A Hardware Wallet holds private keys and uses them to create a digital signature: verifiable authorization for a payment. Your computer or phone prepares the transaction, and the device signs it after your checks. The keys should remain inside the device throughout. If it is lost or breaks, the correct backup can restore access; knowing the PIN alone cannot.
Imagine Eva uses a hardware wallet and one day it stops working. Her bitcoins have not broken with it: their records remain on the network. She needs to recover the keys used to sign payments. That is what the backup is for, often recorded as a Seed Phrase, a list of recovery words. The device and the backup have different jobs. You use one to approve payments and protect the other for recovery. Keep the complete backup offline and separate from the device so that one theft or accident cannot take both. [1] [5]
Your laptop opens websites, attachments and new programs. If it also holds private keys, a compromise can put your ability to spend at risk. A Hardware Wallet moves key handling into a separate device. The computer still displays the wallet and communicates with the network, but it needs the device’s cooperation to sign. You are not sending coins into USB memory. You are separating spending authority from the computer you use for everything else. [1]
Eva enters the recipient’s address and an amount in her app. The app prepares a transaction proposal and passes it to the device. Eva checks the details on its screen and confirms; the device creates a signature and returns the result. The app then broadcasts the transaction to the Bitcoin network. It does not need the private keys to do that. Eva similarly checks a receiving address on the device before using it. Afterward she can receive money with the device switched off: receiving does not require her signature. [3] [1]
A compromised computer can replace an address after you copy it, or show details different from those it sends for signing. Compare the complete recipient address, amount and fee on the device’s trusted screen. A transaction can also contain change, the remainder returned to your own wallet. The device or signing process must verify that this output really belongs to you, rather than accepting the computer’s label. If you do not understand the details or they do not match, do not approve. [2]
Self-custody means you control signing, rather than an exchange or another custodian. You therefore do not need their permission to pay. Responsibility for backups and correct approvals also moves to you. A manufacturer generally cannot supply forgotten recovery information. Security is more than buying a good device: you need a process you understand and can still follow after a long break. [1]
A Hardware Wallet can reduce the opportunity for malicious software on your computer to steal keys. It cannot know your real intention when you approve a wrong payment yourself. Nor can it protect a backup you reveal to a scammer. Protection depends on the device, its internal software called firmware, and whether you actually check the details. A cable, wireless connection or QR code is only a way to transfer data; none proves security by itself. [1] [4]
Start with what could happen in your situation. A backup beside the device can disappear in the same fire; an elaborate hiding place may never be found by heirs. Phishing is a deception that tricks you into giving away secrets, perhaps through a fake support message. Malware is harmful software on a device. Alongside these threats, consider burglary, coercion, breakdowns and your own forgetfulness. Add protection without losing the ability to recover the wallet. [1]
You also rely on who made the device, how it reached you and which firmware it runs. The route from manufacture to delivery is called the supply chain. Some models use a secure element, a specialized chip designed to make physical attacks harder. Its presence does not guarantee the security of the whole product, and different devices use it differently. Reliable transaction displays, update support and understandable recovery are just as important. [4] [6]
Buy from a verifiable source and set up the device yourself using the official instructions for that model. Check the packaging and available authenticity checks; an intact box is not a guarantee. Do not use recovery words filled in by the seller. Record the backup, set a PIN and test recovery using the manufacturer’s safe procedure before depositing a larger amount. Start by receiving a small amount and making a test payment. Before an update, check that your backup is usable. A backup split into shares requires the specified number of shares; it is not an arbitrary division of a word list. [1] [5]
The PIN unlocks a particular device. A complete backup can recreate keys on another compatible device, so the original device’s PIN does not protect it. An optional passphrase is an additional secret used together with the backup to derive the wallet. If you use one, recovery needs its exact wording too; a different passphrase produces a different wallet. Do not send recovery words to support or enter them on a website for “verification” or “synchronization.” Ordinary payments do not need them. If a backup leaks, changing the PIN alone does not solve the problem. Recovery must also match the original backup format and wallet settings. [1] [5]
For the clearest picture, read this entry together with Cold Storage, Trezor, Seed Phrase, PSBT. The reverse links also lead from BIP 39, HD Wallet, Cold Storage, Watch-only Wallet.