What is hardware wallet?

A physical device that stores private keys offline and signs transactions without exposing the keys to a connected computer.

Hardware wallets are the most common form of cold wallet, and they are what most people mean when they talk about taking crypto off an exchange. A device costs less than a night out and covers the single largest risk in self-custody, which is malware on the machine you browse with.

The persistent misunderstanding is that the device holds your coins. It does not. Coins are entries on a blockchain, and the device holds the key that authorizes moving them. That is why a lost device is recoverable from your recovery phrase and why a leaked recovery phrase makes the device irrelevant.

How it works

The device generates a random seed inside itself and derives every key from it, so one backup covers every account and every chain the device supports. That seed is presented once as a word list following the BIP-39 standard, which defines a 2,048-word list and the checksum built into the final word.

When you want to send, your computer or phone builds the unsigned transaction and passes it to the device. The device shows the destination and amount on its own screen, waits for a physical button press, signs internally, and returns the signature. The key never reaches the connected machine. A computer running malware can propose a fraudulent transaction, but it cannot sign one, and it cannot change what the device's screen shows you.

Two weaknesses remain, and both are about what you approve rather than how the key is stored. The first is blind signing, where a contract interaction is too complex for the small screen and the device shows a hash instead of a readable action. The second is the recovery phrase itself: written down, photographed, or typed into a website, it is the whole wallet. Buying from the manufacturer or an authorized reseller matters for the same reason, since a device that arrives with a phrase already printed in the box was not generated by you.

Example

Illustrative walkthrough. You buy 0.4 ETH on an exchange and withdraw it to an address your hardware wallet generated. Later, a compromised browser extension asks you to approve what it labels a swap. The device screen shows a token approval granting unlimited spending to an unfamiliar contract, not a swap. You reject it, and nothing moves. Had the same key been sitting in a browser extension wallet, the approval would have gone through without a second screen to contradict the first.

Why it matters when you buy

Custody is the decision that follows the purchase. Leaving a balance on an exchange keeps it exposed to that venue's solvency and account security, which is what the exchange pages and proof of reserves help you assess. If you intend to move funds off, budget the withdrawal fee, since it is separate from trading cost and varies widely across the fee comparison. The hardware wallet setup guide covers the first-run steps.

Related terms

• cold wallet: any wallet whose keys stay offline
• seed phrase: the word list that backs up everything
• bip 39: the standard behind that word list
• blind signing: approving what the screen cannot display
• secure element: the tamper-resistant chip inside
• self custody: holding your own keys rather than an account

Questions

What happens if the device breaks or is lost?

Your funds are on the blockchain, not the device. Restore the recovery phrase onto a new device, from any compatible manufacturer, and the same accounts reappear.

Should I buy a used device?

No. A device that someone else set up may have a seed they still hold. Buy from the manufacturer or an authorized reseller and generate the seed yourself on first use.

Does a hardware wallet protect against scams?

Only partly. It stops keys being stolen from your computer, and it shows you what you are signing. It cannot stop you approving a transaction you were talked into.