Where are NFTs stored? The token, meaning the record of who owns it, is always on the blockchain. The picture usually is not. Most NFTs store a link in the token that points to a metadata file, and that file points to the image or video. Those files might be on-chain, on IPFS, on Arweave or on an ordinary company web server. Which one decides whether your NFT could one day show a blank square. Below is a five-minute audit to find out where yours lives, and what to do for each answer.
- Your wallet holds keys, not pictures. The NFT is a token ID in a smart contract.
- Three layers matter: the token, its metadata (a JSON file) and the media file.
- On-chain and Arweave storage are the most durable; IPFS lasts only while someone pins the file; HTTPS links can break whenever a company stops paying.
- You can check any Ethereum NFT yourself by reading tokenURI on Etherscan.
- Marketplace closures do not delete tokens, but they can take platform-hosted media with them.
Your wallet doesn’t hold the picture
A crypto wallet stores private keys. Those keys prove you control an address, and the blockchain records that your address owns token number 1234 of a particular contract. When your wallet app or a marketplace shows you an image, it is looking up that token, following its links and fetching the file from wherever it is hosted. Our guide to NFT wallets covers choosing a wallet; this page is about what happens after the wallet, out on the internet.
That is also why “cold wallet NFT storage” means something narrower than people expect. A hardware wallet protects the keys, which protects ownership. It does nothing to keep the image online. Security of the token and durability of the media are two separate jobs.
Token, metadata and media: the three layers
- The token. Lives in the smart contract on-chain: contract address, token ID, owner. This part cannot disappear while the chain exists.
- The metadata. A small JSON file with the name, description, attributes (traits) and an image or animation_url field. On Ethereum, the ERC-721 standard exposes it through a function called tokenURI; ERC-1155 tokens use uri.
- The media. The actual PNG, GIF, MP4 or HTML file named in the metadata.
Each link in that chain can be weak. A token can point to metadata on a company server that points to an image on IPFS, or the reverse. The weakest link sets how durable the whole NFT is. For the basics of what the token itself represents, see what NFTs are.
Where are NFTs stored: on-chain, IPFS, Arweave or a server?
| Storage type | What the link looks like | How it stays online | Main weakness | Examples |
|---|---|---|---|---|
| Fully on-chain | data: URI or a contract function that returns the art | Part of the blockchain itself | Expensive to store, so usually small or generative art | CryptoPunks images (on-chain since August 2021), Autoglyphs, Bitcoin Ordinals |
| IPFS | ipfs:// followed by a content ID (CID) | Any node that “pins” the file keeps serving it | If nobody pins it, the file becomes unreachable | Most 2021–2024 PFP collections |
| Arweave | ar:// or an arweave.net link with a transaction ID | One-time payment into an endowment meant to fund permanent storage | Depends on Arweave’s economic model holding up | Many Solana NFTs, some creator tools |
| Centralised server | Ordinary https:// address on the project’s domain or a cloud bucket | The company keeps paying for hosting | The domain lapses or the files are changed or deleted | Many game items and early or low-budget projects |
A few distinctions people miss:
- IPFS links are content-addressed. The CID is a fingerprint of the file, so nobody can swap the image behind an ipfs:// link without the CID changing. But IPFS does not store anything on its own; it needs pinning.
- An https:// link to an IPFS gateway (for example a URL containing “/ipfs/” on a company domain) still uses IPFS content, but if the token hard-codes the gateway, the link breaks when that gateway shuts down. The CID inside it is what matters.
- “On-chain” can mean partial. Art Blocks stores each project’s generative script on-chain, with your token’s output produced from that script and the token’s hash. CryptoPunks originally stored only a hash of the image; Larva Labs moved the images and attributes on-chain in August 2021.
- Bitcoin Ordinals write the content into the transaction itself, so they are on-chain by design.
How to check where your NFT is stored
This is the five-minute audit. It works for any Ethereum or EVM-chain NFT; Solana is covered after.
- Find the contract and token ID. On the marketplace page for your NFT, look for the “Details” or similar section, which lists the contract address and token ID.
- Open the contract on Etherscan (or the matching explorer for the chain), go to the Contract tab, then Read Contract.
- Call tokenURI with your token ID. For ERC-1155 contracts, call uri instead.
- Read the start of the result:
- data:application/json;base64,… means the metadata is on-chain. Decode it and check the image field the same way.
- ipfs:// means IPFS.
- ar:// or an arweave.net URL means Arweave.
- A normal https:// URL on a project domain or cloud bucket means a centralised server.
- Open the metadata file (paste an IPFS CID into any public gateway) and repeat the check on the image and animation_url fields. These can use a different storage type from the metadata.
- Check if the metadata is frozen. Some contracts let the owner change the base URI. Look on Etherscan for functions like setBaseURI and for a “metadata frozen” event or statement from the project. Some marketplaces show a frozen-metadata badge. Mutable metadata means the team can repoint every token, for better or worse.
Solana NFTs
Most Solana NFTs use the Metaplex standard. Look the mint address up on a Solana explorer and find the metadata account. It shows the uri (often Arweave or IPFS), an update authority address and an is mutable flag. If the NFT is mutable, whoever holds the update authority can change the name, image link and traits.
What to do with each answer
| Result | What it means | Your move |
|---|---|---|
| Fully on-chain | Durable as long as the chain is | Nothing required; keep securing your keys |
| Arweave | Paid-for permanent storage | Optionally keep a local copy |
| IPFS, frozen metadata | Content cannot be swapped, but needs pinning | Pin the CIDs yourself or with a pinning service if you care about the piece |
| IPFS or HTTPS, mutable metadata | The team can change what your token shows | Save the current files and the metadata JSON; watch project announcements |
| HTTPS on a project server | Most fragile; depends on one company | Download the media and metadata now; you cannot fix the token’s link, but you can keep the files |
Can an NFT disappear? Closures and broken links
The token cannot vanish unless it is burned. What can disappear is everything the token points to. Common causes of an “NFT image disappeared” moment:
- A project stops paying for a server or lets its domain expire, so https:// links return errors.
- Nobody pins the IPFS files any more, so gateways time out.
- A marketplace that hosted or pinned the media closes. Foundation announced its shutdown in April 2026 after a planned sale fell through. It said it would keep pinning IPFS-hosted media and metadata for one more year but urged users to pin the work they care about themselves. Tokens minted there remain on Ethereum.
- A storage service changes. NFT.Storage decommissioned its “Classic” upload service on 30 June 2024; existing data remained retrievable through its gateway and the Filecoin network, but the project warned availability could degrade over time.
- Metadata is changed by a team holding update rights, sometimes deliberately (a “reveal”) and sometimes not.
Marketplace closures in 2026, including Magic Eden ending non-Solana markets on 9 March and Blur retiring its website on 12 November, did not change where any NFT’s media is stored. They change where you can trade it. A broken image on one site may simply be that site’s cache; check the raw metadata before assuming the worst.
Preserving NFTs you care about
For collectors:
- Keep local copies of the metadata JSON and media for every NFT you value, with a note of the contract, token ID and CIDs.
- Pin IPFS content. Pinning services such as Pinata and Filebase keep files available on IPFS for a fee; check current pricing and terms on their sites. Filebase also markets an NFT backup feature.
- Run your own IPFS node. The free IPFS Desktop app lets you pin CIDs on your own machine, though your copy is only reachable while that machine is online.
- Do not rely on one gateway. If a link breaks, try the same CID through another gateway before panicking.
For creators, the order of preference is: on-chain if the work is small enough, Arweave or properly pinned IPFS for everything else, and never a single company server. Freeze metadata once a collection is final so buyers know it cannot be swapped. Our guide on how to create an NFT covers minting choices, and curated platforms differ in how they host work, which our curated NFT marketplaces page compares. More guides on wallets and storage live in the NFT guides hub.
FAQ
What is the most secure NFT storage?
For the media, fully on-chain storage is the most durable, followed by Arweave and well-pinned IPFS. For ownership, the most secure setup is a hardware wallet holding the keys, kept separate from wallets you use to connect to new sites. Both matter: one keeps the image online, the other keeps the token yours.
Does cold wallet NFT storage keep my image safe?
No. A cold wallet protects the private keys that control the token. The image lives wherever the metadata points: on-chain, IPFS, Arweave or a server. Moving an NFT to a hardware wallet changes nothing about its hosting, so check the tokenURI and keep copies separately.
How do I pin an NFT on IPFS?
Find the CIDs in the token’s metadata and image fields, then add them to a pinning service account or to your own IPFS node using its “pin by CID” option. Pinning tells that node to keep and serve the file. Pin both the metadata and the media, since they usually have different CIDs.
Why did my NFT image disappear?
Usually because the server or IPFS pin hosting it went offline, the project changed its metadata, or the marketplace’s cache failed. Read tokenURI on a block explorer to see where it points. If the file still exists under its CID or URL, the problem is the display; if not, the media was lost but the token remains yours.
Crypto is volatile and risky; this is education, not financial advice. Do your own research.
