What is a hardware wallet?

Picture a small safe that, instead of handing its key out, approves an instruction from the inside. That’s roughly how a hardware wallet works: your computer or phone prepares the transaction, the device signs it and the signed transaction goes back to the app to be broadcast to the network.

Your crypto isn’t stored inside the device. It stays recorded on the blockchain. The device protects your private keys, meaning the secret data that lets you manage it. It isn’t an ordinary USB stick you copy files to.

Say you want to send bitcoin to a friend. You enter the address and amount in the app, check the details on the hardware wallet’s screen and approve on the device. The exact steps vary by model, but the basic idea stays the same: the private key never needs to reach the computer.

Why it matters

A software wallet on a phone or computer can be exposed to malware. A hardware wallet limits that risk by isolating the keys from the device you use every day for browsing, email and apps.

It also supports self-custody: you control the keys instead of entrusting them to an exchange. We see this isolation as a real security advantage, but not a guarantee that every transaction you approve is safe.

What to watch out for

The seed phrase (recovery phrase), if your wallet uses one, is your backup. If the device breaks or gets lost, you can usually regain access in a compatible wallet. Anyone who gets hold of the phrase can also take control of your crypto, without needing the device or its PIN.

Don’t photograph it, and don’t type it into websites or “support” forms. Buy from an official or authorized source and follow the official setup process, not instructions that come with a pre-filled recovery phrase inside the box.

Finally, check what the device itself displays. If you approve the wrong address or a malicious token approval, the hardware wallet may sign exactly that instruction. It protects your keys, not against every bad approval.