Hardware wallets

A hardware wallet stores your Bitcoin keys and signs transactions inside a dedicated device, so malware on your computer can't steal them. Learn how to use one.

A safe for your keys

A hardware wallet (or "signing device") generates your seed inside itself and never lets the private keys out. Your computer can ask it to sign, but can't read the keys.

Why the screen matters

Malware on your computer could swap the destination address. The hardware wallet's own screen shows what you're actually signing. Always check the address and amount on the device, not just on your computer.

Choosing and using one

• Buy directly from the manufacturer or an authorised seller.
• Set it up yourself: it should generate a new seed. Never accept a device with a seed already written for you.
• Write down the seed offline and keep it safe. The device can be replaced; the seed can't.
• Consider open-source firmware and devices that work with your own node.
• Optionally add a passphrase.

What it doesn't protect against

• Someone finding your seed backup.
• You approving a transaction you didn't check.
• Physical coercion. Multisig and good habits help here.

Setting one up safely

1. Unbox and check the packaging for tampering.
2. Update the firmware from the manufacturer's official software.
3. Generate a new seed on the device and write it down offline.
4. Confirm the seed when the device asks.
5. Send a small test, then test a restore before storing large amounts.

Bitcoin-only firmware

Some devices offer Bitcoin-only firmware with less code, which reduces the attack surface for people who don't need other coins.