Monero cold storage: keeping XMR offline

Quick steps

1. Choose a method. Pick a supported Ledger or Trezor for most cases, or an air-gapped computer if you are technical and comfortable with the command line.
2. Set up the device or offline wallet. Initialise the hardware wallet or create the offline wallet, and record the recovery phrase on paper or metal.
3. Create the companion wallet. In the Monero GUI, Feather or Cake Wallet create a wallet from the hardware device, or a view-only wallet for offline signing, and set a restore height.
4. Test with a small amount. Receive a small amount, verify the address on the device screen and send it back out to confirm signing works.
5. Store backups safely. Keep two copies of the seed in separate secure places, store any passphrase separately and note the restore date and wallet used.

What cold storage means

Cold storage keeps the keys that spend your Monero away from internet-connected devices. Malware on your phone or laptop then cannot sign a transaction. It suits savings you do not touch often; keep a small amount in a hot wallet for spending.

Your options

Option 1: hardware wallets

Monero works on these devices, according to getmonero.org and the vendors' own pages:

• Ledger: Nano S (firmware 2.1.0 or later), Nano S Plus (1.0.3 or later) and Nano X (2.0.2 or later). Support on Ledger Flex and Stax is unconfirmed.
• Trezor: Model T, Safe 3 and Safe 5 (getmonero.org lists firmware 2.5.2 or later), and Safe 7 per trezor.io. The Trezor Model One does not support Monero.

Neither Ledger Live nor Trezor Suite manages XMR. You install or enable Monero support on the device and then use a companion wallet: the Monero GUI or CLI, Feather or Cake Wallet (Monerujo also supports Ledger on Android). The device signs; the companion app syncs and shows your balance. Compare the devices in Ledger vs Trezor for Monero and Monero hardware wallets.

Setup outline

1. Buy the device from the manufacturer or an authorised reseller, never second-hand.
2. Initialise it and write the recovery phrase on paper or metal.
3. In the GUI choose Create a new wallet from hardware, or in Feather choose the hardware-wallet option, and set a restore height.
4. Receive a small amount, check the address on the device screen, then send it back out to confirm everything works.

Lessons from history: in March 2019 a bug in Ledger's Monero app combined with a wallet release caused change outputs not to be detected; funds were later recovered with a patch. Keep firmware and wallet software up to date, and test with small amounts after updates.

Option 2: air-gapped offline signing

This uses two wallets: a full wallet on a computer that never goes online, and a view-only wallet on an online machine. The official docs describe the cycle:

1. On the online view-only wallet, create the transaction. It writes an unsigned_monero_tx file.
2. Move it by USB to the offline wallet and run sign_transfer, which produces signed_monero_tx.
3. Bring that back and run submit_transfer on the online wallet to broadcast it.
4. Keep balances accurate by exporting outputs from the online wallet, importing them offline, and bringing key images back (export_outputs, import_outputs, export_key_images, import_key_images). Use the all argument when rebuilding a wallet, or balances can be wrong.

The same docs warn that this setup is complex, error-prone and relies on a general-purpose computer, and that a hardware wallet is generally better. Never reconnect the offline machine to update it; wipe and reinstall instead.

Option 3: paper or metal seed storage

A paper wallet in Monero is really a written seed. Create a wallet on a trusted device, record the seed and restore height, note the receiving address, then delete the wallet. To check incoming funds, use a view-only wallet. See Monero view key.

• Do not use old online paper-wallet generator websites. Any site that creates or asks for keys can keep them.
• When you finally spend, the seed is typed into a hot device. At that point move everything, not just part, to a new wallet.
• Paper burns and fades. Metal backups survive fire and water.

Backups and inheritance

• Store at least two copies of the seed or recovery phrase in separate secure places.
• If you add a seed offset or device passphrase, store it separately from the words. The docs suggest 6 to 8 random words generated offline.
• Write down the restore height or wallet creation date, which wallet you used and whether a passphrase exists. Your heirs will need this.
• Never store seeds in cloud storage, email or photos.

FCMP++ and future upgrades

The planned FCMP++ and Carrot upgrade will require updated wallets and hardware-wallet apps. Developers have been working with hardware-wallet makers, and the stressnet version 3.0, which forked on 5 October 2026 on a test network only, added offline-signing support. No mainnet date had been announced as of October 2026. Your seed should remain the key to your funds, but expect to update firmware and companion apps when the fork is scheduled. Follow FCMP++ explained.

Quick checklist

• Device bought new from the maker.
• Recovery phrase on paper or metal, two locations.
• Restore tested with a small amount.
• Addresses checked on the device screen.
• No seed ever typed into a website. See Monero scams.

Frequently asked questions