The device generates your keys internally and is built so they cannot be read back out. When you want to send funds, the wallet software passes an unsigned transaction to the device, you check the details on its screen, press the physical button, and only the signature comes back. A computer riddled with malware still never sees the key.
That trusted screen is the whole point, so use it. Address-swapping malware works by replacing what you copied with an attacker's address, and the only place you can catch it is on the device display. Read the destination and the amount there, every time, rather than assuming what is on your monitor is what you are signing. Our <a href="/toolkit/how-to-set-up-a-hardware-wallet/">setup walkthrough</a> covers initialisation, PIN choice and verifying the backup.
Be equally clear about what a hardware wallet does not do. It cannot stop you approving a malicious smart contract, because you authorised that yourself. It offers no protection at all if your recovery phrase leaks, since the phrase reconstructs the keys without the device. And it cannot rescue a transaction sent to the wrong address. Buy only from the manufacturer or an authorised reseller, initialise it yourself, and treat any device arriving with a pre-filled recovery sheet as an outright attack.
Choosing between models comes down to which chains you use, whether you want an air-gapped design, how the firmware is developed and whether the vendor is open about its security model. Our <a href="/reviews/">hardware reviews</a> are research-based, built from public documentation, firmware and security disclosures and manufacturer specifications rather than hands-on laboratory testing, and our <a href="/review-methodology/">review methodology</a> explains exactly what that does and does not cover.
What Is a Crypto Wallet? Keys, Not Coins
Key takeaways
- The device protects the key; verifying the address on its own screen is what protects the transaction.
- A hardware wallet does not upgrade a leaked recovery phrase, so the phrase remains the weakest link in the chain.
- Only ever set up a device you initialised yourself, and never one that arrived with words already written down.
Hardware Wallet — frequently asked questions
What happens if my hardware wallet breaks or is lost?
Your funds are unaffected, because they live on the blockchain and the device only held the keys. Restore your recovery phrase onto a replacement device, or onto any compatible wallet, and the balances reappear. This is precisely why the recovery phrase backup matters more than the hardware, and why it must be stored somewhere separate from the device itself.
Is a hardware wallet necessary for small amounts?
That depends on your own situation, and it is a trade-off rather than a rule. A device adds cost and a little friction to everyday transactions, while removing an entire category of risk from malware on your phone or computer. Many people keep a small hot wallet for routine use and reserve offline storage for anything they would be upset to lose.
New to crypto, or filling in the gaps? Work through the essentials in Learn, browse every term A–Z, or see live prices for the coins these concepts power.