Hardware Wallets Explained

A hardware wallet is a small dedicated device whose only job is to keep your private keys away from your computer and phone. It is the single most effective upgrade most people can make to how they hold crypto — and it is also widely misunderstood.

What it actually does

Your keys are generated on the device and never leave it. When you want to move funds, your computer builds the transaction and sends it to the device, the device shows you the details on its own screen, you approve with a physical button, and only the signature comes back. Malware on your laptop can rewrite what your browser displays, but it cannot reach into the device, and it cannot press the button for you.

What it does not protect against

A hardware wallet does not stop you from approving a bad transaction. If you are tricked into signing a token approval that grants an unknown contract permission to move your funds, the device will sign it exactly as instructed. It also does not protect a seed phrase you have typed into a website, photographed, or stored in cloud notes. And it does not help if you lose both the device and the backup.

Buying one safely

Buy directly from the manufacturer or an authorised reseller, never from a marketplace listing, an auction site, or a stranger. Tampered devices and pre-filled seed cards are a real and recurring scam. A genuine device generates a fresh seed phrase in front of you during setup. If a device arrives with a seed phrase already written down, or asks you to enter one supplied in the box, it is compromised — stop and contact the manufacturer.

Setting it up properly

Write the recovery phrase on paper or steel, by hand, and store it somewhere fire- and flood-resistant that is not the same place as the device. Never type it into anything. Set a PIN. Then send a small test amount, wipe the device, and restore it from your written phrase before moving real money — this proves your backup works while the stakes are low.