namespace Elementor; use Elementor\Core\Admin\Menu\Admin_Menu_Manager; use Elementor\Core\Wp_Api; use Elementor\Core\Admin\Admin; use Elementor\Core\Breakpoints\Manager as Breakpoints_Manager; use Elementor\Core\Common\App as CommonApp; use Elementor\Core\Debug\Inspector; use Elementor\Core\Documents_Manager; use Elementor\Core\Experiments\Manager as Experiments_Manager; use Elementor\Core\Kits\Manager as Kits_Manager; use Elementor\Core\Editor\Editor; use Elementor\Core\Files\Manager as Files_Manager; use Elementor\Core\Files\Assets\Manager as Assets_Manager; use Elementor\Core\Modules_Manager; use Elementor\Core\Schemes\Manager as Schemes_Manager; use Elementor\Core\Settings\Manager as Settings_Manager; use Elementor\Core\Settings\Page\Manager as Page_Settings_Manager; use Elementor\Core\Upgrade\Elementor_3_Re_Migrate_Globals; use Elementor\Modules\History\Revisions_Manager; use Elementor\Core\DynamicTags\Manager as Dynamic_Tags_Manager; use Elementor\Core\Logger\Manager as Log_Manager; use Elementor\Core\Page_Assets\Loader as Assets_Loader; use Elementor\Modules\System_Info\Module as System_Info_Module; use Elementor\Data\Manager as Data_Manager; use Elementor\Data\V2\Manager as Data_Manager_V2; use Elementor\Core\Common\Modules\DevTools\Module as Dev_Tools; use Elementor\Core\Files\Uploads_Manager as Uploads_Manager; if ( ! defined( 'ABSPATH' ) ) { exit; } /** * Elementor plugin. * * The main plugin handler class is responsible for initializing Elementor. The * class registers and all the components required to run the plugin. * * @since 1.0.0 */ class Plugin { const ELEMENTOR_DEFAULT_POST_TYPES = [ 'page', 'post' ]; /** * Instance. * * Holds the plugin instance. * * @since 1.0.0 * @access public * @static * * @var Plugin */ public static $instance = null; /** * Database. * * Holds the plugin database handler which is responsible for communicating * with the database. * * @since 1.0.0 * @access public * * @var DB */ public $db; /** * Controls manager. * * Holds the plugin controls manager handler is responsible for registering * and initializing controls. * * @since 1.0.0 * @access public * * @var Controls_Manager */ public $controls_manager; /** * Documents manager. * * Holds the documents manager. * * @since 2.0.0 * @access public * * @var Documents_Manager */ public $documents; /** * Schemes manager. * * Holds the plugin schemes manager. * * @since 1.0.0 * @access public * * @var Schemes_Manager */ public $schemes_manager; /** * Elements manager. * * Holds the plugin elements manager. * * @since 1.0.0 * @access public * * @var Elements_Manager */ public $elements_manager; /** * Widgets manager. * * Holds the plugin widgets manager which is responsible for registering and * initializing widgets. * * @since 1.0.0 * @access public * * @var Widgets_Manager */ public $widgets_manager; /** * Revisions manager. * * Holds the plugin revisions manager which handles history and revisions * functionality. * * @since 1.0.0 * @access public * * @var Revisions_Manager */ public $revisions_manager; /** * Images manager. * * Holds the plugin images manager which is responsible for retrieving image * details. * * @since 2.9.0 * @access public * * @var Images_Manager */ public $images_manager; /** * Maintenance mode. * * Holds the maintenance mode manager responsible for the "Maintenance Mode" * and the "Coming Soon" features. * * @since 1.0.0 * @access public * * @var Maintenance_Mode */ public $maintenance_mode; /** * Page settings manager. * * Holds the page settings manager. * * @since 1.0.0 * @access public * * @var Page_Settings_Manager */ public $page_settings_manager; /** * Dynamic tags manager. * * Holds the dynamic tags manager. * * @since 1.0.0 * @access public * * @var Dynamic_Tags_Manager */ public $dynamic_tags; /** * Settings. * * Holds the plugin settings. * * @since 1.0.0 * @access public * * @var Settings */ public $settings; /** * Role Manager. * * Holds the plugin role manager. * * @since 2.0.0 * @access public * * @var Core\RoleManager\Role_Manager */ public $role_manager; /** * Admin. * * Holds the plugin admin. * * @since 1.0.0 * @access public * * @var Admin */ public $admin; /** * Tools. * * Holds the plugin tools. * * @since 1.0.0 * @access public * * @var Tools */ public $tools; /** * Preview. * * Holds the plugin preview. * * @since 1.0.0 * @access public * * @var Preview */ public $preview; /** * Editor. * * Holds the plugin editor. * * @since 1.0.0 * @access public * * @var Editor */ public $editor; /** * Frontend. * * Holds the plugin frontend. * * @since 1.0.0 * @access public * * @var Frontend */ public $frontend; /** * Heartbeat. * * Holds the plugin heartbeat. * * @since 1.0.0 * @access public * * @var Heartbeat */ public $heartbeat; /** * System info. * * Holds the system info data. * * @since 1.0.0 * @access public * * @var System_Info_Module */ public $system_info; /** * Template library manager. * * Holds the template library manager. * * @since 1.0.0 * @access public * * @var TemplateLibrary\Manager */ public $templates_manager; /** * Skins manager. * * Holds the skins manager. * * @since 1.0.0 * @access public * * @var Skins_Manager */ public $skins_manager; /** * Files manager. * * Holds the plugin files manager. * * @since 2.1.0 * @access public * * @var Files_Manager */ public $files_manager; /** * Assets manager. * * Holds the plugin assets manager. * * @since 2.6.0 * @access public * * @var Assets_Manager */ public $assets_manager; /** * Icons Manager. * * Holds the plugin icons manager. * * @access public * * @var Icons_Manager */ public $icons_manager; /** * WordPress widgets manager. * * Holds the WordPress widgets manager. * * @since 1.0.0 * @access public * * @var WordPress_Widgets_Manager */ public $wordpress_widgets_manager; /** * Modules manager. * * Holds the plugin modules manager. * * @since 1.0.0 * @access public * * @var Modules_Manager */ public $modules_manager; /** * Beta testers. * * Holds the plugin beta testers. * * @since 1.0.0 * @access public * * @var Beta_Testers */ public $beta_testers; /** * Inspector. * * Holds the plugin inspector data. * * @since 2.1.2 * @access public * * @var Inspector */ public $inspector; /** * @var Admin_Menu_Manager */ public $admin_menu_manager; /** * Common functionality. * * Holds the plugin common functionality. * * @since 2.3.0 * @access public * * @var CommonApp */ public $common; /** * Log manager. * * Holds the plugin log manager. * * @access public * * @var Log_Manager */ public $logger; /** * Dev tools. * * Holds the plugin dev tools. * * @access private * * @var Dev_Tools */ private $dev_tools; /** * Upgrade manager. * * Holds the plugin upgrade manager. * * @access public * * @var Core\Upgrade\Manager */ public $upgrade; /** * Tasks manager. * * Holds the plugin tasks manager. * * @var Core\Upgrade\Custom_Tasks_Manager */ public $custom_tasks; /** * Kits manager. * * Holds the plugin kits manager. * * @access public * * @var Core\Kits\Manager */ public $kits_manager; /** * @var \Elementor\Data\V2\Manager */ public $data_manager_v2; /** * Legacy mode. * * Holds the plugin legacy mode data. * * @access public * * @var array */ public $legacy_mode; /** * App. * * Holds the plugin app data. * * @since 3.0.0 * @access public * * @var App\App */ public $app; /** * WordPress API. * * Holds the methods that interact with WordPress Core API. * * @since 3.0.0 * @access public * * @var Wp_Api */ public $wp; /** * Experiments manager. * * Holds the plugin experiments manager. * * @since 3.1.0 * @access public * * @var Experiments_Manager */ public $experiments; /** * Uploads manager. * * Holds the plugin uploads manager responsible for handling file uploads * that are not done with WordPress Media. * * @since 3.3.0 * @access public * * @var Uploads_Manager */ public $uploads_manager; /** * Breakpoints manager. * * Holds the plugin breakpoints manager. * * @since 3.2.0 * @access public * * @var Breakpoints_Manager */ public $breakpoints; /** * Assets loader. * * Holds the plugin assets loader responsible for conditionally enqueuing * styles and script assets that were pre-enabled. * * @since 3.3.0 * @access public * * @var Assets_Loader */ public $assets_loader; /** * Clone. * * Disable class cloning and throw an error on object clone. * * The whole idea of the singleton design pattern is that there is a single * object. Therefore, we don't want the object to be cloned. * * @access public * @since 1.0.0 */ public function __clone() { _doing_it_wrong( __FUNCTION__, sprintf( 'Cloning instances of the singleton "%s" class is forbidden.', get_class( $this ) ), // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped '1.0.0' ); } /** * Wakeup. * * Disable unserializing of the class. * * @access public * @since 1.0.0 */ public function __wakeup() { _doing_it_wrong( __FUNCTION__, sprintf( 'Unserializing instances of the singleton "%s" class is forbidden.', get_class( $this ) ), // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped '1.0.0' ); } /** * Instance. * * Ensures only one instance of the plugin class is loaded or can be loaded. * * @since 1.0.0 * @access public * @static * * @return Plugin An instance of the class. */ public static function instance() { if ( is_null( self::$instance ) ) { self::$instance = new self(); /** * Elementor loaded. * * Fires when Elementor was fully loaded and instantiated. * * @since 1.0.0 */ do_action( 'elementor/loaded' ); } return self::$instance; } /** * Init. * * Initialize Elementor Plugin. Register Elementor support for all the * supported post types and initialize Elementor components. * * @since 1.0.0 * @access public */ public function init() { $this->add_cpt_support(); $this->init_components(); /** * Elementor init. * * Fires when Elementor components are initialized. * * After Elementor finished loading but before any headers are sent. * * @since 1.0.0 */ do_action( 'elementor/init' ); } /** * Get install time. * * Retrieve the time when Elementor was installed. * * @since 2.6.0 * @access public * @static * * @return int Unix timestamp when Elementor was installed. */ public function get_install_time() { $installed_time = get_option( '_elementor_installed_time' ); if ( ! $installed_time ) { $installed_time = time(); update_option( '_elementor_installed_time', $installed_time ); } return $installed_time; } /** * @since 2.3.0 * @access public */ public function on_rest_api_init() { // On admin/frontend sometimes the rest API is initialized after the common is initialized. if ( ! $this->common ) { $this->init_common(); } } /** * Init components. * * Initialize Elementor components. Register actions, run setting manager, * initialize all the components that run elementor, and if in admin page * initialize admin components. * * @since 1.0.0 * @access private */ private function init_components() { $this->experiments = new Experiments_Manager(); $this->breakpoints = new Breakpoints_Manager(); $this->inspector = new Inspector(); Settings_Manager::run(); $this->db = new DB(); $this->controls_manager = new Controls_Manager(); $this->documents = new Documents_Manager(); $this->kits_manager = new Kits_Manager(); $this->schemes_manager = new Schemes_Manager(); $this->elements_manager = new Elements_Manager(); $this->widgets_manager = new Widgets_Manager(); $this->skins_manager = new Skins_Manager(); $this->files_manager = new Files_Manager(); $this->assets_manager = new Assets_Manager(); $this->icons_manager = new Icons_Manager(); $this->settings = new Settings(); $this->tools = new Tools(); $this->editor = new Editor(); $this->preview = new Preview(); $this->frontend = new Frontend(); $this->maintenance_mode = new Maintenance_Mode(); $this->dynamic_tags = new Dynamic_Tags_Manager(); $this->modules_manager = new Modules_Manager(); $this->templates_manager = new TemplateLibrary\Manager(); $this->role_manager = new Core\RoleManager\Role_Manager(); $this->system_info = new System_Info_Module(); $this->revisions_manager = new Revisions_Manager(); $this->images_manager = new Images_Manager(); $this->wp = new Wp_Api(); $this->assets_loader = new Assets_Loader(); $this->uploads_manager = new Uploads_Manager(); $this->admin_menu_manager = new Admin_Menu_Manager(); $this->admin_menu_manager->register_actions(); User::init(); Api::init(); Tracker::init(); $this->upgrade = new Core\Upgrade\Manager(); $this->custom_tasks = new Core\Upgrade\Custom_Tasks_Manager(); $this->app = new App\App(); if ( is_admin() ) { $this->heartbeat = new Heartbeat(); $this->wordpress_widgets_manager = new WordPress_Widgets_Manager(); $this->admin = new Admin(); $this->beta_testers = new Beta_Testers(); new Elementor_3_Re_Migrate_Globals(); } } /** * @since 2.3.0 * @access public */ public function init_common() { $this->common = new CommonApp(); $this->common->init_components(); } /** * Get Legacy Mode * * @since 3.0.0 * @deprecated 3.1.0 Use `Plugin::$instance->experiments->is_feature_active()` instead * * @param string $mode_name Optional. Default is null * * @return bool|bool[] */ public function get_legacy_mode( $mode_name = null ) { self::$instance->modules_manager->get_modules( 'dev-tools' )->deprecation ->deprecated_function( __METHOD__, '3.1.0', 'Plugin::$instance->experiments->is_feature_active()' ); $legacy_mode = [ 'elementWrappers' => ! self::$instance->experiments->is_feature_active( 'e_dom_optimization' ), ]; if ( ! $mode_name ) { return $legacy_mode; } if ( isset( $legacy_mode[ $mode_name ] ) ) { return $legacy_mode[ $mode_name ]; } // If there is no legacy mode with the given mode name; return false; } /** * Add custom post type support. * * Register Elementor support for all the supported post types defined by * the user in the admin screen and saved as `elementor_cpt_support` option * in WordPress `$wpdb->options` table. * * If no custom post type selected, usually in new installs, this method * will return the two default post types: `page` and `post`. * * @since 1.0.0 * @access private */ private function add_cpt_support() { $cpt_support = get_option( 'elementor_cpt_support', self::ELEMENTOR_DEFAULT_POST_TYPES ); foreach ( $cpt_support as $cpt_slug ) { add_post_type_support( $cpt_slug, 'elementor' ); } } /** * Register autoloader. * * Elementor autoloader loads all the classes needed to run the plugin. * * @since 1.6.0 * @access private */ private function register_autoloader() { require_once ELEMENTOR_PATH . '/includes/autoloader.php'; Autoloader::run(); } /** * Plugin Magic Getter * * @since 3.1.0 * @access public * * @param $property * @return mixed * @throws \Exception */ public function __get( $property ) { if ( 'posts_css_manager' === $property ) { self::$instance->modules_manager->get_modules( 'dev-tools' )->deprecation->deprecated_argument( 'Plugin::$instance->posts_css_manager', '2.7.0', 'Plugin::$instance->files_manager' ); return $this->files_manager; } if ( 'data_manager' === $property ) { return Data_Manager::instance(); } if ( property_exists( $this, $property ) ) { throw new \Exception( 'Cannot access private property.' ); } return null; } /** * Plugin constructor. * * Initializing Elementor plugin. * * @since 1.0.0 * @access private */ private function __construct() { $this->register_autoloader(); $this->logger = Log_Manager::instance(); $this->data_manager_v2 = Data_Manager_V2::instance(); Maintenance::init(); Compatibility::register_actions(); add_action( 'init', [ $this, 'init' ], 0 ); add_action( 'rest_api_init', [ $this, 'on_rest_api_init' ], 9 ); } final public static function get_title() { return esc_html__( 'Elementor', 'elementor' ); } } if ( ! defined( 'ELEMENTOR_TESTS' ) ) { // In tests we run the instance manually. Plugin::instance(); } Cold Storage, Hardware Wallets, and NFTs: How to Keep Your Crypto Truly Yours – Vitreo Retina Society

HomeCold Storage, Hardware Wallets, and NFTs: How to Keep Your Crypto Truly YoursUncategorizedCold Storage, Hardware Wallets, and NFTs: How to Keep Your Crypto Truly Yours

Cold Storage, Hardware Wallets, and NFTs: How to Keep Your Crypto Truly Yours

Okay, so check this out—cold storage is not glamorous. Seriously. It’s boring in the way that fixing the foundation of a house is boring, but you’d rather work on the foundation than watch the house burn. My instinct said the same thing years ago when I moved most of my holdings offline: do the small, tedious stuff now so you don’t panic later. Something felt off about relying only on exchanges and hot wallets—call it gut, call it common sense—and that gut saved me from a phishing disaster once.

Cold storage means keeping private keys inaccessible to internet-connected devices. That’s the core idea. But in practice, it’s about tools, habits, and a realistic approach to risk. Hardware wallets are the go-to method: dedicated devices that sign transactions offline, minimizing attack surface. NFTs complicate things a bit because they’re not just fungible tokens; they come with metadata, marketplaces, and sometimes weird contract interactions. Still, hardware wallets can, and should, be central to your NFT security posture.

A hardware wallet next to a handwritten seed phrase on a notebook, symbolizing cold storage

Why cold storage beats everything else (most of the time)

Here’s what bugs me about crypto culture: people chase gains and skip the boring security steps. On one hand, cloud backups and exchange custody are easy and convenient. On the other, they’re single points of catastrophic failure. Initially I thought multi-platform convenience was fine—but then I watched a friend lose access after an exchange meltdown. Actually, wait—let me rephrase that: convenience is a trade-off. You gain ease but you surrender custody.

Cold storage gives you custody. You hold the private keys. That means your risk profile shifts from trusting third parties to trusting your own processes. And yes, that requires discipline: secure seed storage, known recovery plans, and an offline signing workflow. If you’re storing substantial assets or rare NFTs, that discipline isn’t optional. Hmm… I know that sounds a bit preachy, but I’ve seen collectors lose multi-thousand-dollar drops because a single phrase leaked.

Hardware wallets: what they do and why they matter

Hardware wallets are small devices that keep private keys inside secure elements. They sign transactions without exposing keys to your computer or phone. The device shows transaction details on a screen, and you physically confirm. Simple? Pretty much. Effective? Very very much so—when used correctly.

There are a few important capabilities to check when choosing one: open-source firmware (or at least widely-audited software), robust seed backup options, PIN protection with lockout, passphrase (25th-word) support if you want deniability, and active development for new chains and token standards. Support for NFTs often depends on wallet software integration rather than the hardware itself, so how you connect matters as much as which device you buy.

NFTs and hardware wallets: the practical bits

NFTs introduce two main issues: the metadata and the marketplace interactions. When you list, buy, or transfer an NFT, you’re often interacting with smart contracts that can do more than you expect. The hardware wallet’s role is to let you inspect and confirm the exact transaction data on-device, not trust the webpage’s buttons.

Most major hardware wallet makers work with companion apps that add NFT-friendly interfaces. If you use a wallet app or browser extension, vet it. I rely on a small set of well-audited apps and avoid random marketplace integrations. For managing collections, some folks use dedicated gallery apps that read from the chain without exposing keys. That’s safer than letting every marketplace handle signing requests.

Recommended workflow — practical, not paranoid

Okay—here’s a simple, repeatable workflow that’s saved me headaches:

  • Buy a hardware wallet from an authorized seller. No marketplaces for the device itself.
  • Initialize it offline, write down your recovery seed on a durable medium (metal plate if you can), and store that in a secure spot like a safe or safe deposit box.
  • Use a trusted companion app on an air-gapped machine for high-value NFT moves. For routine interactions, a laptop with good hygiene is fine.
  • Always verify transaction details on-device before approving. Look at addresses, amounts, and contract calls. If something looks off, cancel.
  • Practice a dry-run with small transfers so you know how the process feels before moving big assets.

One practical tip: if you use Ledger, their desktop/mobile ecosystem (Ledger Live) is a common choice for account management and app installs. I tend to open the raw contract data on an independent block explorer too, just to cross-check. For Ledger Live info, here’s a natural place to start with setup and updates: https://sites.google.com/cryptowalletuk.com/ledger-live/

Backup strategies that actually work

Seed phrases are the Achilles’ heel. Store them badly and you might as well post them online. Store them well and you can survive hardware failure, theft, or fire. Simple rules:

  • Write the seed on metal or high-quality paper and duplicate it to two geographically separated locations.
  • Consider splitting the seed with a Shamir backup (SLIP-0039) if your device supports it—this reduces single-point failure risk.
  • Don’t store seeds in cloud photos, password managers, or labeled envelopes in a desk drawer.

And don’t be clever with obfuscation that you’ll forget. I’ve seen people invent mnemonic riddles, then forget the solution after a year. That’s… painful. Keep it straightforward and test the recovery on an independent device from time to time.

Operational security — daily habits

Security isn’t only devices and seeds. It’s habits. Use strong, unique passwords on your associated email, enable hardware-backed 2FA where possible, and compartmentalize: different wallets for day-to-day and cold storage for holdings you don’t plan to touch. If a smart contract asks for blanket approvals (approve all), don’t click yes unless you understand the implications. Revoke excessive allowances periodically.

I’m biased toward conservative defaults: fewer approvals, minimal third-party integrations, and more manual checks. That stance will frustrate some folks who want frictionless UX, but it’s saved me from dubious dapps. Also, do routine inventory—know what you own and where it lives.

Common pitfalls and how to avoid them

Phishing is still the top vector. Emails that mimic marketplaces, fake contract calls, and cloned sites are everywhere. Always verify site URLs, and never paste your seed into any app or website—ever. If a service requests your seed or private key, run the other way. Seriously.

Another pitfall: buying hardware wallets from third-party sellers. Devices can be tampered with. Buy straight from manufacturers or trusted retailers. And update firmware from official vendor tools only; firmware updates often patch critical vulnerabilities.

FAQ

Can I store NFTs on any hardware wallet?

Most leading hardware wallets support NFTs in the sense that they can sign the transactions that move NFT tokens. The experience varies by device and companion software—so the NFT display and management may be handled by third-party apps. Verify compatibility before making big moves.

What if I lose my hardware wallet?

If you lose the device but have a secure seed backup, you can recover on a new device. If you lost both, recovery is impossible. That’s why secure, redundant backup is crucial. Test your recovery occasionally.

Are hardware wallets safe from supply-chain attacks?

Not completely. Supply-chain attacks are rare but possible. Mitigations: buy from authorized sellers, verify device integrity where possible, and initialize in a trusted environment. Multiple vendor audits and open-source firmware help reduce risk.

Leave a Reply

Your email address will not be published. Required fields are marked *