Just make a paper wallet at bitaddress.org. there you can make a paper wallet with BIP38. With this you need to set a password which encrypt the private key. So you just see the private key but without password it's useless.
If you are really concerned about security, download they bitaddress.org web site from GitHub (
https://github.com/pointbiz/bitaddress.org) and then run it while offline and in private mode on the browser - at minimum. Quit the browser after running it. Maybe even run it from a new user account on the machine. (Or from a USB boot device that is only used off-line.)
There are ways that are even more safe, but it is not recommend to do it online for obvious reasons.