Key Takeaways
An air-gapped wallet is a type of crypto wallet that stores private keys on a device never connected to the internet or wireless networks.
Transactions are signed offline using QR codes or micro-SD cards to transfer data, so the private key never touches an online device.
Air-gapped wallets are generally considered more secure than standard hardware wallets, but they require more technical steps and careful physical handling.
They are best suited to users storing larger amounts of crypto for the long term rather than those making frequent transactions.
Introduction
An air-gapped wallet is a cryptocurrency wallet designed to remain completely isolated from the internet and all wireless communication. The name comes from the idea of a physical "air gap", a space of air between the wallet device and any connected network.
This isolation is what makes air-gapped wallets appealing to users who want a high level of protection for their private keys. Since the device never connects to the internet, online attacks such as phishing, malware, or remote exploits cannot reach it directly.
This article explains how air-gapped wallets work, what types exist, how they compare to other wallet options, and what risks to keep in mind.
How Does an Air-Gapped Wallet Work?
Because an air-gapped wallet stays offline at all times, it cannot broadcast signed transactions directly to a blockchain. Instead, it relies on physical media such as QR codes or micro-SD cards to move transaction data between the offline device and an internet-connected device.
The process typically follows three steps, illustrated here using a Bitcoin transaction.
Step 1: Create a partially signed transaction
On an internet-connected device, a wallet app creates a Partially Signed Bitcoin Transaction (PSBT). This is a transaction with all the relevant details filled in, such as the recipient address and amount, but without the final digital signature. The online device cannot sign the transaction because it does not hold the private key.
Step 2: Sign the transaction offline
The PSBT is transferred to the air-gapped wallet by scanning a QR code or reading a file from a micro-SD card. The air-gapped device holds the private key and signs the transaction entirely offline. The private key never moves and never touches an internet-connected device.
Step 3: Broadcast the transaction
The fully signed transaction is transferred back to the online device, again via QR code or micro-SD card. The online device then broadcasts it to the Bitcoin network, where miners process and confirm it as they would any other transaction.
Types of Air-Gapped Wallets
Air-gapped wallets come in several forms. The most common are purpose-built hardware devices, dedicated computers, and repurposed smartphones.
Air-gapped hardware wallets
Dedicated hardware wallet devices are the most popular form of air-gapped wallet. Models such as Keystone and Passport are designed from the ground up to avoid any internet or wireless connection, communicating exclusively through QR codes. They include a screen to verify transaction details and physical buttons to approve or reject them.
These devices are the most user-friendly air-gapped option and are a good starting point for most people exploring offline key storage.
Air-gapped computers
A dedicated computer that is permanently kept offline can also serve as an air-gapped wallet. The machine is used only for storing private keys and signing transactions, never for general use. Data typically moves in and out via USB drives.
This setup requires more technical knowledge and discipline than a purpose-built device. Any accidental internet connection would break the air gap and potentially compromise security.
Air-gapped smartphones
A factory-reset smartphone with all wireless radios disabled can also function as an air-gapped wallet. Wallet software is installed via an SD card, and the phone remains in airplane mode permanently. Like the dedicated computer approach, this requires careful handling and is more technically demanding than a hardware device.
How Air-Gapped Wallets Compare to Other Wallets
All air-gapped wallets are a subset of cold wallet storage, meaning they store keys offline. However, not all cold wallets are air-gapped. A standard hardware wallet, for example, connects to an internet-connected computer via USB or Bluetooth during the signing process. The private key does not leave the device, but there is a momentary connection.
Air-gapped wallets go further by ensuring the private key device never connects at all. They are also non-custodial wallets, meaning only the user holds the private keys. No third party can access or recover them.
The tradeoff is usability. Signing a transaction with an air-gapped wallet involves more steps than connecting a standard hardware wallet to a computer. For users who transact frequently, this friction can become inconvenient. For long-term holders, it is generally worth the added security.
What Are the Risks of Air-Gapped Wallets?
Air-gapped wallets are not risk-free. The most common vulnerabilities are physical rather than digital. If the device is lost, stolen, or damaged without a backup of the seed phrase, the funds may be unrecoverable. Users should store backups securely and follow best practices for hardware wallet security.
Malicious software can also be introduced through micro-SD cards or USB drives used to transfer transaction data. If a compromised file enters the air-gapped device, it could potentially manipulate transaction details. This is why QR-code-only transfer methods are generally preferred; they limit the attack surface compared to removable storage.
Supply-chain attacks are another consideration. A device tampered with before purchase could contain malicious firmware. Buying directly from manufacturers and verifying firmware integrity reduces this risk.
Finally, human error remains a factor. Mistakenly connecting the device to the internet, even briefly, would break the air gap. Consistent discipline in handling the device is essential.
FAQ
What is an air-gapped wallet?
An air-gapped wallet is a cryptocurrency wallet stored on a device that never connects to the internet or any wireless network. Private keys are kept entirely offline, and transactions are signed using QR codes or removable storage to transfer data between the offline device and an online one.
Is an air-gapped wallet the same as a hardware wallet?
Not exactly. All air-gapped wallets are a type of hardware wallet, but not all hardware wallets are air-gapped. Standard hardware wallets connect briefly to an online device via USB or Bluetooth during transaction signing. Air-gapped wallets avoid any such connection entirely.
Who should use an air-gapped wallet?
Air-gapped wallets are best suited to users who hold significant amounts of cryptocurrency for the long term and prioritize security over convenience. They require more technical steps per transaction, so they may not be practical for users who trade frequently.
Can an air-gapped wallet be hacked?
An air-gapped wallet is designed to resist remote hacking because there is no network connection to exploit. However, it can still be compromised through physical theft, malware introduced via removable storage, or supply-chain attacks on the device itself. Good physical security and careful handling remain essential.
What happens if I lose my air-gapped wallet device?
If you lose the device, you can recover your funds using your seed phrase on a new device. This is why securely backing up and storing your seed phrase offline, in multiple locations, is critical. Without the seed phrase, funds stored on a lost or damaged device may be unrecoverable.
Closing Thoughts
Air-gapped wallets provide some of the strongest protection available for cryptocurrency private keys by eliminating any connection to the internet. They are a sensible choice for users who hold substantial amounts of crypto and want to minimize online attack surfaces.
That said, they aren't a perfect solution. Physical risks, human error, and proper backup management all remain important.
Further Reading
Disclaimer: This content is presented to you on an "as is" basis for general information and educational purposes only, without representation or warranty of any kind. It should not be construed as financial, legal or other professional advice, nor is it intended to recommend the purchase of any specific product or service. You should seek your own advice from appropriate professional advisors. Where the content is contributed by a third party contributor, please note that those views expressed belong to the third party contributor, and do not necessarily reflect those of Binance Academy. Digital asset prices can be volatile. The value of your investment may go down or up and you may not get back the amount invested. You are solely responsible for your investment decisions and Binance Academy is not liable for any losses you may incur. For more information, see our Terms of Use, Risk Warning and Binance Academy Terms.