The AirGap Vault is installed on a spare smartphone that has no connection to any network, thus it is air gapped. This app handles the private key. - View it on GitHub