Air Gap

An air gap is the deliberate physical separation of a device from all networks: no internet, no Bluetooth, no USB data connection. In bitcoin custody, an air-gapped device generates and stores private keys offline and signs transactions that are carried across the gap by QR codes or memory cards, so the keys never touch a connected computer.

Why it matters

Nearly all remote attacks on bitcoin holders, from malware to phishing to exchange hacks, depend on reaching the private key over a network. An air gap removes that path entirely. The workflow typically uses partially signed bitcoin transactions: an online watch-only wallet builds the transaction, the offline device signs it, and the signed result travels back for broadcast. The attack surface shrinks to physical theft and supply-chain compromise of the device itself.

Air gaps are standard practice in other high-security fields, including military systems and certificate authorities, and bitcoin borrowed the discipline directly from them.

In the gold vs bitcoin debate

Gold is air-gapped by nature: a coin in a safe has no network interface to attack. Bitcoin must engineer that property deliberately, and the air gap is how it gets there. Done well, cold-stored bitcoin combines gold-like isolation with something gold cannot offer, the ability to move any amount across the world the moment the owner chooses to bridge the gap for a single signature.