Cold wallet
Key storage that has never been connected to the internet — the only thing protecting against a compromised computer draining the holdings.
A hot wallet lives on a connected device and is convenient but exposed. A cold wallet keeps the private key offline, either on a dedicated hardware device such as a Ledger or Trezor, or simply written on paper or stamped into metal.
A hardware wallet signs the transaction internally and only emits the signature, so the key never leaves the device even when plugged into an infected computer. Protection therefore shifts to physical security and to the seed phrase: whoever gets the twelve words owns everything, and whoever loses them has lost everything with no possibility of recovery.