I don't understand how a Trezor is considered cold storage if you can lose it, and then recover your keys through their recovery seed and another Trezor.

Where are the keys coming from?

Where are they being stored?

1 Answer 1


It is considered cold storage because the private keys are never exposed to an online device which can steal them.

The private keys are stored on the Trezor itself. They can never leave the Trezor, even when it is plugged into a computer. Thus they are never exposed to something which is connected to the internet that is able to steal the private keys.

The recovery seed is a BIP 39 mnemonic. This encodes a BIP 32 seed which is then used to generate all of your private keys. The Trezor actually only stores the BIP 32 seed and generates all other private keys when they are needed. Restoring a Trezor with the recovery seed (aka BIP 39 mnemonic) just tells Trezor what the BIP 32 seed should be.

  • I would say that the notion on hot / cold storage does not correlate 100% with the type of wallet (software / hardware / paper / memory / ...). I see cold as "secure, hard to use" and hot as "less secure, easier to use". The benefit of hardware wallets is that they remain relatively easy to use but provide much more security than software wallets. Say, a Trezor constantly plugged into your PC can be considered hot, whether a software wallet on an air-gapped PC in a physical safe is rather cold. Nov 21, 2017 at 15:56

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.