Hardware Wallet
Last updated 17 October 2026Last verified 17 October 2026
What is a hardware wallet?
TradFi equivalentA personal HSM, the device that signs without exposing the key. Unlike a corporate HSM there is no administrator, key ceremony or rotation policy behind it, so the device's provenance and the custody of the seed phrase are the whole of the control.
The definition above locates the protection in keeping keys offline. The mechanism is narrower than that. Most devices store the key inside a secure element, a chip built to resist physical extraction, and expose only a signing function. The connected computer sends an unsigned transaction, the device displays it, the holder confirms with a physical button, and only the signature leaves the device.
That confirmation step is where the protection is won or lost. If the screen shows the decoded destination and amount, the holder can catch a substituted payload. If it shows only a hash, as with blind signing on complex contract calls, the device signs whatever the compromised computer sends, which is the failure the multisig entry describes.
The HSM comparison holds on isolation and breaks on governance. A corporate HSM sits inside key ceremonies, access logs and rotation policy. A hardware wallet has none of that, and its firmware comes from a single vendor whose updates the holder installs on trust. The device is also replaceable while the seed phrase is not, so losing the device matters far less than exposing the backup.
The decisions that determine security therefore sit around the device rather than in it: where it was bought, whether its screen decodes the transactions actually signed, and where the seed phrase is stored.