A hardware wallet, also referred to as a signing device, is a physical storage device designed to generate and store public and private keys offline, as well as sign transactions.
Despite lacking some of the functionality of other wallet types, it offers improved security and simplicity for a minimal attack surface. It functions as an external device when working with other wallet types, creating and storing keys, and Bitcoin addresses for receiving and signing transactions for spending. The software on the other wallet types handles all other tasks.
Recommended Bitcoin hardware wallets: Blockstream Jade, Coldcard, BitBox02.
Hardware wallet: key facts
- A hardware wallet is a dedicated physical device that generates and stores private keys offline and signs transactions without exposing the keys.
- It keeps the keys in cold storage, away from internet-connected phones and computers where malware lives.
- The device shows transaction details on its own screen and requires a physical confirmation, so a compromised computer cannot sign on your behalf.
- Open-source firmware and a verifiable build let you confirm the device does only what it claims, rather than trusting the maker's word.
How a Hardware Wallet Works
A hardware wallet pairs with companion software on your phone or computer, but the split of responsibilities is what makes it secure. The companion app handles everything that needs the internet: watching your balance, building unsigned transactions, and broadcasting signed ones. The private keys never leave the hardware wallet. When you send bitcoin, the device receives the unsigned transaction, displays the amount and destination on its own screen for you to verify, signs it internally once you confirm, and returns only the signed transaction. Because the keys are never shared with the connected computer, malware on that computer cannot steal them, and it cannot alter where your bitcoin goes without the change showing up on the device screen.
Secure Elements and Blockstream Jade's Approach
Many hardware wallets protect keys with a secure element, a tamper-resistant chip designed to resist physical extraction. Those chips are usually proprietary and closed, which means their internals cannot be independently audited. Blockstream Jade takes a different route with a Virtual Secure Element, a security architecture built in open-source firmware rather than a closed chip, so the protections can be inspected by anyone. Jade also uses an anti-exfiltration protocol: when it signs, the companion software can verify that Jade used genuine randomness, which prevents a tampered device from leaking the private key through specially crafted signatures. Jade also offers an optional stateless mode, in which it stores no secrets between sessions and the recovery phrase is entered each session.
What a Hardware Wallet Protects Against, and What It Does Not
A hardware wallet defends strongly against remote threats: malware, phishing pages that try to capture keys, and compromised computers cannot reach keys that never leave the device. It does not, by itself, defend against losing the recovery phrase, since that phrase can restore the wallet on any compatible device and must be backed up offline and kept private. It also cannot protect you if you approve a malicious transaction without checking the details on the device screen, or if you buy a tampered unit from an untrusted reseller. Used correctly, with a metal backup of the recovery phrase and purchases made from the manufacturer, it removes most of the practical ways bitcoin is stolen.
Frequently Asked Questions
Do I need a hardware wallet?
For small, everyday amounts, a self-custodial mobile wallet such as the Blockstream app is reasonable. A hardware wallet becomes worth it once you are holding savings you would not want to lose, because it moves the private keys offline and out of reach of internet-based malware. The more bitcoin at stake and the longer you plan to hold it, the stronger the case for dedicated hardware.
How is a hardware wallet different from a software wallet?
A software wallet stores private keys on an internet-connected phone or computer, which is convenient but a larger attack surface. A hardware wallet keeps the keys isolated on a dedicated offline device and signs transactions there, so they are never exposed to the connected machine. Many people use a software wallet for spending and a hardware wallet for savings.
Can a hardware wallet be hacked?
It is built to resist remote attacks, and keys that never leave the device cannot be stolen over the internet. Realistic risks are physical: a device or recovery phrase that is stolen, a tampered unit bought from an untrusted source, or approving a malicious transaction without verifying it on the device screen. Buying directly from the manufacturer, checking transactions on the screen, and using open-source firmware that can be audited address most of these.
What happens if I lose my hardware wallet?
Losing the device itself is recoverable as long as you still have the recovery phrase, which you can use to restore the wallet on a new compatible device. A PIN on the device protects the funds against someone who finds it. What is not recoverable is losing both the device and the recovery phrase, so keeping a durable, offline backup of the phrase in a separate location is essential.
Can I buy a used hardware wallet?
Avoid it. A used or unsealed device could be tampered with so that its keys are already known to an attacker, who would then drain any funds you load onto it. Always buy from the manufacturer or an authorized seller, and set up the device yourself so that it generates a fresh recovery phrase you alone have seen.