Air gap means a device that is physically incapable of network communication: no Wi-Fi, no Bluetooth, no NFC, no USB connection to anything that has those, no cable to the internet at all. The strongest cold-storage property, at the cost of operational friction. In 2026 the air-gap implementations a US holder actually encounters are mostly QR-code-based and microSD-based.
Why air gap is harder than "just unplugging"
Naive air gap fails in three known ways. First, "compromised computer next door" — an air-gapped laptop that you occasionally connect via USB to a regular Windows machine is one bad cable from being not-air-gapped anymore. Second, "the USB drive is the network" — the BadUSB and Stuxnet-class attacks proved that USB sticks can carry malware between air-gapped and non-air-gapped systems. Third, "the screen is also a network" — the side-channel research on extracting data via screen brightness or fan noise to a microphone is real, though impractical for retail attackers.
Hardware-wallet air gap, properly implemented, addresses all three: no USB in any direction, no opportunity for cable-borne malware, the transmitted data (signed transactions) is structured enough that side channels would not help an attacker anyway.
QR-based air gap
The host computer composes the unsigned transaction in a wallet like Sparrow Wallet or AirGap Vault, displays it as a QR code on screen, the hardware wallet scans the QR code with its camera, signs internally, displays a QR code with the signed transaction, the host scans the signed QR with its camera, broadcasts.
Implemented by Keystone 3 Pro, OneKey Pro, AirGap Vault on a dedicated phone. The user experience is closer to a hardware wallet with extra steps; the security gain is meaningful.
microSD-based air gap
The host computer writes the unsigned transaction (as a PSBT file) to a microSD card, ejects the card, you physically insert it into the hardware wallet, sign internally, eject, insert the card back into the host, broadcast.
Implemented by Coldcard Mk4. Even more friction than QR but with a different threat model — the data path is structured PSBT files, which are easier to validate.
When air gap is overkill
For a US-resident holder under $100K total stack, a standard USB-connected hardware wallet from a reputable brand is the right tool. The marginal security gain of QR air gap over USB-connected is real but small; the marginal operational friction is large enough that some holders quietly drift back to hot wallets out of inconvenience.
Air gap becomes worth the friction past mid-six-figures: at that point a $400 Keystone 3 Pro or Coldcard Mk4 paired with Sparrow Wallet is the standard institutional-grade setup. Below that, focus on the basics — official store, fresh seed, steel backup, separate device for signing.
Further reading: Hardware wallet, Cold wallet, Hardware wallet comparison.