A hardware wallet is a small dedicated device that keeps the private keys controlling your cryptocurrency off your internet-connected computer and phone, and asks you to confirm every transaction on its own screen. It is the most common form of "cold storage" for individuals, but it only protects you if it was genuine when it arrived, the recovery phrase was created on the device and backed up well, and you read what you sign. This guide explains in plain English how hardware wallets work, how to buy and set one up safely, how to back up the seed phrase, when to add a passphrase, how firmware updates and tampered devices fit in, and the misconceptions that cost people money. It is for individuals with meaningful crypto holdings and for the security and support teams who advise them. Organisational key management is covered in the Crypto Wallet Security Guide. Device makers are listed alphabetically where named; order is not a ranking and no product is recommended.
Key takeaways
- The seed phrase is the wallet: the 12 to 24 words created at setup can rebuild every key; the device is replaceable, the phrase is not.
- Buy direct and verify on arrival: a device that arrives with a recovery phrase or PIN already set is a scam, and both Ledger and Trezor run cryptographic genuineness checks in their official apps.
- Never type the phrase into anything: a genuine set-up never asks you to enter your recovery words into a website, app or computer.
- A passphrase adds a second factor and a new failure mode: under BIP-39 every passphrase opens a valid wallet, so a forgotten or mistyped one means a different, empty wallet and no recovery.
- The screen is the security boundary: a hardware wallet cannot stop you approving a malicious transaction you did not read on the device.
What it is
Every cryptocurrency balance is controlled by private keys. Whoever can sign with those keys can move the funds. A software ("hot") wallet keeps keys on a general-purpose computer or phone where malware can reach them. A hardware wallet generates and stores keys inside the device, often in a secure element chip, and only sends signed transactions out. The computer or phone prepares a transaction, the device shows its details, you approve with a button or touchscreen, and the device returns a signature. The private key never leaves.
| Option | Where keys live | Main risk | Fits |
|---|---|---|---|
| Exchange account (custodial) | With the exchange | Exchange failure, account takeover, withdrawal freezes | Active trading, small amounts |
| Software wallet (hot) | On your phone or computer | Malware, phishing, device theft | Spending money, small amounts |
| Hardware wallet (cold) | On a dedicated signing device | Lost or poor backup, tampered device, blind signing | Savings you could not afford to lose |
| Multisig with several hardware wallets | Split across devices, m-of-n needed to sign | Complexity, losing too many keys or the wallet configuration | Large holdings, families, small companies |
"Cold storage" strictly means keys that are never on an online machine. A hardware wallet plugged into a computer is still cold in that sense, because the key stays inside the device; what changes is that the online computer can try to trick you into signing the wrong thing.
How it works
The recovery phrase
Almost all hardware wallets use BIP-39 (status: Deployed). The device generates 128 to 256 bits of random entropy, adds a short checksum and splits the result into 11-bit groups, each mapped to one of 2,048 words. That produces 12, 15, 18, 21 or 24 words. The words are stretched with PBKDF2 (HMAC-SHA512, 2,048 iterations) into a 512-bit seed, and BIP-32 hierarchical deterministic derivation turns that seed into an unlimited tree of keys, organised by BIP-44 paths for accounts and coins.
| Words | Entropy | Checksum bits |
|---|---|---|
| 12 | 128 bits | 4 |
| 18 | 192 bits | 6 |
| 24 | 256 bits | 8 |
BIP-39 itself notes that the checksum is short: about 1 in 256 random errors will pass unnoticed, and it cannot correct mistakes. Write each word carefully and check spelling against the official English wordlist; BIP-39 strongly discourages non-English wordlists because most wallets support only English.
The optional passphrase
BIP-39 allows an optional passphrase, often called the "25th word". It is mixed into the seed derivation, and every passphrase, including a wrong one, produces a valid but different wallet. That gives two benefits: someone who finds your written words cannot open the passphrase wallet, and you can keep a small decoy balance in the no-passphrase wallet. The cost is that the passphrase is now as critical as the words, it is case and space sensitive, and nothing tells you it is wrong except an empty balance.
Buying safely
- Source: buy from the maker's own shop or an authorised reseller. On marketplaces, check the "Sold by" name against the maker's reseller list, because third-party sellers can share the same listing.
- Refuse pre-set devices: Ledger states that a legitimate device never comes with a recovery phrase or PIN pre-configured. A card in the box with words on it is the pre-seeded device scam: the seller keeps a copy and drains the wallet after you deposit.
- Refuse unsolicited "replacements": devices sent unasked, often after a data breach at a retailer, are a known attack.
- Beware lookalike set-up sites: search results for "start" or "setup" pages for well-known wallets include impersonation sites. Type the maker's address yourself.
Verifying the device
Both major makers now use cryptographic attestation rather than relying on stickers. The genuineness check only means something when run in the official app downloaded from the maker's site or an official app store.
| Maker | Check | How it works (from the maker's documentation) | Stated limits |
|---|---|---|---|
| Ledger | Genuine Check | Each secure element generates a key pair at manufacture; Ledger signs the public key as an attestation; the app sends a challenge the device must sign. Runs on first connection, on app access, before installing apps and before firmware updates. | Cannot detect added spying implants if the original secure element is intact; does not show supply chain history. Seals are described as easy to clone. |
| Trezor | Device authentication check, firmware authenticity check, entropy check | Safe models carry a per-device certificate in the secure element that signs a challenge from Trezor Suite; firmware revision is compared with known legitimate builds at each connection; the entropy check confirms during setup that the device used the host's entropy and did not generate a predictable wallet. | Authentication runs on official devices only; a failed firmware check means the device should be treated as counterfeit and funds moved to a new wallet. |
Setting up, step by step
- Inspect the packaging, then connect the device to the official app only, and let it run the genuineness check before anything else.
- Install or update firmware through the official app if prompted; never from a link in an email or message.
- Choose "create new wallet" on the device. Never "restore" with words that came in the box.
- Set a PIN on the device. Use something not linked to your birthday or phone.
- Write the recovery words shown on the device screen, in order, on the supplied sheet. Do not photograph them, type them or store them in a cloud note.
- Complete the device's backup confirmation, then do a test: send a small amount in, wipe or reset the device, restore from your written words, and confirm the same receive address appears.
- Decide whether to add a passphrase. If you do, record it separately from the words and repeat the restore test with it.
- Only then move larger amounts, verifying the receive address on the device screen each time.
Backing up the seed
| Backup method | Protects against | Weakness |
|---|---|---|
| Paper sheet in a safe place | Online theft | Fire, water, fading, discovery |
| Stamped or engraved metal plate | Online theft, fire and water damage | Discovery, single point of loss |
| Two copies in separate locations | Loss of one location | Doubles the chance of discovery |
| Words plus passphrase stored apart | Theft of the written words alone | Losing the passphrase loses the funds |
| Multisig (for example 2-of-3 devices) | Loss or theft of any one device or seed | Must also back up the wallet configuration (descriptor) |
For larger amounts, multisig removes the single seed as a point of failure. BIP-39 notes that the problem of knowing which address format belongs to a seed is now largely handled by descriptor wallets, which is why multisig users must keep the descriptor with each backup. For organisations see the Multisig Treasury Operations Guide for Protocols and Companies.
Signing and firmware
The online wallet app builds a transaction and the device displays it. For Bitcoin, PSBT (BIP-174, Deployed) carries the data an offline signer needs, including per-output data so the device can check that outputs go to the intended recipient. For smart contract chains, check the contract, amount and approval scope on the device screen; if the screen only shows a hash ("blind signing"), stop and verify another way. Firmware updates fix security bugs, so install them, but only through the official app, and make sure your backup is tested before any update.
Why it matters
Most retail crypto losses come not from broken cryptography but from keys exposed on online devices, phishing for recovery words, and approving malicious transactions. A hardware wallet removes the first cause entirely and narrows the others to a single moment you can control: what you approve on the device screen. Unlike a bank, there is usually no fraud team or reversal; see the Crypto Scam and Drainer Guide and Cryptocurrency Scam Awareness Guide for how drains happen.
Who needs one: if losing your holdings would hurt, keep them off exchanges and phones. Small amounts for regular spending can stay in a software wallet. Large holdings or shared family or company funds justify multisig with several devices.
Signs it is working
- You have restored the wallet from your written backup at least once and seen the same addresses.
- Every receive address you use was checked on the device screen.
- Firmware is current and was installed through the official app.
- No copy of the recovery words exists in any digital form.
- Someone you trust knows how to find your inheritance instructions, without being able to use them alone.
Common misconceptions
- "My crypto is on the device": coins live on the blockchain; the device holds keys. Lose the device and you can restore from the words; lose the words and the device is your only copy.
- "Support will help me recover": Trezor states that its support will never ask for your seed, PIN or passphrase, and Ledger tells users never to enter the recovery phrase into any app, website or computer. Anyone who asks for it is a thief.
- "An intact seal means a safe device": Ledger's own threat model says seals are easy to clone. Rely on the cryptographic check and on buying direct.
- "The words that came with it are a convenient backup": any pre-printed recovery phrase belongs to someone else.
- "A hardware wallet makes any transaction safe": it signs what you approve. A drainer approval signed on a genuine device is still a valid transaction.
- "A passphrase can be recovered later": under BIP-39 there is no wrong answer, only a different wallet. Forget it and the funds are gone.
Related concepts
- Self-custody and the law: self-custody wallets are outside the US GENIUS Act's offer and sale prohibition; see the GENIUS Act Stablecoin Guide.
- MPC wallets: split one key across parties instead of using several keys; see the MPC Wallet and Threshold Signing Security Guide.
- AI agents with wallets: agents that transact need scoped keys and limits, not your hardware wallet seed; see the AI Agents with Crypto Wallets Security Guide.
- Stablecoins: a hardware wallet protects your keys, but issuers can still freeze stablecoin balances under their own controls; see the Stablecoin Security and Risk Guide.
Practitioner checklist
- Buy only from the maker or an authorised reseller and refuse any device with a pre-set phrase or PIN.
- Run the maker's genuineness check in the official app before setup.
- Generate a new wallet on the device and write the words by hand, never digitally.
- Test a full restore from the written words before depositing significant funds.
- Store backups on a durable medium in a separate secure location; keep any passphrase apart from the words.
- Verify every receive address and every transaction detail on the device screen.
- Update firmware only through the official app, after confirming your backup.
- Move to multisig, with backed-up descriptors, when holdings justify it.
Standards and references
- Bitcoin BIPs: BIP-39 Mnemonic code for generating deterministic keys
- Bitcoin BIPs: BIP-32 Hierarchical Deterministic Wallets
- Bitcoin BIPs: BIP-44 Multi-Account Hierarchy for Deterministic Wallets
- Bitcoin BIPs: BIP-174 Partially Signed Bitcoin Transaction Format
- Ledger Donjon: Threat Model, Device Genuineness
- Ledger: How to protect hardware wallets against tampering
- Trezor: Trezor Safe device authentication check
- Trezor: Entropy check, how Trezor Suite verifies wallet generation
Related NHI Mgmt Group resources: Crypto Wallet Security Guide · Multisig Treasury Operations Guide for Protocols and Companies · Crypto Scam and Drainer Guide · MPC Wallet and Threshold Signing Security Guide