Cold Wallet
A wallet that keeps private keys permanently offline.
Hardware wallets sign transactions inside a dedicated device so the private key never touches an internet-connected computer. Ledger and Trezor are the best-known consumer options.
They defend against remote attacks but not against a leaked seed phrase or an approval signed carelessly, so verifying transaction details on the device screen matters.