Hardware wallet

A hardware wallet is a small dedicated device — typically the size of a USB stick or credit card — whose only job is to hold cryptographic keys and sign transactions with them. The private key material is generated on the device and stored inside a secure element or a special microcontroller that resists physical extraction. When you send a crypto transaction, the unsigned transaction is passed to the device, the device shows the details on its own screen, you approve on the device, and only the signed transaction leaves — never the key.

This design is the standard defense against malware on a personal computer. Even if the machine you connect the device to is fully compromised, the malware cannot silently drain the wallet, because signing requires physical confirmation on a screen the malware cannot control.

Two failure modes matter. First, always buy hardware wallets directly from the manufacturer or an authorized reseller — supply-chain attacks (pre-initialized devices with a known seed) are a real risk. Second, always verify the transaction details on the device screen before approving, not just in the desktop app; the desktop app is the untrusted surface, the device screen is the trusted one.