Guveno
Request a demoLog in
HOW-TO

Setting up a cold storage vault in one afternoon

A walkthrough of an air-gapped key ceremony from scratch, including the awkward bits that are hard to do alone, and how Guveno keeps the cold side usable.

PN
Priya NairSecurity Engineering · Guveno
May 3, 2026·6 min read
Setting up a cold storage vault in one afternoon

What "cold" actually means

Cold storage is not a product, it is a property: the signing keys never touch an internet-connected machine. Everything else (balances, proposals, policies) can live online. Only the final signature happens air-gapped.

The trick is making that property convenient enough that you actually keep it. A vault you dread opening is a vault you will eventually shortcut.

The ceremony, step by step

Block out an afternoon, grab two people, and work through it without rushing:

  • Generate keys on an air-gapped device, never on your laptop.
  • Record the recovery material on steel, not paper, and split it across two locations.
  • Register the public side with Guveno so you can watch balances online.
  • Send a tiny test deposit and do one full air-gapped withdrawal before you trust it with real funds.
A person leaning into a large vault door, opening it with ease
A good cold setup is heavy to attack but light to open when you need it. Cold storage is always a trade-off between security and convenience; Guveno helps you strike the balance.

Keeping cold usable

Guveno watches the cold account online and lets you queue a withdrawal for signing, so the air-gapped step is a short, scripted ceremony rather than an all-day ordeal. Sweep into cold on a schedule, and keep only a working float hot.

Try this in Guveno
Start free on the Developer tier, or talk to us about a team setup. Sign-ups use referral codes right now — ask us for one, it's quick.

Keep reading

What we learned from a 4-of-7 multi-sig drill
POST-MORTEM

What we learned from a 4-of-7 multi-sig drill

We ran a full key-ceremony recovery on a Saturday: no production funds, all the pressure. Here is what surprised us, what did not, and the checklist we wrote afterwards.

An exchange wallet isn't just a wallet
PRODUCT

An exchange wallet isn't just a wallet

If you are running an exchange, fintech or any product that holds balances for other people, you need more than storage. You need custody you can defend and a ledger you can prove.