Dossier: storing crypto with hardware and software wallets.

A wallet does not store coins. The coins live on the blockchain; the wallet stores the private key that signs transactions. Whoever holds the key can move the balance, regardless of the brand or app involved. That is why every piece of security advice ultimately concerns key management rather than the coins themselves.

Almost every modern wallet derives those keys from a single recovery phrase of twelve or twenty-four words. That phrase is not a password you can reset; it is the root of every address you own. Lose both the phrase and the device and the balance is gone for good. Let someone copy the phrase and they have full access without ever touching your device.

The distinction that matters is therefore not hardware versus software, but where the key is generated, where it is stored, and which device uses it at the moment you sign.

A hardware wallet is a small device that generates and keeps the private key internally. Your computer or phone sends a draft transaction to the device, you verify the amount and address on the device's own screen and confirm with a button. The signed transaction goes back out; the key stays in. Even on a compromised computer an attacker cannot force a valid transaction without your physical approval.

Ledger, with its Nano and Stax lines, is the best-known brand and supports a very wide range of networks through its own app. Its firmware is partly closed, and the device uses a secure element chip that resists physical extraction. Trezor takes the opposite approach with fully open source firmware that independent researchers can audit, and recent models add a secure element as well.

NGRAVE positions itself as fully air-gapped: no USB data connection, no wifi and no bluetooth, communicating only through QR codes, with the initial key partly derived from sensor data and your own finger movements. Coldcard targets experienced bitcoin users with SD-card transfer, a duress PIN and extensive multisig support. BitBox02 and Keystone sit in between, emphasising simplicity and large-screen QR signing respectively.

Always buy a hardware wallet directly from the manufacturer or an official reseller. Marketplace devices can arrive preloaded with an attacker's seed; any wallet that ships with a ready-made recovery phrase on paper is unsafe by definition.

Software wallets such as MetaMask, Rabby, Phantom, Trust Wallet, BlueWallet, Sparrow and Exodus keep keys encrypted on your phone or computer. They are free, instantly usable and indispensable for anyone interacting daily with applications on Ethereum, Solana or layer 2 networks. The trade-off is that the key sits on an internet-connected device where you also read email and install software.

That makes a software wallet excellent as a wallet for everyday amounts and unsuitable as a vault for your entire holdings. A common split is a small amount in a hot wallet for transactions and the bulk behind a hardware wallet that you only touch when you genuinely move funds.

The best of both worlds is a software wallet as the interface and a hardware wallet as the signer. MetaMask, Rabby, Sparrow and Phantom can all drive a Ledger, Trezor or Keystone: you keep the familiar app, but every signature is physically confirmed on the device.

The right setup follows from two questions: how much do you hold, and how bad would it be if something went wrong. For a few hundred euros a well-configured software wallet with screen lock and a carefully stored recovery phrase is defensible. From a few thousand euros upwards, the cost of a hardware wallet is trivial against the risk.

If the amount would change your life, consider multisig: two or three keys in different locations, of which for example two are required to sign. A single stolen or burnt key then no longer means loss. It demands more discipline and a rehearsed recovery procedure, but it removes the single point of failure.

Think about what happens if you are no longer around. Record where keys and backups are kept and how a relative can reach them, without combining that information in one place. A test recovery on an empty device, once a year, is the only way to know your emergency plan actually works.