What is a hardware wallet? How cold storage protects your crypto
A hardware wallet is a small physical device that stores your crypto private keys offline and signs transactions on the device itself. Your coins stay on the blockchain; what the hardware wallet protects is the private key that controls them, which never leaves the device or touches an internet-connected computer. That makes it much harder for hackers or malware to steal your crypto, but it also makes you fully responsible for a backup called the recovery phrase.
Hardware wallet explained
A hardware wallet is a type of crypto wallet built as a physical device, often the size of a USB stick or a credit card. Like every crypto wallet, it doesn’t actually hold coins. Your digital assets are recorded on the blockchain network; the wallet holds the keys that prove they’re yours and let you move them.
The point of a hardware wallet is to keep those private keys offline. The device creates the keys inside itself, stores them in protected memory, and uses them to sign transactions without ever exposing them to your phone or computer.
How hardware wallets work
Hardware wallets work by splitting the job between two parts: wallet software on your phone or computer, which talks to the blockchain, and the device, which signs.
- You create a transaction in the wallet software, for example to send crypto to an address.
- The unsigned transaction goes to the device over USB, Bluetooth or a QR code.
- You check the details on the device’s own screen: the amount and the receiving address.
- You approve it with a button press, and the device signs the transaction inside its secure chip.
- The signed transaction goes back to the software, which sends it to the blockchain.
At no point does the private key leave the device. Even if your computer has malware, the attacker sees only the signed transaction, which is simply data that can’t be reused.
Private keys and “not your keys, not your crypto”
A private key is the secret that lets you spend your crypto; the public key, and the wallet addresses made from it, are what you share to receive. Think of a wallet address as a bank account number, and the private key as the signature only you can give.
“Not your keys, not your crypto” is a saying in crypto circles: if an exchange holds the keys for you (a custodial wallet), you rely on that company to give your coins back. With a hardware wallet, a non custodial wallet, you hold the keys yourself.
When you set up the device, it also gives you a seed phrase, usually 12 or 24 words. This recovery phrase can rebuild all your keys on a new device if the old one breaks or gets lost. Whoever has those words has your crypto.
Hardware wallets, cold wallets and hot wallets
A hardware wallet is the most common kind of cold wallet: a wallet whose keys stay offline, also called cold storage. Software wallets, such as mobile wallets, desktop wallets and browser extensions, are hot wallets: their keys live on a device that is connected to the internet.
| Hardware wallet (cold) | Software wallet (hot) | |
|---|---|---|
| Where keys are stored | On a separate device, offline | On your phone or computer |
| Exposure to online attacks | Low | Higher |
| Convenience | Slower, needs the device | Fast, always at hand |
| Cost | You buy the device | Usually free |
| Best for | Long-term holdings | Small amounts and frequent use |
Many people use both: a hot wallet such as Trust Wallet or MetaMask for daily use and decentralised finance apps, connected to a hardware wallet for the larger amounts.
Hardware wallet security
Hardware wallets provide strong protection, but not complete protection. Their main security benefits:
- Offline keys: the private keys stay completely offline, out of reach of malware on your computer.
- Secure element chip: many hardware wallets use a secure element, a chip designed to resist physical tampering.
- PIN code: without the PIN, a thief can’t use the device, and many devices wipe themselves after repeated wrong attempts.
- Trusted screen: you confirm the receiving address on the device, which defeats malware that swaps addresses on your computer.
What a hardware wallet can’t do is stop you from approving a bad transaction. Phishing sites, fake support staff and malicious smart contracts trick people into signing things they don’t understand. Supply chain attacks are another risk: a tampered device bought from an unofficial seller. And in 2020 a leak of customer data from one major manufacturer’s online shop led to waves of phishing emails aimed at its buyers.
Advantages and drawbacks of a hardware wallet
Advantages:
- You control your private keys directly, without exchange custody.
- Your crypto survives if an exchange is hacked or goes bankrupt.
- Theft through online attacks becomes very hard.
Drawbacks:
- You pay for the device.
- It’s less convenient for trading, and you need it at hand to send crypto.
- Mistakes are final: lose the device and the recovery seed, and you lose access for good.
Hardware wallet manufacturers
The best-known hardware wallet manufacturers are Ledger, a French company, and Trezor, from the Czech Republic. Other options include BitBox from Switzerland and Coldcard, which supports bitcoin only. A Ledger wallet uses a secure element chip and comes with Bluetooth on some models; Trezor is known for open-source software. Most hardware wallets support multiple cryptocurrencies, but check that yours supports the exact coins and networks you hold.
Compare connection type (USB, Bluetooth, QR code), screen size, supported networks and whether the maker sells directly to your country. Entry-level models typically cost under €100; premium models cost more.
Setting up and using a hardware wallet
Setting up takes about half an hour. Do it carefully, once.
- Buy directly from the manufacturer or an official reseller. Never buy second-hand, and never use a device that arrives with a recovery phrase already printed.
- Create a new wallet on the device and write down the recovery phrase on paper or metal. Never photograph it or type it into a computer.
- Set a strong PIN.
- Test with a small amount. Send a small amount, check the receiving address on the device, then practise a recovery with the phrase before you send more.
Protecting your recovery phrase
Your recovery phrase is the real key to your crypto, so store it offline and separately from the device. A fireproof place at home and a second copy in another location protect against loss and theft. No genuine company will ever ask for your phrase; anyone who does is trying to steal from you.
Who should use a hardware wallet?
A hardware wallet suits long-term holders with an amount they’d hate to lose. If you hold a small amount or trade often, keeping it on a licensed exchange may be more practical, because the device costs money and adds steps.
For EU residents, buy your crypto on an exchange with a MiCA licence, with SEPA funding where possible, and withdraw to your device. Since 30 December 2024, the EU travel rule requires the exchange to check that a self-hosted wallet is yours for transfers above €1,000, usually with a quick signature or test transaction. Self-custody doesn’t change your tax position, and crypto-assets can still lose all their value. Our guide to wallet types compares the options in more detail.
Questions people ask
Do I really need a hardware wallet?
Not always. If you hold a small amount, or you trade often, a licensed exchange or a software wallet may be enough. A hardware wallet makes sense once you hold an amount you'd be upset to lose and plan to keep it for a long time.
Can you give me an example of a hardware wallet?
The best-known makers are Ledger from France and Trezor from the Czech Republic. Others include BitBox from Switzerland and Coldcard, which supports bitcoin only. Buy only from the manufacturer or an official reseller.
How much do hardware wallets cost?
Entry-level models typically cost under €100, while premium models with touchscreens or extra features cost more. Check the manufacturer's website for current prices, and avoid second-hand devices.
Can I lose my XRP in a cold wallet?
Your XRP stays on the XRP Ledger, not on the device, so a broken or lost device doesn't lose your coins. You lose access only if you lose both the device and your recovery phrase, or if someone else gets hold of the phrase.
Why shouldn't I hold crypto in a cold wallet?
Cold storage is slower and less convenient for frequent trading, and you are fully responsible for your recovery phrase. If you lose it, nobody can restore your access. For active trading, many people keep a small balance on a licensed exchange.