Skip to main content
Security 12 min read Updated October 2026

What Is a Hardware Wallet? How It Works and What It Can't Protect

A hardware wallet is a small device that keeps your crypto private keys offline and signs transactions on its own screen. Here is what is inside one, the four main types, what it stops, what it does not, and how to buy and set one up safely.

A hardware wallet is a small physical device that stores your crypto private keys offline and uses them to sign transactions without ever handing them to your computer or phone.

It does not hold your coins. Your ETH lives on the Ethereum blockchain. The device holds the one secret that can move it, and it keeps that secret on a chip built to never give it up.

That makes a hardware wallet the standard tool for crypto you plan to keep. It also makes it one of the most misunderstood, because “offline” protects you from some attacks completely and from others not at all.

This guide covers what is actually inside a hardware wallet, the four types you can buy, what it stops, what it does not, and how to buy and set one up without undoing the protection on day one.

How Does a Hardware Wallet Work?

Every crypto wallet does two jobs: it stores a private key, and it uses that key to sign transactions. A software wallet like MetaMask does both on your laptop or phone. A hardware wallet moves both jobs onto a separate device.

The flow looks like this when you send ETH:

  1. Your wallet app on the computer or phone builds the unsigned transaction.
  2. The app sends it to the hardware wallet over USB, Bluetooth, NFC, or a QR code.
  3. The device shows the recipient and amount on its own screen.
  4. You check the details and press a physical button or tap the touchscreen.
  5. The device signs the transaction internally and sends back only the signature.
  6. The app broadcasts the signed transaction to the network.

The private key never leaves the device at any step. Malware on your laptop can see the transaction, and can even ask the device to sign a different one. It cannot take the key, and it cannot press the button.

That is the whole security model in one sentence: a hardware wallet turns “any software on my computer can spend my crypto” into “only a person holding this device and reading its screen can spend my crypto.”

Our hot wallet vs cold wallet guide walks through this signing flow side by side with a software wallet.

What Is Inside a Hardware Wallet?

Three parts do the real work.

A secure element. This is a tamper-resistant chip, the same class of chip used in passports and bank cards. It stores the key and performs the signing math, and it is designed to resist physical attacks like probing the circuit board or measuring power draw to guess the key. Trezor’s comparison page lists an EAL6+ certified secure element in every model it currently sells. Every device in Ledger’s current lineup uses one too.

A trusted screen. The screen is wired to the secure chip, not to your computer. That matters because your computer screen can be faked by malware. The device screen cannot. This is why a bigger, clearer display is a real security feature and not just a convenience.

Physical confirmation. A button or touchscreen that a human has to press. No remote attacker can push it.

Around those three parts sits the firmware, the device’s operating system. Firmware is where the two big manufacturers disagree. Trezor publishes its firmware as open source so anyone can audit it. Ledger keeps the secure element firmware closed and argues that this makes extraction attacks harder. Both are defensible positions. Our Ledger guide and Trezor guide cover the tradeoff in detail.

The Seed Phrase Is the Real Wallet

When you set up a hardware wallet, it generates a 12 or 24 word seed phrase and shows it to you once. Every private key the device will ever use is derived from those words.

This has a consequence most beginners find surprising: the device is replaceable and the seed phrase is not.

If your hardware wallet breaks, gets lost, or gets stolen, you buy a new one (from any compatible brand), type in the seed phrase, and your funds are back. If you lose the seed phrase and the device dies, nothing and no one can recover the funds.

It also means a stolen device is not automatically a stolen wallet. A thief needs your PIN to use it, and most devices wipe themselves after a few wrong attempts. The seed phrase on paper in your drawer is the bigger target.

The Four Types of Hardware Wallets

“Hardware wallet” covers a few different designs. They differ mainly in how they talk to your phone or computer.

TypeHow it connectsExamplesTypical price
USB device with buttonsUSB-C cableLedger Nano S Plus, Trezor Safe 3~$59 to $79
Touchscreen deviceUSB-C, often Bluetooth and NFCLedger Nano Gen5, Flex, Stax; Trezor Safe 5, Safe 7~$129 to $399
Air-gapped QR deviceCamera and QR codes only, no cableKeystone 3 Pro~$149
NFC cardTap the card to your phoneTangem~$55 for a 2-card set

Prices are list prices from trezor.io, shop.ledger.com, Tangem’s pricing page and recent reviews, checked October 2026. They change often and vary by region.

USB devices with buttons are the classic design and the cheapest real option. The small screens make long transactions tedious to read, which is their main weakness.

Touchscreen devices solve the reading problem. They cost more but make it practical to verify what you are signing, which is the one habit that matters most.

Air-gapped QR devices have no USB data connection and no wireless radio. Transactions pass in and out as QR codes on screens. That removes an entire attack surface, at the cost of a slower workflow.

NFC cards look like bank cards and hold the key on a chip. They are the cheapest and simplest to carry. Tangem’s default setup creates the key on the card with no seed phrase at all, using a second and third card as backups. That is easier for beginners and a real tradeoff: you are trusting the cards themselves as your only backup.

Is a Hardware Wallet the Same as a Cold Wallet?

Mostly, but not exactly, and the difference is worth knowing.

A cold wallet is any wallet whose keys stay offline. A hardware wallet is the most common way to get one. But the two terms overlap rather than match:

  • A paper wallet is cold but not hardware. It is a private key or seed phrase written down and never typed into anything.
  • A Bluetooth hardware wallet is hardware, and its keys still never leave the secure chip, but the device itself does have a wireless radio. Purists would say it is not truly air-gapped.
  • A fully air-gapped device like the Keystone is both, in the strictest sense.

For a beginner the practical answer is simple. Any reputable hardware wallet with a secure element counts as cold storage for everyday purposes. The Bluetooth question matters only once you are deciding between models.

What a Hardware Wallet Protects You From

A hardware wallet is excellent at one specific job: stopping remote theft of your keys.

  • Malware and keyloggers. Software on your computer cannot read a key that is never on your computer.
  • Clipboard hijackers. Malware that swaps a pasted wallet address gets caught if you check the address on the device screen.
  • Hacked browser extensions. A compromised extension cannot sign without your button press.
  • Exchange failures. Coins in your own hardware wallet are not on an exchange’s balance sheet. If an exchange freezes withdrawals or collapses, your self-custodied funds are untouched. Our custodial vs non-custodial guide explains why that matters.
  • Physical theft of the device. Without the PIN, a stolen device is a paperweight, and it wipes itself after repeated wrong guesses.

What a Hardware Wallet Does Not Protect You From

This is the section most guides skip, and it is where people actually lose money.

Signing something bad. A hardware wallet signs whatever you approve. If a scam site asks you to approve a malicious smart contract and you press the button, the device does its job perfectly and you lose your tokens. Most wallet-drainer losses come from users approving a token approval or signature they did not understand. The crypto scams guide covers the common patterns.

Blind signing. Some transactions are too complex for a device to decode, so it shows only a raw hash instead of readable details. Approving one is called blind signing, and it is how the largest crypto theft in history happened. In February 2025, attackers stole about $1.5 billion in ETH from the exchange Bybit. According to The Block’s report, the signers used Ledger and Trezor devices, and a compromised web interface showed them a routine transaction while their devices were asked to sign a malicious one they could not read. a16z crypto’s post-mortem gives the rule plainly: if your wallet cannot show you what a transaction does, do not sign it.

A leaked seed phrase. If someone gets your seed phrase, they can load your wallet onto their own device and the hardware in your drawer is irrelevant. Typing your phrase into a website, a “support” chat, or a cloud note gives away everything.

Badly generated keys. A device is only as good as its firmware. In 2026, attackers drained Coldcard hardware wallets whose old firmware had generated weak seeds years earlier. The hot vs cold guide covers that case in detail.

Tampered devices. A device that was opened and modified before it reached you can be pre-loaded with a seed the attacker already knows. In 2021, BleepingComputer reported that criminals were mailing altered “replacement” Ledger devices to customers whose addresses had leaked in Ledger’s 2020 data breach.

Being targeted in person. Buying a hardware wallet can put your name and address in a company’s order database, and those databases leak. Ledger’s 2020 breach and Trezor’s 2026 shipping provider incident both exposed customer addresses. Neither touched any device or funds. Both handed scammers a list of people who own crypto.

How to Buy a Hardware Wallet Safely

Most hardware wallet disasters start at the checkout, not at the device.

  1. Buy from the manufacturer’s own website. Go to ledger.com, trezor.io, keyst.one or tangem.com by typing the address yourself. Authorized resellers are generally fine. Third-party marketplace sellers are where tampered devices show up.
  2. Never buy used. A secondhand device can be modified in ways you cannot see.
  3. Consider your shipping address. Given the breach history above, some owners ship to a PO box or their office rather than their home.
  4. Reject any device that arrives with a seed phrase. A real hardware wallet generates the phrase in front of you. A pre-printed recovery card is a scam, every time.
  5. Ignore any “replacement device” you did not order. Manufacturers do not mail surprise replacements.

How to Set Up a Hardware Wallet

Setup takes 20 to 30 minutes. The steps are nearly identical across brands.

  1. Install the official app (Ledger Live, Trezor Suite, Keystone, Tangem) from the manufacturer’s site or the official app store.
  2. Run the authenticity check. Both Ledger and Trezor apps verify that the device is genuine during setup. Do not skip it.
  3. Create a new wallet on the device. Choose a PIN. Let the device generate the seed phrase.
  4. Write the seed phrase on paper or metal. Never photograph it, type it, or store it in the cloud. Confirm it when the device asks.
  5. Update the firmware if the app offers it.
  6. Get your receiving address and check it on the device screen. The address in the app and the address on the device must match character for character.
  7. Send a small test amount first. Confirm it arrives before you move anything large.

Once it is set up, you can connect the hardware wallet to MetaMask or Rabby to use dapps and DeFi. The browser wallet becomes the interface and the hardware wallet does the signing. Our Ledger and Trezor guides walk through that connection step by step.

Keep a little ETH in the wallet for gas fees. Every transaction from a hardware wallet still costs gas, the same as any other wallet.

Hardware Wallet vs Software Wallet

Hardware walletSoftware wallet
Where the key livesSecure chip on a dedicated deviceYour phone or computer
Cost~$55 to $399Free
Remote theft by malwareBlocked by designPossible
SigningPhysical confirmation on the deviceA click
Speed for daily useSlowerInstant
Protects against bad approvalsOnly if you read the screenNo
Best forSavings you plan to keepSpending and experimenting

Most people who hold a meaningful amount use both: a software wallet for small, active balances and a hardware wallet for the rest. The wallets guide covers every option.

Do You Need a Hardware Wallet?

A useful rule: once your crypto is worth more than you would be comfortable losing, a hardware wallet is worth its price. For many people that line sits somewhere between $500 and $1,000. A $59 device protecting $5,000 is cheap insurance.

You probably do not need one yet if:

  • You hold a small amount while you learn how Ethereum works.
  • You keep crypto on an exchange and are not ready to manage a seed phrase. That is a legitimate choice with its own risks, not a mistake.
  • You trade daily and would route around the friction anyway.

You probably do need one if:

  • You are holding crypto for months or years.
  • Your crypto balance would hurt to lose.
  • You use DeFi with real money and want a final check on every signature.

Common Questions

Can a hardware wallet be hacked? Remote theft of the key is extremely difficult on a reputable device with a secure element. Real losses come from leaked seed phrases, approving malicious transactions, tampered devices, and firmware bugs. The device is one strong layer, not a guarantee.

What happens if the company goes out of business? Your funds are safe. Your seed phrase follows open standards (BIP-39), so you can restore it on another brand’s device or a compatible software wallet.

Does a hardware wallet work with Ethereum tokens and NFTs? Yes. Any ERC-20 token or NFT on Ethereum lives at the same address, so if the device supports ETH it supports those assets. Layer 2 networks like Arbitrum and Base work too, through MetaMask or Rabby. See the Layer 2 guide.

Can I use one hardware wallet for multiple coins? Yes. Ledger and Trezor support thousands of assets across Bitcoin, Ethereum, Solana and more. Check the manufacturer’s supported asset list for anything unusual before you buy.

Is a hardware wallet safe from the IRS or law enforcement? A hardware wallet hides your keys, not your transactions. Every transaction is public on the blockchain and visible in a block explorer, and exchanges report purchases. It is a security tool, not a privacy tool.

The Short Version

A hardware wallet keeps your private keys on a tamper-resistant chip and makes you physically confirm every transaction on a screen malware cannot fake. That stops remote theft cold.

It does not stop you from approving a scam, leaking your seed phrase, or buying a tampered device. The two habits that make it work are boring: back up the seed phrase offline, and read the device screen before you press the button.

This article is educational and is not financial advice.

Sources

Continue learning