Choosing and using a hardware wallet.

The core principle is separation: the private key is generated and stored in an isolated chip that is not directly connected to the internet. When you send a transaction, companion software on a computer or phone passes the details to the device, which signs the transaction internally and returns only the signed, encrypted result. The key itself is never exposed to malware on your computer.

What a hardware wallet does not solve is human error. If you enter the wrong address yourself, approve a fraudulent transaction without checking its details, or share your seed phrase with someone posing as support, the device offers no protection. Treat a hardware wallet as one layer within a broader set of precautions, not a guarantee on its own.

Always buy a hardware wallet directly from the manufacturer or an authorised, official reseller. Second-hand devices or marketplace offers carry the risk that the device has already been tampered with, for example preloaded with a seed phrase known to the seller. On arrival, check that the packaging shows no signs of tampering and that any security seals are intact.

Also consider support for the coins you actually use, open-source firmware (so the code can be publicly audited), regular firmware updates, and how the manufacturer has handled previously reported vulnerabilities. A device that has not received updates in years is a less logical choice than an actively maintained model.

During setup, the device itself generates a new seed phrase, typically 12 or 24 words. It is important that these words only ever appear on the device's own screen and are never typed into a computer, phone or cloud note. Write them down by hand on the included card or a similar physical medium.

Next, set a PIN for the device itself; this protects against unauthorised physical use but does not replace the seed phrase as a backup. Some devices offer an optional passphrase (an extra 'twenty-fifth word') that creates a hidden wallet; this is an advanced feature that adds protection but also increases the risk of losing access yourself if you forget the passphrase.

After installation, test the recovery procedure with a small amount: send a small quantity of crypto to the device, restore the wallet using the written-down seed phrase on a second (freshly configured) device or in simulation mode, and confirm the balance matches. This confirms the backup works before you move larger amounts.

A common attack technique involves malware that replaces the receiving address on your computer with an attacker's address while the rest of the screen looks normal. The defence against this lies in the hardware wallet's own small screen: check the full address and amount on that screen for every transaction, not just on your computer or phone.

Take the time to compare the address letter by letter, or at least the first and last characters, against the source you obtained it from. If in doubt, it is better to cancel the transaction and re-verify the source than to force an approval.

For larger amounts, some users consider a multisig setup, where multiple hardware wallets are required to approve a transaction. This prevents the loss or compromise of a single device from granting access to all funds, but requires more technical knowledge and careful backup planning.

A simpler alternative is a second hardware wallet kept as a backup, with its own separately stored seed phrase copy at a different physical location. This protects against loss from fire, theft or a defective device without the complexity of multisig.