Hardware Wallets

6.1 When the amount gets serious

A few months into crypto, Node surprised everyone by deciding to invest a meaningful amount. "Not life-changing," Node said, "but enough that I'd be furious if it disappeared."

"Then it's time for a hardware wallet," said Hash.

As Chapter 2 introduced, a hardware wallet is a dedicated physical device that stores private keys and signs transactions without exposing the keys to your computer or phone. This chapter explains why that matters, how to buy and set one up safely, and where hardware wallets can still fail you.

6.2 Why a separate device helps

Your computer and phone are general-purpose machines. They run browsers, download files, install apps, and connect to countless websites. Each of those is a possible path for malware. If your private key is stored on such a device, a successful attack can steal it.

A hardware wallet separates the two jobs. The computer or phone handles everything that touches the internet: showing balances, preparing transactions, and connecting to applications. The hardware wallet handles the one thing that must stay secret: the private key.

Here's the flow when Node sends crypto with a hardware wallet:

1. The wallet software on the computer prepares the transaction.
2. The transaction is sent to the hardware device.
3. The device shows the key details on its own screen: amount, recipient, and fees.
4. Node checks the details on the device's screen and physically presses a button to approve.
5. The device signs the transaction internally and sends back only the signature.
6. The computer broadcasts the signed transaction to the network.

The private key never leaves the device. Malware on the computer can't copy it, and it can't approve transactions on its own, because it can't press the physical button.

Many hardware wallets store keys in a secure element, a specialised chip designed to resist physical tampering, similar to those used in bank cards and passports.

Chapter 6 · Why a hardware wallet helps

A possibly-infected computer prepares a transaction and sends it to the hardware wallet over USB. The hardware wallet displays the true amount and destination on its own screen, signs inside the device, and returns only the signature. The private key never leaves the device, and the host broadcasts the signed transaction.

6.3 The device screen is the source of truth

There's a subtle but crucial point here. If your computer is infected, malware could change what the computer displays. It could show you one recipient address while asking the hardware wallet to sign a payment to a different one.

The hardware wallet's own screen can't be altered by the computer. That's why the rule is simple: always verify details on the device screen, not on your computer screen. If they don't match, reject the transaction.

"So the hardware wallet protects my key," said Node, "but I still have to read what I'm approving."

"Exactly," said Hash. "It protects your key from theft. It can't protect you from approving the wrong thing."

6.4 Buying one safely

Hardware wallets have their own supply chain risks. A device could be tampered with before it reaches you, or a fake device could be designed to leak your seed phrase.

1. Buy directly from the manufacturer or an authorised reseller listed on the manufacturer's official website. Avoid marketplaces and second-hand sellers.
2. Check the packaging for signs of tampering, though modern devices also verify their own authenticity during setup.
3. Never use a device that arrives with a seed phrase already written on a card. Legitimate devices generate a new seed phrase during setup. A pre-written phrase means someone else already knows it.
4. Install the companion software only from the manufacturer's official website.

Warning sign	What it might mean
Seed phrase included in the box	Scam: someone else has a copy
Device already set up when it arrives	Tampered or used device
Instructions telling you to enter your seed phrase on a computer	Scam: legitimate setup happens on the device
Much cheaper than the official price	Possibly fake or tampered
Unsolicited "replacement device" in the mail	Scam: often sent to people whose data leaked from a retailer

That last one is worth noting. In the past, customer contact details from hardware wallet retailers have leaked, and scammers have mailed fake replacement devices or sent phishing emails to those customers. A device you didn't order is never a gift.

6.5 Setting it up

Setup varies by device, but the important steps are similar.

1. Connect the device and follow the instructions on its screen.
2. Set a PIN on the device. After several wrong attempts, most devices wipe themselves, protecting you if the device is stolen.
3. The device generates your seed phrase and shows it on its own screen. Write it down by hand, following Chapter 4.
4. Confirm the words on the device.
5. Install the companion app or connect the device to a compatible wallet application.
6. Do a small test: receive a small amount, then send a small amount out, confirming every detail on the device screen.

Before moving significant funds, test your backup using the device's recovery check feature if it has one, or by restoring to a second device.

6.6 What if the device is lost or broken?

Mint asked the question everyone asks. "What if I drop it in the sea?"

"Buy a new one and restore it with your seed phrase," said Hash. "Your crypto was never in the device. It's on the blockchain. The device just holds the key, and your seed phrase can recreate the key."

This is why the seed phrase backup matters more than the device itself. If someone steals the device, they also need your PIN, and after a few wrong guesses it wipes itself. But if someone finds your seed phrase, the device's protection is irrelevant.

6.7 Blind signing

Hardware wallets are excellent for simple transfers, where the screen shows an amount and an address. Interactions with smart contracts are harder. A swap, a lending deposit, or an approval can involve complex data that a small screen can't always display meaningfully.

When a device can't decode what you're signing, it may show raw data or a warning, and ask you to approve anyway. This is called blind signing: approving something you can't read. Many devices require you to enable it in settings before allowing it.

Blind signing is one of the biggest remaining risks for hardware wallet users. In February 2025, attackers stole roughly $1.5 billion from the exchange Bybit. The exchange's signers approved what appeared to be a routine transaction, but the interface they used had been compromised, and they signed a malicious transaction without seeing what it actually did. Professional security teams with hardware devices were still fooled.

To reduce the risk, keep blind signing disabled unless you need it, and turn it off again afterwards. Prefer wallets and devices that can decode and clearly display transaction details. Use transaction simulation tools when available (Chapter 7). And use your hardware wallet mainly for holding and simple transfers, and a separate wallet for experimenting with new applications.

6.8 Is it worth it?

Situation	Hardware wallet?
A small amount you're learning with	Optional. A well-secured software wallet is fine
An amount that would really hurt to lose	Recommended
Long-term savings you rarely touch	Strongly recommended
Frequent trading on new applications	Use a separate hot wallet for this, and keep the hardware wallet as your vault

A hardware wallet typically costs about as much as a nice dinner for two, or a little more. For meaningful holdings, it's one of the best-value security purchases in crypto.

6.9 Try it yourself

If you own a hardware wallet, open its settings and check two things: whether blind signing is enabled, and whether the firmware is up to date (only update through the official companion app). Then send yourself a small transaction and practise comparing the address on your computer with the address on the device screen.

If you don't own one, visit the official websites of two hardware wallet manufacturers and find their list of authorised resellers. Notice how many marketplace listings are not on those lists.

Key takeaways from this chapter

1. A hardware wallet keeps your private key on a dedicated device and signs transactions without revealing the key.
2. Always verify transaction details on the device screen, which malware on your computer can't change.
3. Buy directly from the manufacturer or authorised resellers, and never use a device that comes with a seed phrase.
4. Set a PIN, write down the seed phrase generated by the device, and test with small amounts first.
5. Losing the device isn't losing your crypto, as long as your seed phrase backup is safe.
6. Blind signing, approving data you can't read, remains a major risk even with hardware wallets.
7. Use a hardware wallet as a vault for meaningful amounts, and a separate hot wallet for experimenting.