How to Store Stellar (XLM) Safely — Cold Storage Guide 2026

Author logo
Rukkayah Jigam

Why XLM Storage Is Different From Other Coins

If you're holding XLM for the long term, don't leave it on an exchange. You need control. It feels fine. Until the exchange freezes withdrawals, gets hacked, or simply closes, your XLM is the exchange's problem to return, not yours to control.

 

Self-custody changes that equation. When you control the private keys, a 100 XLM transaction is signed on your device and broadcast directly to the Stellar network. No intermediary can freeze your balance or require permission to move it. But Stellar has a few mechanics that catch beginners off guard, and they're worth understanding before you move a single lumen.

 

The minimum account reserve. Every Stellar address must hold at least 1 XLM at all times. That's two base reserves of 0.5 XLM each, enforced at the protocol level. If you try to send your entire balance, the network will reject the transaction because it would drop the account below the floor. Plan for it.

 

Trustlines cost reserve, too. Stellar uses a trustline system for non-XLM assets. If you want to hold USDC on Stellar, your wallet must first create a trustline for it, and each trustline reserves an additional 0.5 XLM. So an account holding XLM plus USDC needs to reserve at least 1.5 XLM, untouchable.

 

The memo field. When you send XLM to an exchange, that exchange almost certainly shares one public address among thousands of customers. The memo (also called a destination tag) is how the exchange routes your deposit to your specific account. Miss it, and your XLM lands in a pool with no attribution. Many exchanges require it; your self-custodial wallet does not, because you own the whole address. These three things, the reserve floor, trustline reserves, and the memo decision, are what make an XLM storage guide different from a generic crypto guide. Get them right, and the rest is straightforward.

 

Cold storage keeps private keys offline entirely, away from internet-connected devices. It's the right choice for long-term XLM holdings or any balance you don't need to touch daily. Hot wallets are faster and more accessible, but they're connected to the internet, which means they carry exposure that cold storage eliminates. A practical split: keep a small amount of spending hot; move the bulk to cold.

How to Store Stellar (XLM) Safely: Cold Storage Step by Step

Here's how the whole process works, from choosing a storage method to completing your first transfer safely.

Step 1: Choose your cold-storage method

Hardware wallets are the recommended option for most people. A hardware wallet generates and stores private keys inside a dedicated secure chip. When you initiate a transaction, the device signs it internally and returns only the signed output for broadcast. The private key never touches an internet-connected device. That's the core security property. At the cited market price of around $0.18-$0.19 per XLM, 100 XLM would be worth roughly $18-$19.

 

Paper wallets and air-gapped systems are also technically cold storage, but they carry their own trade-offs: paper degrades, air-gapped setups require technical precision, and neither offers the same usability when you need to move funds. For a beginner holding 100 XLM, a hardware wallet is the practical choice. A few things to look for if you're storing 100 XLM or more: support for the Stellar network specifically, a secure-element chip for key storage, and a clear backup system so you're not one lost device away from losing access permanently.

Step 2: Set up your wallet and generate your XLM address

Once your hardware wallet is set up, navigate to the Stellar network in the wallet's app and generate your receiving address. If you're moving 100 XLM, copy the address from the app and compare it before sending. Stellar addresses begin with the letter G. The corresponding private key starts with S and must never leave your secure device.

 

Write down your backup material during setup and store it in at least two physically separate locations. Never photograph it or save it to a cloud service. Test recovery before you store any significant amount. This verifies that your backup actually works before it matters.

Step 3: Fund the new address with the minimum reserve first

Before transferring your full XLM balance, send enough to cover the minimum reserve. The Stellar network requires 1 XLM to activate a new account. If you're planning to hold any Stellar-based tokens alongside XLM, add 0.5 XLM per trustline you intend to create on top of that.

 

This is a small but real cost. It's not a fee that disappears. It stays locked in the account as long as those entries exist. The reserve can be reclaimed if you close trustlines or the account itself, but for most holders, it's simply a permanent floor.

Step 4: Send a test transaction before moving the full balance

Send 1 XLM first and confirm it arrives in your hardware wallet before sending the rest. This step costs almost nothing and confirms that the address is correct, the network is right, and the transfer route works. Skipping it to save time is how people lose significant balances to a simple address error.

Step 5: Understand when to use a memo

Here's the rule: when you send 100 XLM to an exchange, check whether that exchange requires a memo. Most do. Your exchange's withdrawal or deposit page will tell you. If a memo is required and you omit it, your funds may not be credited to your account.

 

When you send XLM from an exchange to your own hardware wallet, no memo is needed. Your wallet address is entirely yours. There's no routing problem to solve. The Tangem app includes a reminder prompt on the XLM send screen specifically to flag this for users, because missing a required memo is one of the most common Stellar transaction errors.

Step 6: Verify the address before every transaction

Always generate the receiving address directly in your wallet app. Select the Stellar network at the sending platform, paste the address, and check it character by character before confirming. Clipboard-hijacking malware can replace a copied address with an attacker's address. Take ten seconds to check it manually. That small pause can prevent a costly error.

Storage method comparison

MethodKeys storedInternet exposureBest for
Hardware walletOffline, secure chipNone during signingLong-term holders, large balances
Software/hot walletOn deviceContinuousSmall spending amounts
Exchange custodyExchange controls keysExchange-dependentActive trading only
Paper walletPrinted offlineNoneAdvanced users with secure physical storage

Tangem as a cold-storage option for XLM

Tangem Cold Wallet supports the Stellar network, so it can store and manage XLM alongside more than 16,000 cryptocurrencies and tokens across 91+ blockchain networks. The wallet uses a Samsung S3D350A secure-element chip certified at Common Criteria EAL6+, and a true random number generator creates private keys directly on the chip during setup. The keys are generated and stored exclusively in the secure element and cannot be extracted or duplicated.

 

Signing a 100 XLM transaction works like this: you initiate the send in the Tangem app, tap the card to your phone over NFC, and the secure element signs the transaction offline. The app then broadcasts the signed transaction. The private key never leaves the card. The hardware is the size of a credit card (85.5 mm × 54 mm × 0.88 mm) and is rated IP69K for dust and water protection. No battery or charging is needed; the card draws power from the phone's NFC field. Setup takes under 3 minutes according to Tangem's product documentation, and the 2-card set is listed at a one-time cost of $54.90.

 

Tangem's backup system uses 2-3 cards sharing the same private key. Each card provides full wallet access, and Tangem recommends storing them separately: one for daily use, one in a secure home location, and an optional third with a trusted person or in a safe-deposit box.

 

The Tangem app also supports trustline management for Stellar tokens, and it includes a reminder prompt for the XLM destination tag on the send screen. If all backup cards are lost and no seed phrase was created, the funds are permanently inaccessible. The default seedless setup does not require a recovery phrase, whereas a BIP39-compatible seed phrase is optional for users seeking portability across wallets. Tangem's security has been independently audited by Kudelski Security in 2018, Riscure in 2023, and Cure53 in 2026. The wallet app for iOS and Android is open source and available on GitHub.

Backup and ongoing security habits

Once your XLM is in cold storage, the main risk shifts from online attacks to physical loss or access failure. Keep backup material in at least two places, then make these habits routine:

  • Store backup cards (or seed phrase material, if you created one) in at least two separate physical locations.
  • Never store a private key or recovery material in a cloud file or as a phone photo.
  • Test your recovery process before storing a large amount, and again after any significant change to your setup.
  • Keep only the amount you actively spend in a hot wallet. The bulk belongs in cold storage.

The Tangem app's mobile interface also supports Face ID or Touch ID to supplement authentication, though a physical card tap is still required for every transaction signature. If your phone is lost or broken, your private keys remain on the card. Install the app on a new phone and tap the card to restore access.

FAQ

  • The Stellar network requires every account to maintain a minimum balance of 1 XLM at all times (two base reserves of 0.5 XLM each). Each additional ledger entry, such as a trustline for USDC or another Stellar-based token, adds another 0.5 XLM to the required minimum. This reserve stays locked in the account as long as those entries exist and cannot be sent out.

  • No. If you send 100 XLM to your own hardware wallet, no memo is needed. A memo is only needed when sending XLM to an exchange or a service that uses a shared deposit address to route funds to individual customer accounts. When you send to your own hardware wallet, you own the entire address, so no routing tag is required. The confusion arises because the same send screen is used for both cases. Always check the destination type before sending.

  • Your XLM may arrive at the exchange's address but not be credited to your account, because the exchange has no way to identify which customer sent it. Recovery depends entirely on the exchange's support process, which can be slow or unsuccessful. Always check whether the receiving exchange requires a memo before initiating a transfer, and copy it exactly as shown.

  • Check the wallet's supported-assets list for Stellar, then select the Stellar network and generate a receiving address. A Stellar public address begins with G. If the wallet cannot provide a Stellar receiving address, do not send XLM to it.

  • Review the destination G-address, selected network, and memo requirement before assuming the XLM is lost. If an exchange requires a memo, contact its support team with the transaction details instead of sending the transfer again.

  • Not by itself. With a Tangem Cold Wallet, private keys remain on the card, and every transaction requires a physical tap. Someone who accesses your phone still cannot sign a transfer without the card and access authentication. If you suspect your phone is compromised, do not use it to initiate transactions until you have secured or replaced it.

  • If all cards are lost and you did not create a seed phrase, there is no way to recover. Your private keys were stored on those cards, and the funds remain inaccessible. Store cards separately so one loss does not remove every way to access your wallet.

Author logo
Author Rukkayah Jigam

Writer & editor covering digital assets and product updates.

Author logo
Reviewed by Patrick Dike-Ndulue

Senior editor covering crypto, onchain equities, and technology.