Overview
A paper wallet is a physical document containing a Bitcoin address for receiving funds and the corresponding private key for spending them. The idea is simple: if the private key never exists on a connected device, it cannot be stolen by malware or hackers. Paper wallets were among the earliest forms of cold storage and were widely recommended from roughly 2011 to 2016.
How Paper Wallets Work
A paper wallet generator creates a random key pair, encodes the private key (typically in WIF format) and the corresponding address as text and QR codes, and displays them for printing.
┌─────────────────────────────────────────┐
│ BITCOIN PAPER WALLET │
│ │
│ PUBLIC ADDRESS: PRIVATE KEY: │
│ ┌─────────┐ ┌─────────┐ │
│ │ ▄▄▄▄▄▄▄ │ │ ▄▄▄▄▄▄▄ │ │
│ │ █ QR █ │ │ █ QR █ │ │
│ │ ▀▀▀▀▀▀▀ │ │ ▀▀▀▀▀▀▀ │ │
│ └─────────┘ └─────────┘ │
│ 1A1zP1eP5Q... 5Kb8kLf9z... │
│ │
│ ⚠ KEEP PRIVATE KEY SECRET │
└─────────────────────────────────────────┘
Security Risks
Despite their apparent simplicity, paper wallets carry significant risks that make them inferior to modern alternatives:
- Generation risk — If the generator runs on a compromised computer, the private key is exposed from the start. Truly air-gapped generation is difficult to verify.
- Single-key vulnerability — Paper wallets use a single key pair. There is no seed phrase or derivation path, so loss of the paper means permanent loss of funds.
- Address reuse — Users often send change back to the same address after a partial spend, or worse, fail to sweep the entire balance, leaving leftover funds vulnerable.
- Physical degradation — Paper can be damaged by water, fire, or fading ink over time.
Modern Alternatives
Hardware wallets have largely replaced paper wallets as the recommended cold storage solution. Hardware wallets keep private keys on a dedicated secure element, support HD wallet derivation with seed phrase backup, and allow safe transaction signing without exposing keys to a general-purpose computer.
Common Misconception
Many people assume that a paper wallet is inherently safe because the key is "offline." However, the key was generated on a computer at some point, and if that computer was compromised, the paper wallet is compromised from birth. The generation environment is the weakest link.