Air Gap

An air gap is a security measure in which a computer, device or network is kept physically isolated from the internet and from any other network that could carry an attack. The "gap" is the empty air between the protected machine and the outside world: no cable, no Wi-Fi and no Bluetooth link crosses it. Governments, utilities, banks and crypto custodians use air gaps to protect their most sensitive systems and secrets.

In crypto, an air gap is a common way to protect a private key. The key is created and stored on a device that never goes online, and transactions are signed on that device and carried across the gap by QR code, memory card or another one-way method. This is the strictest form of cold storage, and it contrasts with a hot wallet, whose keys sit on an internet-connected machine.

Imagine keeping your house key in a safe in a room with no doors to the street. A burglar walking past outside cannot reach it, however clever they are, because there is no path in. To use the key, you carry a note into the room, sign it there, and carry the signed note back out.

An air-gapped crypto wallet works like that room. Hackers on the internet cannot reach the key because the device holding it has no connection. The weak points are the moments when something is carried in or out, which is why careful users keep those steps simple and checkable.

A typical air-gapped crypto workflow follows these steps:

1. Key generation. The private key and its seed phrase are generated on the offline device and never leave it.
2. Preparing a transaction. An online "watch-only" wallet, which knows the public addresses but not the keys, builds an unsigned transaction.
3. Crossing the gap. The unsigned transaction is moved to the offline device by scanning a QR code or using a memory card. Bitcoin wallets often use the partially signed Bitcoin transaction (PSBT) format for this.
4. Signing. The offline device shows the amount and destination for the user to check, then applies a digital signature.
5. Broadcasting. The signed transaction is carried back to the online wallet and sent to the network.

Some hardware wallets are designed to work this way, with no USB data connection, while others connect by cable and rely on secure chips rather than full isolation.

• Personal savings. Long-term holders keep a cold wallet offline and use a smaller hot wallet for daily spending.
• Institutional custody. Digital asset custodians keep most client assets in air-gapped vaults, often with hardware security modules and multiple approvals.
• Multi-signature setups. In a multi-signature wallet, each signing key can sit on a separate air-gapped device in a different location.
• Critical infrastructure. Outside crypto, air gaps protect military systems, industrial control systems and some backup copies kept safe from ransomware.

An air gap removes the most common attack path, but it is not perfect. The best-known example is Stuxnet, malware discovered in 2010 that damaged equipment at an Iranian nuclear facility after reaching isolated systems, reportedly through infected USB drives. Researchers have also shown ways to leak data from air-gapped computers through sound, light, heat or radio signals, although these methods are slow and need prior access. In crypto, the bigger risks are usually human: a compromised online computer can show a fake destination address, a memory card can carry malware into the offline device, or a seed phrase backup can be photographed or stolen. Air-gapped setups also make spending slower, which is why they suit savings rather than active trading.

Security guides for air-gapped wallets commonly recommend buying devices directly from the manufacturer, generating keys offline, verifying every address on the offline device's screen, using one-way transfer methods such as QR codes where possible, and keeping seed phrase backups in separate secure places. Regular test transactions help confirm that recovery works before large sums are involved. Combined with security hardening of the online computer, these steps reduce cybersecurity risk without relying on a single point of protection.