A hardware wallet is a small device that keeps your private keys offline. It's the standard recommendation for anyone holding more crypto than they can afford to lose to a hacked computer or phone.
What "cold storage" means
Software wallets (apps on your phone or browser) keep keys on a device that's connected to the internet — convenient, but exposed. Cold storage means keys never touch a connected device. Hardware wallets sit in the middle: they sign transactions on the device itself and only send the signed result to your computer.
Why the device matters
Because the key never leaves the hardware wallet, malware on your computer can't read it. Even if your computer is infected, the attacker can't move funds without physically confirming on the device. That's the core advantage — and why large amounts belong in cold storage.
When you actually need one
- You hold more than a few weeks of expenses in crypto
- You're not planning to trade the funds soon
- You want a wallet that survives a stolen or broken phone
The tradeoffs
Hardware wallets cost money (roughly $50–150), add a step to every transaction, and you can lose access if you lose both the device and its backup. The backup — your seed phrase — remains the thing that really protects you, exactly as with any wallet.
Whatever you choose, the habits in our wallet security guide apply the same way. A hardware wallet removes one attack surface — it doesn't remove phishing or poor backups.