I keep a small amount in an online wallet with a strong password and two factor authentication. The rest stays in several cold addresses.