How to Store Bitcoin Cash (BCH) Safely — Cold Storage Guide 2026

Why leaving BCH on an exchange is risky

You bought some BCH. It's sitting in your exchange account, and it feels fine; you can see the balance, the price updates in real time, and withdrawals take 30 seconds. Here's what that balance actually represents: a number in a database. The exchange holds the private keys. You hold an IOU. That distinction matters more than most new holders realize.

Crypto-related theft reached $4.04 billion in 2025. More than $1.5 billion of that came from a single exchange hack, Bybit, in February 2025. Every coin on a custodial platform is exposed to the same category of risk: hacks, insolvency, regulatory freezes, and the possibility that the platform simply stops operating. Self-custody changes that equation. When you control the private keys, no exchange failure touches your BCH. The trade-off is that you now carry the responsibility for keeping those keys safe. That's what this guide is for.

How to Store Bitcoin Cash (BCH) Safely: Cold Storage Guide 2026

• Cold storage means keeping private keys completely offline. No internet connection, no exposure to remote attacks, no dependency on a third party's security team.

   

• Paper wallets print the keys on physical paper. They're free to create, but they're fragile. Water, fire, or a faded printer can permanently destroy your access.

   

• Air-gapped devices are computers that have never connected to the internet. They offer strong security but require technical comfort that most beginners don't have.

   

• Hardware wallets sit between those two extremes. They're dedicated physical devices that generate and store private keys on a secure chip. The chip signs transactions internally, so the private key never touches an internet-connected device. For most BCH holders, hardware wallets are the recommended starting point because they balance robust security with a manageable setup.

Here's how the signing flow works in practice: when you want to send BCH, your phone or computer prepares an unsigned transaction and passes it to the hardware wallet. The wallet signs it internally on the secure chip, then returns the signed version to be broadcast. The key stays offline throughout.

Tangem Wallet is one hardware wallet option worth knowing about for BCH holders. It stores private keys on a Samsung S3D350A secure-element chip rated at Common Criteria EAL6+, generates keys using a DRAM-based True Random Number Generator entirely on-chip, and lists Bitcoin Cash among its supported networks across 91+ blockchains. The device is a credit-card-sized NFC card: you tap it to your phone to sign, with NFC communication over an AES-256-encrypted channel at a range of 0-5 cm. No battery or charging required.

That said, Tangem does have real limitations to weigh. There is no desktop or web interface. The app is mobile-only (iOS and Android). And if you use the recommended seedless backup setup and lose all your cards without a seed phrase, your funds are permanently inaccessible. These aren't dealbreakers for most users, but they're worth knowing before you set up.

Whatever hardware wallet you choose, the core principle is the same: the private key never leaves the secure chip.

BCH Address Formats: CashAddr vs. Legacy

Legacy BCH addresses can look like BTC addresses. That visual overlap has led users to mistakenly send BCH to BTC or BTC to BCH.

Bitcoin Cash uses two address formats. Legacy addresses follow the Base58 format, often starting with 1 or 3, the same visual pattern as Bitcoin (BTC) addresses. CashAddr is BCH's native format, introduced in January 2018 specifically to reduce misrouting. CashAddr addresses begin with bitcoincash: followed by characters starting with q or p.

Both formats encode the same underlying BCH address. They're two different representations of the same destination, so funds sent to either format arrive at the same keys. The practical difference is recognition: a CashAddr address is visually distinct from a BTC address, which makes it much harder to accidentally send BCH to a Bitcoin wallet or vice versa. That accident is possible with legacy addresses, and it's not always recoverable. Sending BCH to a BTC SegWit address is generally not recoverable without third-party intervention and fees.

Here's what this means for cold storage setup: when you generate a receive address in your hardware wallet, confirm that your wallet explicitly lists Bitcoin Cash support and that the address it shows is a BCH address, either CashAddr format or a correctly mapped legacy BCH address. If you're unsure which format your wallet or exchange uses, most modern wallets and exchanges support CashAddr. You can also convert between formats using tools like Electron Cash or cashaddr.bitcoincash.org, since conversion is purely an encoding change and doesn't alter the destination.

When withdrawing from an exchange, always confirm the withdrawal network is set to BCH before pasting your address. This is the single most common mistake: selecting the wrong network on the exchange side.

Step-by-Step: Moving BCH to Cold Storage

Moving BCH from an exchange to a hardware wallet follows the usual cold-storage workflow. BCH adds a few checks.

1. Set up your hardware wallet.

Follow the manufacturer's setup instructions. This generates your private keys offline on the device. For Tangem, setup takes 1-3 minutes: open the app, tap the card, and the wallet is ready. If your wallet generates a seed phrase, write it down on paper immediately and store it in a physically secure location. Never in cloud storage, email, screenshots, or photos.

2. Get your BCH receive address.

Open your hardware wallet's app and navigate to Bitcoin Cash. Copy the receiving address. Confirm it's a BCH address (CashAddr format starting with q is a reliable signal). Double-check by verifying the first and last few characters on both the app and your device screen.

3. Send a small test amount first.

Before moving your full BCH balance, send a small amount, something you're comfortable losing if something goes wrong. Confirm it arrives in your hardware wallet. This step catches address errors, network mismatches, and configuration issues before they cost you anything significant.

4. Wait for on-chain confirmations.

After the test transaction appears in your wallet, wait for the required number of on-chain confirmations before proceeding. The number varies by exchange and network conditions.

5. Move the remaining balance.

Once the test transfer is confirmed, withdraw the rest of your BCH using the same address and BCH network settings on the exchange.

6. Secure the device physically.

Store your hardware wallet somewhere safe. For a card-format wallet like Tangem, this could be a safe or a secure drawer. The card itself is rated IP69K for dust and water resistance and operates across a temperature range of -25°C to +50°C, so physical durability isn't a major concern, but physical access by someone else is.

When you want to spend BCH later, the flow reverses: prepare the transaction in the app, tap the card to sign, and the app broadcasts it. The private key stays on the chip throughout.

Backup and Recovery Practices

Cold storage security doesn't end at setup. The backup is just as important as the wallet itself. 

• Keep backups in at least two physically separate locations. A hardware wallet stored at home and a backup in a bank safe-deposit box, for instance, protect against fire or theft at a single location.

   

• Use durable media. Paper is vulnerable to water and fire. Metal backup plates are more resilient for long-term seed phrase storage.

   

• Test recovery before storing large amounts. This is the step most people skip, and it's the one that matters most. A backup you've never tested is a backup you don't actually have. Reset a spare device or use a test wallet and verify that your seed phrase or backup cards restore full access.

For Tangem specifically, the recommended seedless setup uses 2 or 3 cards that share the same private key. Each card has full wallet access. If one card is lost while another remains, the remaining card still provides access. A person who finds a lost card still needs the wallet access code to use it, which provides a layer of protection against physical theft. Tangem recommends keeping backup cards in separate locations and periodically verifying them.

The hard limit: if all cards are lost and there is no seed phrase, funds are permanently inaccessible. There is no recovery process. This is the fundamental trade-off of self-custody. You own the keys, which means you own the responsibility. Tangem also supports importing or creating a standard BIP39 seed phrase (12- or 24-word) if you prefer the traditional backup method. That gives you a fallback independent of the physical cards.

Keep only a small spending balance in a hot wallet for active use. Move the bulk of your BCH holdings to cold storage. A hot wallet compromise then affects only the small amount you kept accessible, not your long-term savings.