A hardware wallet derives keys and signs transaction digests inside a constrained device. It does not make Bitcoin trustless by itself: the host proposes a transaction, the device must display what it can verify, and backups still determine recovery.
A dedicated signer that keeps private keys away from the general-purpose host computer. [Trezor Learn — What is a hardware wallet?] [BIP 174 — Partially Signed Bitcoin Transactions] [Bitcoin Core — External signer] [Bitcoin Core — HWI project]
A hardware wallet derives keys and signs transaction digests inside a constrained device. It does not make Bitcoin trustless by itself: the host proposes a transaction, the device must display what it can verify, and backups still determine recovery. [Trezor Learn — What is a hardware wallet?] [BIP 174 — Partially Signed Bitcoin Transactions] [Bitcoin Core — External signer] [Bitcoin Core — HWI project]
Verify destination, amount and fee on the device screen; host software can lie, substitute an address or hide change. [Trezor Learn — What is a hardware wallet?] [BIP 174 — Partially Signed Bitcoin Transactions] [Bitcoin Core — External signer] [Bitcoin Core — HWI project]
Firmware, supply chain, secure-element design, screen integrity and backup handling remain trust surfaces; physical possession alone is not a complete defense. [Trezor Learn — What is a hardware wallet?] [BIP 174 — Partially Signed Bitcoin Transactions] [Bitcoin Core — External signer] [Bitcoin Core — HWI project]
Buy from a verifiable source, initialize it yourself, test recovery, protect the seed or share set, use a passphrase deliberately and keep firmware decisions documented. [Trezor Learn — What is a hardware wallet?] [BIP 174 — Partially Signed Bitcoin Transactions] [Bitcoin Core — External signer] [Bitcoin Core — HWI project]
For the clearest picture, read this entry together with Cold Storage, Trezor, Seed Phrase, PSBT. The reverse links also lead from BIP 39, HD Wallet, Cold Storage, Watch-only Wallet.
01What does a hardware wallet protect against?+
It aims to keep signing secrets isolated from a compromised general-purpose computer and to show critical transaction details on a separate trusted display.
02Can a hardware wallet protect a seed entered into a fake website?+
No. Once the seed is disclosed, an attacker can recreate the keys elsewhere. Legitimate receiving and signing workflows should not require typing recovery words into a website or ordinary computer.