Loading...
Security Centre
A hardware wallet is a specialised device designed to keep private keys isolated from ordinary internet-connected devices. The device itself is not the Bitcoin, and recovery depends on the backup. It can reduce some risks, but is neither completely secure nor mandatory for everyone.
It generates and stores private keys, signs transactions, keeps signing material separate from ordinary computer memory, and displays transaction details on the device. It depends on trusted firmware, safe setup, a secure backup, and your own verification. It does not store coins physically.
A device cannot prevent seed phrase exposure, phishing, fake receiving addresses, malicious approvals, coercion, poor backups, loss without recovery material, fake devices, supply-chain tampering, user mistakes, or transfers to the wrong address or network. It reduces some risks but does not remove personal responsibility.
| Method | Key control | Convenience | Internet exposure | Backup | May suit | Main risks |
|---|---|---|---|---|---|---|
| Exchange custody | Exchange | High | Low direct control | Platform-managed | Buying and converting | Counterparty and account risks |
| Mobile software wallet | User | High | Higher everyday-device exposure | Offline backup needed | Everyday spending | Phishing, device, and backup risks |
| Desktop wallet | User | Moderate | Computer exposure | Offline backup needed | Home computer use | Malware, device, and backup risks |
| Hardware wallet | User | Moderate | Signing separated from ordinary computer memory | Offline backup needed | Deliberate self-custody | Seed exposure, fake devices, and user mistakes |
| Collaborative custody | Shared arrangement | Varies | Varies | Shared process | People seeking oversight | Trust, role, and recovery complexity |
| Multi-signature setup | Multiple key holders | Lower convenience | Varies | More complex | Clear, tested operational needs | Setup and recovery complexity |
It may suit long-term holders, people managing amounts they would not want exposed to an everyday phone or computer, users who understand seed phrase responsibility, people prepared to verify details on-device, and those able to maintain secure backups.
Learn more first if seed phrases are unfamiliar, setup is under pressure, unknown remote support is involved, device sources cannot be verified, a safe backup plan is unavailable, or both device and backup may be lost together.
Do not move an entire balance during a first setup.
Verify the receiving address, destination address, amount, fee, asset, network, and transaction summary on the hardware wallet screen. A computer or phone screen can be altered by malware, so device confirmation is an important deliberate step.
The recovery phrase restores the wallet and the PIN protects device access. An optional passphrase can create a separate wallet, but losing or mistyping it may permanently prevent access. It adds complexity and should not be adopted without understanding recovery consequences.
Use official update tools and independently verify notices. Confirm the recovery backup exists before updating, do not follow unsolicited links, keep the device charged and connected as instructed, and review official release guidance. Updates can occasionally create operational issues, but skipping all updates indefinitely can create other risks.
For more detail, see the Seed Phrase Guide.
Begin with a small amount and verify receiving and sending. Test recovery only with a low-value or empty wallet; never experiment with significant holdings. Understand the exact device and software process before relying on it. Professional guidance may be useful only when it never requires disclosure of secrets.
This browser-only educational check asks for no seed phrases, PINs, passphrases, addresses, balances, names, or device serial numbers. Answers are not stored, transmitted, or used for analytics.
Learn about seed phrases, recovery, and transaction verification before buying or setting up a device.
Watch for pre-generated seed phrase cards, fake support, fake firmware updates, counterfeit or altered devices, phishing websites, malicious wallet software, recovery-verification scams, fake giveaways, unsolicited replacement-device offers, and remote setup assistance. Read the Bitcoin Scam Guide for common warning signs.
Bitcoin may still be recoverable with a valid recovery phrase. Obtain a trusted compatible wallet or replacement device, verify its source, and recover privately. If theft is suspected and the PIN may be compromised, consider moving funds to a newly generated wallet. Never give the phrase to support; recovery cannot be promised.
Treat the wallet as compromised. Create a new wallet with a new recovery phrase, verify new addresses carefully, move remaining funds promptly and cautiously, stop using the exposed phrase, secure the affected devices or accounts, and preserve evidence if fraud is suspected.
It is a specialised device designed to keep private keys isolated from ordinary internet-connected devices while it signs transactions.
No. Bitcoin exists on the network. The device helps control the keys used to authorise transactions, while the recovery phrase is needed to restore access.
It can reduce some exposure by separating signing keys from an everyday device, but it does not protect against every risk, including exposed recovery phrases, phishing, or poor backups.
Not necessarily. The right custody approach depends on your needs, experience, and the security process you can maintain.
With a valid recovery phrase, access may be restored using a trusted compatible wallet or replacement device. Recovery cannot be guaranteed if the backup is missing or compromised.
A self-custody manufacturer should not have your recovery phrase. Never share it with support or enter it into a website or chat.
Used or unverified devices can add provenance and tampering risks. Prefer a verified source and initialise a device as new.
An optional passphrase can create a separate wallet, but it adds complexity. Losing or mistyping it may permanently prevent access.
Use official update tools and independently verified guidance. Confirm the recovery backup exists first and do not update from unsolicited links.
Bitcoin Access should never receive wallet secrets or remotely control your device. Guidance can focus on safe process and verification only.
No. Do not show a seed phrase, PIN, passphrase, or private key to anyone.
Explore the next ideas connected to this topic.
Return to guides on scams, custody, backups, exchanges, and safer habits.
Visit Security CentreNever reveal seed phrases, PINs, passphrases, private keys, or authentication codes. Consultations cannot guarantee security or recover inaccessible funds; guidance focuses on process, verification, backups, and risk awareness.
Book a consultation