Paper wallets: why the old way of cold storage aged badly
In crypto's early years, the gold standard of cold storage was a sheet of paper. You'd generate a key pair on a website, print the address and private key as QR codes, fold it into an envelope and put it somewhere safe. Nothing online, nothing to hack.
Many of those paper wallets still exist, some holding coins bought long ago. The idea behind them — keep the key offline — remains sound. The way they did it has aged badly, and if you have one, it's worth understanding why before you touch it.
What a paper wallet is
A paper wallet is a single private key and its address, printed on paper. To receive, anyone sends coins to the printed address. To spend, you import or "sweep" the private key into a software wallet.
That's the whole design: one key, one address, no software in between until you spend.
Where it went wrong
Generation was the weak point. Most paper wallets were generated on a website. If that site was malicious, compromised, or simply had a weak random number generator, the "offline" key was known to someone else from the moment it was created. Several popular generators were later found to be cloned by attackers, and keys from them were swept.
Printing leaks. Printers keep copies in memory and queues, network printers send data across the network, and some cloud-connected printers upload documents. Each is a copy of your private key outside your control.
One address, reused. A paper wallet has one address. Every deposit goes to the same place, so your whole balance and history are linked together on the chain. Modern wallets generate a fresh address for each receive.
Spending is all-or-nothing — and easy to get wrong. On Bitcoin-style chains, a transaction spends whole coins and returns the remainder as "change". Early wallets that imported a paper key sometimes sent that change to a new address in the software wallet, not back to the paper. People who spent part of a paper wallet and then put the paper back in the drawer later found it empty — the rest had moved to an address they never backed up. How coins and change work explains why.
Paper is fragile. Ink fades, thermal paper darkens, water and fire destroy it, and a single sheet is a single point of failure.
What replaced it
The core idea survived; the implementation changed:
- Recovery phrases replaced single keys. Twelve or twenty-four words regenerate a whole hierarchy of keys and addresses, so a wallet can use a new address every time and still be restored from one backup.
- Dedicated devices and apps generate keys locally with proper randomness, instead of on a web page.
- Multisig removed the single point of failure: spending needs several keys, held in different places.
The difference between hot and cold storage is still real, but "cold" no longer has to mean "one private key on a piece of paper".
If you have an old paper wallet
- Don't type the key into a website. Not to check the balance, not to "validate" it. Check the balance by entering the address — never the key — into a block explorer.
- Plan to move everything at once. Use a reputable wallet's sweep function, which moves the full balance in one transaction to an address in your new wallet.
- Set up the destination first, with its recovery phrase backed up properly. Seed phrase best practices covers how.
- Treat the paper key as used afterwards. Don't send anything to that address again.
- If it's for a fork or an old chain, check whether the same key controls coins elsewhere before you destroy the paper — some old wallets hold forked coins too.
How SSP compares
SSP keeps the useful part of the paper-wallet idea — keys you control, not a company — and drops the weak parts. Keys are generated on your own devices, never on a website. Each wallet is backed up with a recovery phrase rather than a single key, and addresses come from a standard derivation path, so change returns to addresses your backup already covers.
Above all, there's no single sheet that controls everything. Your funds sit in a 2-of-2 multisig vault: one key in SSP Wallet, one on SSP Key, each with its own recovery phrase. Losing or exposing one of them doesn't hand anyone your coins.
The honest summary
Paper wallets were a clever answer to a real problem: keeping keys off the internet. But website generation, printer leaks, single addresses, change-handling mistakes and fragile paper made them riskier than they looked.
If you still hold one, check it by its address, sweep it all in one go into a properly backed-up wallet, and retire the paper. The goal it served — keys only you control — is better met today by recovery phrases, local key generation and multisig.
