From Decrypt · By Decrypt Agent
In brief
Hardware wallets are physical devices that keep crypto private keys offline, signing transactions internally so the keys never touch an internet-connected device.
They are not hack-proof: a Coldcard firmware bug and tampered Ledger devices sold through a reseller both led to major losses in 2026.
Wallet manufacturers are looking to future-proof their devices for a future of agentic finance and quantum computing.
There's an old saying in crypto: "not your keys, not your coins." When you leave Bitcoin, Ethereum or any other cryptocurrency on an exchange, the exchange holds the private keys that control those funds. If it gets hacked, goes bust or freezes withdrawals, you may have no way to get them back.
The obvious fix is to hold your own keys, which is called self-custody. That brings its own problem, though. A private key stored in a software wallet on an internet-connected phone or laptop can be stolen by malware, phishing sites and remote attackers.
Hardware wallets were built to solve this. They're small physical devices that keep your private keys offline, so you can sign crypto transactions without your keys ever touching a device connected to the internet. In this guide we'll explain what hardware wallets are, how they work, who makes them, and where the technology is heading after an eventful 2026.
What is a hardware wallet?
A hardware wallet is a dedicated physical device, usually about the size of a USB stick or credit card, that generates and stores the private keys for your crypto. It's a form of "cold storage," because the keys stay offline. A "hot wallet" like a browser extension or mobile app is the opposite.
One common misconception is that your coins live on the device. They don't. Your crypto always lives on the blockchain. The hardware wallet holds the keys that prove you own it and let you move it.
The category dates back more than a decade. Trezor, made by Czech firm SatoshiLabs, calls itself the inventor of the hardware wallet in 2013. France-based Ledger was founded in 2014 and has since reported sales of more than eight million devices.
Did you know?
When you set up a hardware wallet, it gives you a "seed phrase" of 12 to 24 words. Anyone who has those words can recreate your wallet and take your funds, so never photograph them, type them into a website, or save them to cloud storage.
How does a hardware wallet work?
When you first switch on a hardware wallet, it uses a random number generator to create your private keys. A seed phrase backs them up, and a PIN code protects the device.
When you want to send crypto, you build the transaction in companion software on your computer or phone, such as Ledger Wallet (formerly Ledger Live), Trezor Suite or Sparrow. The software sends the unsigned transaction to the hardware wallet. You check the details on the device's own screen and confirm with a physical button or touchscreen. The device then signs the transaction inside its own hardware and sends back only the signature. The private key never leaves the device.