@@ -134,3 +134,17 @@ point is now stored on your hardware wallet.
134134To finish the process, use Bridge to set your management, voting, and spawn
135135proxies to the other addresses you generated as applicable. You are now using
136136your hardware HD wallet in an analogous fashion to the Urbit HD wallet.
137+
138+## Heightened security practices
139+
140+A common security pattern is to have "hot" and "cold" wallets. For higher value
141+points such as stars and galaxies, you may consider having your ownership
142+address live on a "cold" wallet that never touches an
143+internet-connected computer, and the various proxies on a "hot" wallet that is
144+permitted to connect to internet-connected devices. This could be accomplished
145+with multiple hardware wallets, a combination of paper and hardware wallet, a
146+hardware cold wallet and Metamask hot wallet, etc.
147+
148+One tool useful for this setup is `claz`, located at `app/claz.hoon`. `claz` is
149+used for making and signing Bridge transactions from an offline computer. A
150+guide to using `claz` is forthcoming.