Key takeaways
- A hardware wallet is a small dedicated device that keeps your private keys offline and signs Bitcoin transactions inside the device.
- It protects against malware on your computer or phone, not against losing the recovery phrase, being tricked into revealing it, or a compromised supply chain.
- Buy direct from the maker or an authorised reseller, generate your own seed phrase and never use a device that arrives pre-initialised.
- The device is replaceable; the recovery phrase is not. Back it up offline and test a restore before you move meaningful amounts.
- It is self-custody: no company can reset it for you, and no UK compensation scheme covers a loss.
For information only. Not investment advice. This guide explains how hardware wallets work. Don't invest unless you're prepared to lose all the money you invest.
The short answer
A hardware wallet is a dedicated device that stores your Bitcoin private keys offline and signs transactions internally, so the keys never touch an internet-connected computer. It is one of the stronger ways to self-custody Bitcoin, but it only protects the keys. You still need a safe, tested backup of the recovery phrase, and you must buy and set up the device carefully.
This guide is part of the CoinCorner learn hub. It builds on Seed phrases explained, so read that first if the term is new.
What a hardware wallet is
Bitcoin is spent by signing a transaction with a private key. A software wallet on a phone or laptop keeps that key on a device which also browses the web, opens email and installs apps, so malware on it can in principle steal the key. A hardware wallet moves the key onto a separate, single-purpose device with a small screen and buttons.
The coins themselves are never “on” the device. They exist on the Bitcoin blockchain. What the device holds is the secret that proves you may spend them, which is why it is better described as a signing device than a store of coins.
How signing works
A hardware wallet normally works alongside companion software on your computer or phone, which can see your balance and build a transaction but cannot sign it. The usual sequence is:
- The companion software prepares an unsigned transaction showing the destination address and amount.
- It passes that transaction to the device by USB, Bluetooth, an SD card or a QR code, depending on the model.
- The device displays the details on its own screen. You check the address and amount and confirm with a physical button.
- The device signs inside its protected hardware and returns only the signed transaction.
- The software broadcasts it to the network. See how Bitcoin transactions are confirmed for what happens next.
Passing an unsigned transaction between programs and devices is standardised in BIP-174, “partially signed Bitcoin transactions”, which is why many wallets and devices can work together. The step that matters most is the third: the device's own screen is the one display you can rely on, because malware on the computer could show you a different address from the one it actually sends to.
What it protects against, and what it does not
| Risk | Does a hardware wallet help? |
|---|---|
| Malware or a keylogger on your computer or phone | Yes. The key stays on the device, and you confirm each spend on its screen. |
| A hacked exchange or service account | Yes, for coins you hold yourself, because no provider holds the keys. |
| Someone finding or photographing your recovery phrase | No. The phrase alone restores the wallet on another device. |
| Losing the phrase and the device together | No. The coins are generally unrecoverable. |
| Being talked into entering the phrase on a website or app | No. This is a common scam route. |
| A tampered or counterfeit device | Only if you buy carefully and generate your own phrase. |
| Sending to the wrong address | Only partly. You must still check the address on the device screen. |
In short, a hardware wallet narrows the digital attack surface. It does not remove human error, and Bitcoin transfers cannot normally be reversed. The FCA's guidance on crypto scams treats unsolicited offers of help with your crypto as a warning sign.
What to look for when choosing one
This guide does not recommend a brand, and CoinCorner does not sell or endorse one. Compare devices against questions you can check yourself in the maker's own documentation:
- Bitcoin support. Confirm it supports the address and wallet types you want, with a standard recovery phrase.
- Open or auditable software. Published firmware and a record of security updates make independent review possible.
- Its own screen and buttons. You need to verify the address on the device itself.
- Connection method. Cable, Bluetooth, SD card and QR code each have different convenience and exposure trade-offs. Fewer wireless links mean fewer routes in.
- Passphrase and multi-signature support. Useful if you later want extra protection.
- Standard recovery. If the phrase follows a common standard such as BIP-39, you are less locked into one maker if the company changes or closes.
- Maker support and update history. Devices need firmware updates, so check that the maker still supports the model.
Buying and setting one up safely
- Buy from the maker or an authorised reseller. Second-hand devices and unknown marketplace sellers carry tampering risk.
- Check the packaging. Follow the maker's guidance on tamper evidence and authenticity checks, and stop if anything looks opened.
- Generate your own phrase. Never use a device that arrives with words already written down, or a card telling you what your phrase is.
- Write the phrase down offline. Use paper or metal, in order, and do not photograph it or save it digitally. The guide to backing up your Bitcoin wallet covers storage in detail.
- Set a PIN. This guards against casual misuse of a lost device, but it does not replace the phrase backup.
- Test before trusting. Send a small amount, then reset the device and restore from the phrase to prove the backup works. Only then move larger amounts.
- Keep firmware current, taking updates only from the maker's official software.
Limits and trade-offs
A hardware wallet is self-custody, so the responsibility moves to you. As “Not your keys, not your coins” explains, that removes counterparty risk but adds loss and theft risk. A few specific limits are worth knowing:
- It can fail or be lost. That is survivable only if the recovery phrase is safe.
- Single points of failure. One device and one phrase mean one thing to lose. Multi-signature spreads trust across several keys, which can sit on separate devices.
- Convenience. Everyday spending is slower than from a phone wallet, which is why some people keep savings on a hardware wallet and only small amounts elsewhere for spending.
- Inheritance. Your family needs to know a backup exists and how to reach it, without it being easy for others to find.
Hardware wallet or a custodial Vault?
These solve different problems. With a hardware wallet you hold the keys and carry the risk of losing them. With a custodial service the provider holds the keys and you carry counterparty risk. CoinCorner's Vault is a custodial arrangement using multi-signature; how a multi-sig Vault protects your keys sets out what it covers and what it does not. Some people use both, holding part of their Bitcoin in each. Neither is risk-free.
CoinCorner Ltd is registered with the Isle of Man Financial Services Authority as a designated business for anti-money-laundering oversight only. That is not a licence, and CoinCorner is not regulated by the FCA. Cryptoasset holdings are not covered by the Financial Ombudsman Service or the Financial Services Compensation Scheme. Account questions are answered in the FAQ.
Frequently asked questions
Can a hardware wallet be hacked?
No device is guaranteed immune. Hardware wallets reduce exposure to online malware, but weaknesses can exist in firmware, supply chains or physical access. The practical risks are usually human: leaked phrases, fake devices and phishing. Keep firmware updated and buy from official sources.
What happens if my hardware wallet breaks or is stolen?
If you have your recovery phrase, you can restore the wallet on a new compatible device and your coins are accessible again. If you do not, they are generally lost. A thief who takes the device still needs your PIN, but if the phrase is stolen too, move the coins to a new wallet immediately.
Is a hardware wallet the same as a cold wallet?
Often, but not exactly. Cold means the keys are kept offline. A hardware wallet is a common way to do that, though it connects to a computer or phone to pass transactions for signing. Paper or air-gapped setups can also be cold storage.
Do I need a hardware wallet to hold Bitcoin?
No. You can hold Bitcoin with a custodial service, a software wallet or a hardware wallet. The right choice depends on the amount, your confidence managing keys and how much trust in a provider you accept.
Can I use one hardware wallet for several coins?
Many devices support several cryptoassets, but that depends on the model. This guide covers Bitcoin only. Check the maker's list of supported assets and wallet types before you buy.
Should I buy a hardware wallet second-hand?
It is best not to. A used device could have been tampered with, and you cannot easily prove it has not. A new device from the maker or an authorised reseller, with your own freshly generated phrase, is the safer route.
Sources
This guide was written on 27 October 2026 from the published documents below. The pages were not re-opened while drafting, so check each original for its current wording before relying on a detail.
- Bitcoin Improvement Proposal 174, Partially Signed Bitcoin Transaction Format: https://github.com/bitcoin/bips/blob/master/bip-0174.mediawiki
- Bitcoin Improvement Proposal 39, Mnemonic code for generating deterministic keys: https://github.com/bitcoin/bips/blob/master/bip-0039.mediawiki
- Bitcoin Project, Developer Guide, Wallets: https://developer.bitcoin.org/devguide/wallets.html
- Financial Conduct Authority, Crypto investment scams: https://www.fca.org.uk/consumers/crypto-investment-scams
- Financial Conduct Authority, Crypto: The basics: https://www.fca.org.uk/investsmart/crypto-basics