Hardware Wallet

A hardware wallet is a small, purpose-built electronic device that generates and stores the private keys controlling crypto assets and uses them to sign transactions inside the device. The computer or phone it is connected to prepares the transaction and broadcasts it, but never sees the key. Individuals use hardware wallets for long-term holdings, and small firms and DAOs use them as signers in shared-control setups.

A hardware wallet is a form of self-custody: the owner, not an exchange, holds the keys. It is the most common kind of cold wallet, although strictly it is connected briefly each time it signs. The wider family of wallet types is compared in hot, cold, hardware and software wallets. The first widely sold device, the Trezor One from SatoshiLabs, shipped in 2014; Ledger, Trezor and several other makers now dominate the market.

Imagine a notary who never leaves a locked room. You slide a document under the door, the notary reads it on a little screen inside, and if you press "approve" the notary stamps it and slides it back. The stamp itself never leaves the room, so a thief who breaks into your house or your laptop can steal documents but not the stamp.

The coins themselves are not inside the device; they stay recorded on the blockchain. What the device guards is the stamp, the secret that proves you are allowed to move them. Lose the device and you can rebuild the stamp from a written backup; lose the backup too and the coins are gone for good.

1. Setup. The device generates a random seed and shows it as a list of 12 or 24 words, the seed phrase, following the BIP-39 standard. The owner writes the words down; the device derives every key and wallet address from that seed.
2. Locking. A PIN protects the device, and many models wipe themselves after a set number of wrong attempts.
3. Signing. Wallet software on a computer builds an unsigned transaction and sends it over USB, Bluetooth, NFC or a QR code. The device shows the destination address and amount on its own screen; the owner checks them and presses a button; the device produces a digital signature with the key and returns only the signed transaction.
4. Broadcast. The software sends the signed transaction to the network. Anyone can see it, but no one can reuse the signature for a different payment.

Many devices store keys in a secure element, a tamper-resistant chip of the kind used in bank cards and passports, which makes physical extraction expensive. Some makers publish their firmware as open source so it can be reviewed; others rely on certified closed chips. Both approaches have defenders.

The seed phrase is the real asset. Anyone who learns it can rebuild the wallet on another device and move the funds without touching the original hardware. Common practice is to keep the words offline on paper or stamped metal, in a place safe from fire and flood, and never to type them into a computer or phone. An optional extra word, the BIP-39 passphrase, creates a separate hidden wallet, so the written words alone are not enough to reach the funds.

Organisations rarely trust a single device. They use several hardware wallets as signers on a multi-sig wallet, so two of three or three of five key holders must approve each payment, a pattern used in blockchain treasury management. Larger institutions more often use a crypto custody provider with hardware security modules or an MPC wallet.

Most losses do not come from breaking the device but from tricking its owner:

• Seed-phrase phishing. Fake support emails, apps or websites ask the owner to "verify" or "restore" by entering the words; any such request is an attack. This is a variant of phishing, and a 2020 breach of Ledger's customer database fuelled years of targeted scam letters and emails.
• Tampered or counterfeit devices. Devices bought second-hand or from unofficial sellers may arrive with a pre-printed "recovery sheet" or altered firmware. Buying from the maker and generating a fresh seed avoids this.
• Blind signing. When the screen cannot show what a smart contract call will do, the owner may approve a token allowance that lets an attacker drain the wallet later.
• Address tricks. In a wallet address poisoning scam, a look-alike address is planted in the owner's history in the hope that it will be copied by mistake; checking the full address on the device screen defeats it.
• Physical coercion. No device protects against threats of violence; a passphrase-protected hidden wallet is one partial defence.

A hardware wallet secures keys but not judgement: it will sign any transaction the owner approves. It is also only as good as the backup; lost seed phrases account for a large but unknown share of permanently lost bitcoin. In May 2023 Ledger's announcement of Ledger Recover, an optional paid service that splits an encrypted copy of the seed among custodians, prompted debate about whether firmware able to export a seed undermines the idea of a device that never reveals its secret. The episode illustrates the trade-off between recoverability and the principle summed up as not your keys, not your coins.

Hardware wallets also do not remove legal duties. Transfers from a self-hosted wallet to an exchange may be checked under the FATF Travel Rule, and the device holds whatever tokens the owner chooses, including those built on any token standard the software supports.

• BIP-39: Mnemonic code for generating deterministic keys
• NIST SP 800-57 Part 1 Rev. 5: Recommendation for Key Management