Moving coins off an exchange is a five-step job: choose a hardware wallet, write the recovery seed by hand, install the vendor's app, generate a receive address on the device, and verify that address on the device screen before sending a test amount. Broken cryptography almost never causes losses here. Clipboard malware, phishing pages, and seeds photographed "just in case" do.
Choose the wallet before you touch the exchange
A cold wallet stays cold only if the private keys never touch an internet-connected machine. Devices such as Trezor's Model T and Safe 3 generate and store keys on the device itself, and the seed phrase appears on the device screen rather than your laptop's. Buy from the manufacturer or an authorized reseller. A discounted unit from a marketplace seller is the easiest way to end up with a wallet someone else already configured.
What "cold" means in practice
Your coins never live in the wallet. They sit on the blockchain, and the device holds the keys that authorize moving them. That distinction matters when you check a balance: a block explorer shows the truth, while the wallet app is only a viewer.
Set it up on a machine you trust
Run the initial setup on your own computer, using a fresh download of the official app from the vendor's domain. Skip setup entirely on public Wi-Fi or a borrowed laptop.
Write down the seed like your inheritance depends on it
It does. That 12- or 24-word phrase is the entire wallet. Anyone who reads it owns the funds, and no support agent can reverse a theft. Write it by hand, in order, on the card provided, then store it somewhere fire-resistant and private. Two copies in two separate physical locations beat one copy in a drawer.
Never type the seed into a website, a chat window, or a note-taking app, and never photograph it. One cloud backup of that photo is all an attacker needs.
Generate the receive address on the device, then verify it twice
This step is where people get sloppy. Open the receive flow in the companion app, let the device display the address, and compare the two character by character. Addresses are long, and malware that swaps a clipboard entry for an attacker's address is a well-documented trick. If the screen and the app disagree, stop and start over.
Send a test transaction first
Suppose you're moving 0.15 BTC. Send 0.001 BTC first, confirm it lands at the address your device displayed, then send the rest. The test costs an extra withdrawal fee, and it is the cheapest insurance in this process.
Expect whitelist delays
Many exchanges hold first-time withdrawals for a security review, and some require you to whitelist a new address before sending. Plan for a delay on the first transfer. Don't panic-refresh, and don't approve a "support" call about it.
A real scenario worth copying
A reader I'll call Dana moved 0.08 BTC off an exchange in one go. She pasted the address into the withdrawal field, confirmed the email code, and waited. The coins arrived. Two weeks later, after a laptop failure, she tried to restore her wallet and found she had written down eleven words instead of twelve. The transfer was fine. The backup wasn't, and the funds were gone.
Her fix, which I'd suggest for you: after setup, wipe the device and restore it once from your written seed. If the restored wallet shows the same addresses, your backup is real.
Common mistakes during the move
- Sending the full balance before a test transfer clears
- Storing the seed digitally "temporarily"
- Buying a used or discounted device from a third party
- Trusting a clipboard address without checking the device screen
- Leaving the exchange account open with saved payment methods and no 2FA
Once the coins are off the exchange, close out the loose ends there: remove saved bank details, enable two-factor authentication, and decide whether you still need the account at all.
Frequently asked questions
How much does it cost to move coins to a cold wallet?
The hardware wallet is the main expense, and prices vary by model and region. On top of that, the exchange charges a withdrawal fee for each transfer and the blockchain charges a network fee. Your test transaction pays the withdrawal fee twice, which is why some people test with the smallest amount the exchange allows.
Can I move coins back to an exchange later?
Yes. Send from your hardware wallet to a deposit address the exchange gives you, and confirm that address on your device screen before approving. The same verification habits apply in both directions. Some exchanges hold incoming deposits for confirmation, so don't plan on instant access.
What happens to my crypto if I lose the hardware wallet?
The device is replaceable. Your funds are recoverable with the seed phrase on any compatible wallet, which is why the written backup matters more than the gadget. Lose both the device and the seed, and the funds are unrecoverable.
Is it safe to buy a used hardware wallet?
I wouldn't. A used device could have been tampered with, or its seed already recorded by the previous owner. The savings aren't worth the risk when the whole point is controlling your own keys.
Before you send anything, run the restore test: wipe the device, rebuild it from your written seed, and confirm the addresses match. If they don't, stop and start over with a fresh seed.