Skip to main content
Wallets, keys, seed phrases

Paper Wallets: Offline Security for Cryptocurrency Storage

Pomegra Learn

Paper Wallets: Offline Security

A paper wallet is a cryptocurrency private key and public address printed on physical paper, providing maximum security isolation from all digital threats. Because paper has no network connectivity, no malware can steal it, and no hacker can remotely compromise it. The trade-off is reduced convenience—accessing funds requires typing or scanning the private key into a digital wallet, a slow process unsuitable for frequent transactions. Paper wallets are the preferred choice for extreme long-term storage and investors who prioritize security above all convenience.

Quick Definition​

A paper wallet is a printed cryptocurrency private key and public address (often as QR codes) stored physically on paper. It is completely offline, immune to digital attacks, but vulnerable to physical damage and loss.

Key Takeaways​

  • Paper wallets are truly "cold" — zero digital connectivity means zero digital attack surface
  • Key generation must happen on an air-gapped computer to prevent malware from compromising the private key during creation
  • Paper is vulnerable to physical threats: fire, water, mold, theft, and deterioration over decades
  • Receiving funds requires only the public address, no internet connection or technology needed
  • Spending funds requires importing the private key into a digital wallet, a slow process unsuitable for frequent transactions
  • Paper wallets lack seed phrase recovery—loss of the paper means permanent loss of access

How Paper Wallets Work​

A paper wallet stores two critical pieces of information:

  1. Public address — A hashed version of your public key, used to receive funds. This can be shared openly.

  2. Private key — The secret cryptographic credential needed to spend funds. This must be protected absolutely.

Both are typically printed as:

  • Text strings (64-character hexadecimal key, 34–42 character address)
  • QR codes (scannable barcodes representing the same information)
  • A combination of both

Receiving process: You give someone your public address (printed on the paper or shown via QR code). They send cryptocurrency to that address. The blockchain records the transaction. You check the balance using a blockchain explorer (no internet connection needed to your paper wallet—just the ability to view the blockchain).

Spending process: You must transfer the private key from paper to a digital wallet (by typing it or scanning the QR code), then use that wallet to create and sign a transaction. The funds are spent from the blockchain address, and a new owner is established.

Creating a Paper Wallet Securely​

Creating a secure paper wallet requires multiple steps and discipline. A single mistake—malware during generation, taking a photo backup, storing digitally—defeats the security.

Step 1: Prepare an Air-Gapped Computer​

Air-gapping is essential. You need a computer that has never been connected to the internet and will never be connected in the future.

Options:

Option A: Dedicated Device

  • Purchase a used laptop for $50–$200
  • Never connect it to the internet (disable Wi-Fi, remove network cable)
  • Use only for key generation

Option B: Temporary Air-Gapping

  • Use a personal computer currently offline
  • Physically disable networking (unplug Ethernet, disable Wi-Fi in BIOS)
  • Generate keys, then remove the wallet software and re-enable networking
  • The risk is residual malware on the computer compromising the keys

Option C: Live USB Operating System

  • Boot a fresh Linux operating system from a USB drive without installing it
  • This avoids using your main computer's software or storage
  • Restart the computer after key generation, leaving no software trace

Best practice: Option A (dedicated device) offers the strongest guarantee of air-gapping.

Step 2: Install Wallet Software​

Download legitimate wallet software that supports key generation on an offline device.

Recommended tools:

  • Electrum (Bitcoin): Lightweight, well-reviewed, open-source Bitcoin wallet with offline transaction signing
  • MyEtherWallet (Ethereum): Can run offline for address generation
  • Bitcoin Core: Full node software supporting key generation and paper wallet exports

Installation: Download the software from the official GitHub repository or website onto a USB drive on an internet-connected computer, then transfer to the air-gapped device. Verify the checksum or signature if available.

Never use: Online key generators (websites that create keys in a browser). These transmit your private key to the web server, compromising security.

Step 3: Generate the Key Pair​

Use the installed software to generate a new private key and corresponding public address.

Most software will:

  1. Generate a cryptographically secure random private key
  2. Derive the corresponding public address
  3. Display both in text and QR code format

Record both pieces of information:

  • Write the private key on paper by hand (or print it)
  • Write the public address on paper
  • Record the date and blockchain network (Bitcoin, Ethereum, etc.)

Example format:

Bitcoin Address: 1A1z7agoat2YYT67Ke8r3FFqsz4hAEQYqk
Private Key: 5HpHagT65TZzG1PH3CSu63k8DbpvD8s5ip4nEB3kEsreAnchuDf
Date Created: 2026-05-14
Network: Bitcoin Mainnet

Step 4: Verify the Backup​

Before using the paper wallet, verify you've written the information correctly:

  • Manually type the private key from the paper back into the software to confirm it matches
  • Use the public address to check the blockchain (no transaction activity—this is a new address)

If anything is incorrect, generate a new key pair and try again.

Step 5: Test with a Small Amount​

Before transferring significant funds:

  1. Send a small amount (under $100) to the public address
  2. Verify the blockchain shows the transaction
  3. Wait for confirmation (typically 10 minutes to 1 hour depending on the blockchain)
  4. On the air-gapped computer, use the private key to spend this test amount
  5. Send it to a different address to verify the paper wallet can be spent

This test catches configuration errors before they're catastrophic.

Step 6: Create Redundant Physical Backups​

Do not rely on a single paper wallet. Create backup copies and store them in different secure locations.

Backup creation:

  • By hand: Write the key and address again on separate paper
  • By photocopy: Make multiple photocopies of the original
  • Using metal storage: Engrave the key and address on steel or titanium (survives fire and water)

Storage locations:

  • Home safe (protects against theft and casual loss)
  • Safety deposit box at a bank (protects against home disaster)
  • With a trusted third party (lawyer, family member) — though this introduces counterparty risk

Redundancy rule: If you have only one physical backup and it's destroyed, your funds are permanently inaccessible. Two backups in separate locations ensure recovery even if one is compromised.

Paper Wallet Security Considerations​

Physical Security Threats​

Unlike digital assets vulnerable to hacking, paper wallets face physical threats:

Fire: Paper burns at 451 Fahrenheit (233 Celsius). Standard paper backups cannot survive house fires. Metal storage solutions (like ColdTi or SafeSeed) survive temperatures above 1,000 Fahrenheit.

Water damage: Paper deteriorates when wet, ink bleeds or disappears, QR codes become unreadable. Metal storage is waterproof.

Mold and decay: Paper stored in damp environments (basements, attics) can develop mold, and ink can fade over decades. Store in cool, dry locations.

Theft: A physical backup in a home safe can be found and stolen by burglars. Safety deposit boxes are more secure but introduce bank access risks.

Loss: Paper can be accidentally thrown away, lost during moves, or destroyed by pets or children. Keep backups in known, documented locations.

Digital Security Considerations​

Any digital copy of a paper wallet backup (photo, scanned image, text file) introduces digital vulnerability. Someone with access to your computer, phone, or cloud storage can access that digital copy.

Protection: Never create digital backups of the private key. The entire security advantage of a paper wallet is that the key exists only on paper. A photo on your phone is not a backup—it's a liability.

Accessing Funds from a Paper Wallet​

Spending cryptocurrency stored in a paper wallet is slower than spending from a hot or cold storage device, but it's straightforward.

Process​

  1. Retrieve the paper from secure storage

  2. Choose your wallet software — Use Electrum (Bitcoin), MyEtherWallet (Ethereum), or similar

  3. Import the private key:

    • Option A: Type the private key string into the wallet software
    • Option B: Use a QR code scanner to read the code on the paper
    • Option C: Manually scan the QR code using your phone camera within the wallet app

  4. Verify the address: The wallet software will display the corresponding public address. Confirm it matches the address on the paper.

  5. Review the balance: The wallet will show all funds associated with that address.

  6. Create transaction: Specify the recipient address, amount, and transaction fee.

  7. Sign transaction: The wallet signs the transaction using the private key.

  8. Broadcast transaction: The signed transaction is sent to the blockchain network and confirmed.

  9. Securely handle the key:

    • Never keep the private key in digital form longer than necessary
    • Close the wallet software after the transaction
    • Do not email the key, take photos, or store it anywhere digital

Timeline: The entire process takes 10–30 minutes for a experienced user, compared to a few seconds for a hot wallet.

Paper Wallet Generation and Security Process​

Real-World Examples​

Example 1: Conservative Investor
Paul is 55 years old and bought 10 Bitcoin in 2016 with long-term intent. He generated a paper wallet on a laptop he purchased used and air-gapped. He printed the private key and address, stored one copy in a home safe and another in a safety deposit box at his bank. He gave his wife a letter explaining how to access the funds if something happens to him. For 10 years, he never accesses the Bitcoin except to verify the balance on a blockchain explorer. When he eventually retires, he spends some Bitcoin by importing the private key into a wallet software. The paper remains secure the entire time.

Example 2: Multiple Backups
Jessica created a paper wallet and made three physical backups:

  • One in a fireproof safe in her home
  • One in a safety deposit box
  • One engraved on a metal plate stored at her parents' house

During a house fire, her home safe is destroyed. The paper backup inside melts and becomes illegible. However, she still has backups at the bank and her parents' house. She can recover her funds using either of the two remaining copies.

Example 3: Inheritance Planning
Tom is 70 and has $500,000 in Bitcoin stored in a paper wallet. He meets with a lawyer and creates an updated will that includes:

  • Instructions on where to find the paper wallet (safety deposit box)
  • How to import the private key into wallet software
  • Contact information for a financial advisor who can help his heirs with the process

His family has clarity on how to access his cryptocurrency holdings if something happens to him.

Common Mistakes​

  1. Taking photos of the private key — A photo on your phone, cloud storage, or email provides a digital copy that can be hacked. The entire security advantage of a paper wallet is eliminated.

  2. Storing digital copies "just in case" — Encrypted or unencrypted, any digital copy is a vulnerability. Paper only.

  3. Single physical backup — If the one paper wallet is destroyed, your funds are lost forever. Create multiple backups in different locations.

  4. Using online key generators — Websites that create private keys transmit them to the web server, compromising security. Always generate on an air-gapped computer.

  5. Neglecting to test — Creating a paper wallet and never testing if funds can be spent until you actually need them is risky. If the key generation process had an error, you discover it too late.

  6. Sharing the location of backups — Never tell anyone where your paper wallets are stored. If you want someone to inherit them, consult a lawyer about secure inheritance mechanisms.

FAQ​

Q: Is a paper wallet safer than a hardware wallet?
A: Paper wallets are more secure against digital attacks (they're 100% offline), but hardware wallets are more practical and offer better balance. Paper is vulnerable to physical damage; a hardware wallet requires authentication to use. For most people, a hardware wallet is the optimal choice. For extreme security with long-term holding, paper wins.

Q: What if I lose the paper wallet?
A: If you have no backups, the funds are permanently lost. The blockchain cannot recover a lost private key. This is why multiple physical backups are essential.

Q: Can I use the same paper wallet for multiple cryptocurrencies?
A: No. A private key is specific to one blockchain network. A Bitcoin private key cannot access Ethereum addresses and vice versa. You need separate paper wallets for different blockchains.

Q: How long can a paper backup last?
A: Standard paper and ink can last 50–100 years in normal conditions. Metal engravings can last centuries. Factors affecting longevity:

  • Temperature stability (cool environments last longer)
  • Humidity control (dry is better)
  • Light exposure (darkness is better)
  • Material quality (acid-free paper lasts longer)

Q: Should I laminate a paper wallet?
A: Lamination can extend the life of the paper, but it also seals in any moisture. If moisture gets trapped, it accelerates decay. Lamination is optional—a home safe provides sufficient protection for most people.

Q: Can I create a paper wallet on my regular computer if I disconnect from the internet?
A: Technically, but the risk is residual malware on your computer. An air-gapped computer you trust not to have been online is more secure. If you must use your personal computer, assume it might be compromised and act accordingly.

Summary​

Paper wallets represent the extreme position on the security-convenience spectrum: maximum security, minimal convenience. By storing private keys exclusively on paper with no digital connectivity, they eliminate digital attack vectors entirely. The trade-off is vulnerability to physical threats (fire, water, theft) and the inconvenience of importing keys into digital wallets to spend funds. For long-term hodlers with significant holdings who value security above all, paper wallets are a legitimate choice. For frequent traders or those who value accessibility, hardware wallets offer better balance. Regardless of choice, multiple physical backups in separate locations are essential to prevent permanent loss of access.

Next​

What is a Seed Phrase? — Learn about the 12 or 24-word backup phrases that can recover any deterministic wallet.