I like:
- Do not label it “SEED BACKUP” or “BITCOIN” like a gift to the thief.
- Use boring containers: old tool box, documents folder, etc.
- If using paper, consider a simple word substitution or slight obfuscation, but only if you are 100% sure you won’t lock yourself out. Most people should probably skip that unless they’re very systematic.
I slightly disagree with the idea that two paper copies in two spots is always fine. For 4–5 figures, maybe. For 6+ figures, steel + decent fireproof safe is much more proportional.
4. You might want to skip passphrases at first
Passphrases are powerful, but also one of the top “I lost everything” mechanisms.
If this is your first real self‑custody setup:
- Start with:
- Strong PIN on device
- Good seed backup in steel or well‑protected paper
- Only add a passphrase once you’re very comfortable with restoring and you fully understand:
- New passphrase = completely different wallet
- Lose the passphrase = coins are gone even if seed is safe
Too many people add a passphrase because “everyone says its more secure” and then forget whether they used one or what exact phrase they wrote.
5. Think in scenarios, not brands
Before you pick Ledger vs Trezor vs whatever, literally ask:
- What if my house burns down?
- What if someone steals the hardware wallet?
- What if I die tomorrow, can someone I trust figure this out?
- What if this company disappears in 10 years?
A sane setup that covers most of that:
- 1 hardware wallet device you actually use
- 1 backup hardware wallet (same or different brand) kept untouched
- Seed stored in steel in one place
- Optional second backup (paper or steel) in another physical location
- Clear, offline written instructions for your future self or heir like:
“This metal thing is the backup for my crypto. Do not put these words on any website. Talk to X or search ‘how to restore bitcoin hardware wallet’.”
6. Death / inheritance is the thing everyone ignores
You almost lost funds once, but the other quiet risk is: nobody knows how to recover your coins except you.
Minimal inheritance planning:
- Do not write “I have 2 BTC and 10 ETH in this seed” on a piece of paper. That’s asking for trouble.
- Do write something like:
- Where the backup is stored
- What type of device/seed it belongs to
- Roughly what needs to be googled to figure out recovery
If you trust a spouse / partner / sibling:
- They don’t need to know your PIN now
- They do need to know where the backups are and that it’s important
7. What I’d personally do in your shoes
You: BTC + ETH, long term, spooked by exchange hack.
I’d lean toward:
- Trezor Model T for ETH & BTC
- Nice screen, open source, good UX
- Buy direct from manufacturer, but pay with privacy in mind:
- If possible, use an address & email you’re okay being leaked
- One steel seed backup in a small home safe
- One paper backup offsite (family safe, bank box, etc.)
- A cheap second device (even a used one from a trusted friend wiped & re‑initialized) purely to test that the seed really restores
Then:
- Move funds in a small test transaction
- Wait for confirmation
- Move the rest in 1–3 chunks, not one monster transaction so you can sanity check along the way
- Unplug the wallet, toss it back in its hiding place, and resist the urge to plug it in every day
Last bit: no hardware wallet saves you from being phished. The number one way people lose coins now is still:
- “Connect wallet to claim airdrop”
- “Support” asking for your seed
- Fake “Trezor Suite” or “Ledger Live” downloads
If at any point a site, app, or human is asking for your 12/24 words, that’s the moment to close the laptop and walk away.