Go to bitaddress.org, cut the internet connection, generate a new wallet with BIP38 encryption, print it out and now you have a secure paper wallet.