Holding private keys on a device or medium that has never been, and is not, connected to a network.
Why it matters
Cold storage protects keys from remote compromise. It does not protect against approving a malicious transaction, which is a separate control — the Bybit incident involved a cold wallet whose keys were never extracted.
Not advice. Definitions are for understanding, not instruction. Nothing here is financial, legal, tax or security advice.