Glossary · Wallets & security
What is Hardware wallet?
A small physical device that stores private keys offline. The phone or computer signs transactions through the device but never sees the key. Industry-standard for any meaningful crypto holding.
Last updated April 30, 2026
How it works
A hardware wallet is a USB-stick-sized device with a secure chip and a small screen. The private keys never leave the device. When you want to send a transaction, your computer or phone software prepares the unsigned transaction, sends it to the device, the device shows you the destination address and amount on its screen, and you press a physical button to approve. The signed transaction is sent back to the computer for broadcast.
Two security wins:
- Air gap on the keys. Even if your computer is fully compromised with malware, the keys aren't on it. The malware can't extract what isn't there.
- Visual verification on a trusted screen. The destination address shown on the hardware wallet's screen is what the device will sign. Malware can't change that — it can change what the computer shows you, but the device's screen is the source of truth.
Major brands:
- Ledger Nano S Plus / Nano X / Stax ($79–399). Most popular; closed-source firmware (a controversy point); large coin support.
- Trezor Model One / Model T / Safe 3 ($69–219). Open-source; longer track record; smaller coin support.
- Coldcard Mk4 ($150). Bitcoin-only; favored by Bitcoin maximalists for security focus.
- GridPlus Lattice1 ($349). Larger screen, designed for DeFi power users.
Example
Setting up a Ledger:
- Buy direct from manufacturer (never used or from third-party resellers — the device could be tampered)
- Set a 4–8 digit PIN (after 3 wrong attempts the device wipes)
- Write down the 24-word seed phrase on paper. The device generates this; you can never see the underlying private key directly.
- Verify the seed phrase by re-entering it on the device
- Install Ledger Live software on your computer; install the Bitcoin/Ethereum apps on the device
To send: open Ledger Live, choose Send, enter destination, hit confirm. The Ledger displays the destination address; you verify it matches what you typed; press the physical button. Done.
Why it matters
Hardware wallets are the security upgrade with the highest ratio of risk-reduction to cost in crypto. The major loss vectors that hardware wallets defeat:
- Computer malware stealing keys from MetaMask or other software wallets
- Phishing sites that prompt for seed phrases
- Crypto-clipboard hijackers that swap destination addresses
- Hot wallet drains from approved-but-malicious smart contracts (with hardware confirmation, you actually read what you're signing)
What they don't protect against:
- Lost seed phrase. If you lose the device AND the seed phrase, funds are gone forever. Multiple physical backups in different locations.
- Coerced signing. Someone holding a gun to your head while you type the PIN gets the same access you do. Hardware wallets don't protect against duress.
- Buggy contracts. A hardware wallet signs whatever it's asked to. If a malicious contract drains your token approval, the hardware wallet didn't help — you authorized the action.
- Supply chain attacks. Buy from manufacturer, not Amazon resellers, not eBay. Tampered devices have been seen in the wild.
For any crypto holding above ~$1,000 in self-custody, a hardware wallet pays for itself in risk reduction. Most of the largest individual losses in crypto came from people who declined to spend $79 on a device they "didn't need yet" — until they did.