There's an old saying in crypto: "not your keys, not your coins." When you leave Bitcoin , Ethereum or any other cryptocurrency on an exchange , the exchange holds the private keys that control those funds. If it gets hacked, goes bust or freezes withdrawals, you may have no way to get them back.
The obvious fix is to hold your own keys, which is called self-custody . That brings its own problem, though. A private key stored in a software wallet on an internet-connected phone or laptop can be stolen by malware, phishing sites and remote attackers.
Hardware wallets were built to solve this. They're small physical devices that keep your private keys offline, so you can sign crypto transactions without your keys ever touching a device connected to the internet. In this guide we'll explain what hardware wallets are, how they work, who makes them, and where the technology is heading after an eventful 2026.
A hardware wallet is a dedicated physical device, usually about the size of a USB stick or credit card, that generates and stores the private keys for your crypto. It's a form of "cold storage," because the keys stay offline. A "hot wallet" like a browser extension or mobile app is the opposite.
One common misconception is that your coins live on the device. They don't. Your crypto always lives on the blockchain. The hardware wallet holds the keys that prove you own it and let you move it.
The category dates back more than a decade. Trezor, made by Czech firm SatoshiLabs, calls itself the inventor of the hardware wallet in 2013. France-based Ledger was founded in 2014 and has since reported sales of more than eight million devices .
When you set up a hardware wallet, it gives you a "seed phrase" of 12 to 24 words. Anyone who has those words can recreate your wallet and take your funds, so never photograph them, type them into a website, or save them to cloud storage.
When you first switch on a hardware wallet, it uses a random number generator to create your private keys. A seed phrase backs them up, and a PIN code protects the device.
When you want to send crypto, you build the transaction in companion software on your computer or phone, such as Ledger Wallet (formerly Ledger Live), Trezor Suite or Sparrow. The software sends the unsigned transaction to the hardware wallet. You check the details on the device's own screen and confirm with a physical button or touchscreen. The device then signs the transaction inside its own hardware and sends back only the signature. The private key never leaves the device.
Devices connect in different ways, and each comes with security trade-offs:
Many devices also use a secure element, a tamper-resistant chip like the ones in passports and bank cards, to guard keys against physical attacks.
"Clear signing" means a wallet shows transaction details in plain language rather than raw code, so you know what you're approving. That matters because scammers often trick people into signing malicious smart contract approvals.
Their main advantage is isolation. Even if your laptop is full of malware, an attacker can't take your keys out of a well-designed hardware wallet or approve a transaction without you physically confirming it.
Hardware wallets have improved over the years, evolving from miniscule screens and clunky interfaces to modern devices that incorporate Bluetooth, NFC and even touchscreens and cameras.
Hardware wallets are also starting to do more than just crypto storage. Ledger added stablecoin yield through Kiln in April 2025, Tangem followed with Aave later that year, and Trezor launched native stablecoin yield through Morpho vaults in May 2026.
Like any device, hardware wallets can be compromised—something that became painfully apparent in July 2026, when attackers took advantage of a five-year-old Coldcard firmware bug that had weakened the randomness used to create seeds.
According to TRM Labs , the exploit drained about 1,816 BTC, worth around $116 million, from more than 5,200 addresses. Updating the firmware doesn't fix seeds that were already created, so affected users have to move their funds to a new wallet.
Hardware wallets are also vulnerable to physical hacks. In October 2026, Ledger revealed that an unauthorized chip implanted in devices sold by Southeast Asian reseller CryptoBilis was able to read seed phrases as they were entered during setup and transmit them to an attacker. The investigation followed reports that some $86 million had been drained from Ledger wallet users.
Although the firm’s own Secure Element hardware had not been compromised, its reseller network created a centralized point of vulnerability that attackers were able to exploit by tampering with the device to add their own hidden chip.
Ledger subsequently halted distribution via resellers in seven Asian markets , while a European reseller, MediaMarkt, also stopped sales following reports of unauthorized implants. Rival manufacturer Trezor also wound up its reseller program as a “precautionary measure.”
Another point of vulnerability is third-party vendors and shipping partners, with several hacks and exploits exposing customer data including addresses. While no funds were lost in those cases, leaked customer details feed phishing scams and even physical " wrench attacks ," where criminals threaten crypto holders in person.
For most people, phishing and a poorly stored seed phrase are much bigger risks than someone hacking the device itself.
Always buy hardware wallets straight from the manufacturer's official website, and avoid second-hand devices and unofficial marketplace listings. As the CryptoBilis incident demonstrates, even authorized resellers represent a point of vulnerability that attackers can exploit, and it’s likely that manufacturers will rethink their reseller programs in its aftermath.
Hardware wallets are turning into full self-custody platforms, and broadening their scope beyond crypto transactions. Ledger’s latest device, the Android-powered Atom, launched in October 2026 , is designed around messaging, apps and agentic finance. The firm has even stopped billing its devices as “hardware wallets,” preferring instead to refer to them as “signers” to reflect their widening array of use cases.
Hardware makers are also positioning themselves for AI agents. In June 2026, Ledger released Agent Stack , an open-source toolkit that lets AI agents check balances and draft transactions, but not move funds until a human signs off on a Ledger device. The same toolkit extends those hardware-enforced controls to institutional treasury teams through Ledger Enterprise, with policy enforcement anchored in hardware security modules.
Quantum computing is another future focus for manufacturers, since it could eventually break the cryptography that secures crypto wallets today. Trezor's Safe 7 , launched in late 2025, uses a post-quantum signature scheme to verify its bootloader and is built to receive quantum-resistant updates without users having to move their keys to a new device. The concern has sharpened since Ethereum co-founder Vitalik Buterin and Ethereum Foundation researcher Justin Drake warned in October 2026 that AI could break crypto encryption before quantum computers do.
The business has hit some bumps. Ledger had been weighing a U.S. IPO at a valuation of about $4 billion, but put it on hold in May 2026 because of weak market conditions. Meanwhile, the Coldcard and CryptoBilis incidents, and customer data leaks, have been a wake-up call for users, highlighting that a hardware wallet is not the be-all and end-all of crypto security, and should form part of a suite of self-custody tools and practices.
Start every day with the top news stories right now, plus original features, a podcast, videos and more.
