A hardware wallet is a small physical device that stores your private keys offline and signs transactions without ever exposing the keys to an internet-connected computer. In 2014, the first commercial one, the Trezor, shipped. Hardware wallets protect against the malware and remote attacks that drain software wallets. They do nothing against the attack that accounts for most losses: the owner typing their seed phrase into a fake website.
What a hardware wallet does
Keeps the key off the internet while still letting you use it.
On a phone or computer, a software wallet holds your private key, which is connected to the internet and therefore reachable by malware. In a dedicated chip that never connects, a hardware wallet holds it.
When you want to send funds, the transaction is built on your computer, sent to the device, signed inside the device, and sent back. The signature travels. The key never does.
How transaction signing works on the device
Four steps, and the third is where the security lives.
- You create a transaction in the companion software on your computer or phone.
- The unsigned transaction goes to the hardware wallet over USB or Bluetooth.
- You verify the details on the device's own screen and press a physical button to approve.
- The device signs the transaction internally and returns the signature. The key stays inside.
Much depends on that screen. Malware can alter what your computer displays, but it cannot alter what the device displays. Checking the address on the device rather than the computer is the whole point.
Hardware vs software wallets vs exchange accounts
| Hardware wallet | Software wallet | Exchange account | |
|---|---|---|---|
| Who holds the key | You, offline | You, online | The platform |
| Malware protection | Strong | Weak | Not your concern |
| Phishing protection | None, if you enter the seed phrase | None | Account-level controls |
| Recovery if lost | From seed phrase only | From seed phrase only | Through support |
| Cost | Roughly $60 to $300 | Free | Free |
| Best for | Long-term holdings | Everyday use | Trading |
Protection against malware, hacks, and exchange failure
- Malware and keyloggers on your computer, since the key never touches it.
- Remote hacks, for the same reason.
- Clipboard hijacking, provided you verify the address on the device screen.
- Exchange failure, since you are not depending on a platform's solvency.
What a hardware wallet does not protect against
Being direct, because marketing for these devices tends to imply otherwise.
Seed phrase phishing. Every hardware wallet generates a seed phrase at setup. Anyone holding those words can restore the wallet on any device and drain it. The device is irrelevant if the words are compromised. In early 2026, scammers mailed official-looking letters impersonating manufacturers, with QR codes leading to fake setup pages that requested the phrase.
Malicious signatures. If you approve a transaction granting a contract permission to spend your tokens, the device signs it faithfully. It protects the key, not your judgment.
Physical theft with the PIN. Someone with the device and the PIN has the funds.
Losing both device and backup. No recovery exists.
Supply chain tampering. A device bought second-hand or from an unofficial seller may have been modified or pre-seeded.
How to set up the device properly
- Buy directly from the manufacturer. Never second-hand, never from a marketplace reseller.
- Generate the seed phrase on the device itself. Never use a phrase supplied on paper in the box, which is a known scam.
- Write the phrase on paper or metal. Never photograph it, never type it into anything.
- Store copies in more than one physical location.
- Verify every receiving address on the device screen before sending funds to it.
- Send a small test transaction first.
- Consider the optional passphrase, sometimes called the 25th word, which creates a separate hidden wallet.
Who needs one: long-term holdings vs active trading
Descriptively, since it depends on what you hold and how you use it.
For holdings you intend to keep for a long time and rarely move, hardware wallets suit, since the inconvenience of a physical device is worth the protection against remote attack.
They suit less well for active trading, where funds need to move quickly, or for small amounts where the device costs more than the balance it protects.
Many people run both: a regulated exchange for trading and a hardware wallet for long-term storage. Splitting funds limits what any single failure can cost.
Security you can verify on mb.io
With a hardware wallet, the entire burden of security falls on you. Regulated custody moves it to an audited institution. Different trades for different purposes.
mb.io is a regulated crypto spot exchange backed by MultiBank Group, a financial institution founded in 2005 that serves more than 2 million clients across 100+ countries.
- Institutional-grade MPC custody powered by Fireblocks, with segregated client funds
- 10/10 security score from Hacken, an independent blockchain security auditor
- Regulated by VARA in the UAE and AUSTRAC in Australia
- Withdrawal controls that let you verify a destination before funds move
- Buy, sell, and swap in three steps, from sign-up to purchase
- 24/7 multilingual client support
Open your account and start trading on mb.io.
Frequently asked questions
What is a hardware wallet?
A physical device that stores private keys offline and signs transactions internally, so the keys never touch an internet-connected computer. It protects against malware and remote attacks.
Is a hardware wallet safer than an exchange?
Against different things. It removes platform risk and adds the risk of losing your seed phrase or being phished for it. A regulated exchange with segregated funds removes key-management risk and adds counterparty dependence.
Can a hardware wallet be hacked?
Remotely, effectively no. The main losses come from owners entering their seed phrase into fake sites, approving malicious transactions, or buying tampered devices second-hand.
What happens if I lose my hardware wallet?
Restore from your seed phrase on a new device. If you have lost both the device and the phrase, the funds are permanently unrecoverable.
Do I need a hardware wallet?
For long-term holdings you rarely move, it adds meaningful protection. For active trading or small balances, it may cost more than it protects. Many people run both a hardware wallet and a regulated exchange account.
Where should I buy a hardware wallet?
Directly from the manufacturer. Second-hand devices and marketplace resellers carry tampering risk, and a pre-written seed phrase in the box is a known scam.
What is the 25th word on a hardware wallet?
An optional passphrase added to the seed phrase, creating a separate hidden wallet. It adds protection if the words are found. Forgetting it makes that wallet permanently inaccessible.
Why verify addresses on the device screen?
Because malware can alter what your computer displays but cannot alter what the device displays. The device screen is the trustworthy source.
