How to Choose a Hardware Wallet: What Actually Matters
Educational content · reviewed for accuracy · not financial advice
A hardware wallet stores your private keys offline, making them far harder to steal. When choosing one, prioritise open-source firmware, a dedicated secure element chip, an on-device screen to verify addresses, and solid coin support. Always buy directly from the official manufacturer — never from a marketplace seller or second-hand — to avoid pre-tampered devices.
On this pagetoggle
Hardware wallets are the single most effective tool a beginner can use to keep their crypto out of reach of hackers. But buying the wrong one — or buying from the wrong place — can be just as dangerous as not buying one at all.
This guide breaks down what a hardware wallet actually does, which features matter most, and how to purchase and set one up without making the mistakes that cost people real money.
What Is a Hardware Wallet and Why Does It Matter?
A hardware wallet is a small physical device — roughly the size of a USB stick or credit card — that stores your private keys completely offline. Your private key is the master credential that proves you own your crypto; whoever controls it controls the funds.
Most beginners store crypto in apps connected to the internet (called hot wallets). Hot wallets are convenient, but permanently exposed to phishing, malware, and exchange hacks. A hardware wallet removes this risk: your keys never leave the device, and every transaction must be physically confirmed on the device itself.
If you are not sure which type of wallet suits you, start with the full breakdown in types of crypto wallets before returning here.
The Criteria That Actually Matter
Not all hardware wallets are equal. Here is what to evaluate before you spend money on one.
Open-Source Firmware
Open-source firmware means anyone in the security community can inspect the code for hidden backdoors or vulnerabilities. Closed-source firmware requires you to trust the manufacturer completely with no way to verify their claims. For a device whose entire job is protecting your money, transparency matters enormously.
What to check: Does the manufacturer publish their firmware code publicly, for example on GitHub? Do independent security researchers audit it?
Secure Element Chip
A secure element (SE) is a tamper-resistant hardware chip designed specifically to store cryptographic secrets. Devices without one store keys in general-purpose memory that is easier to extract with physical attacks.
What to check: Does the device use a dedicated secure element, or a general microcontroller? Manufacturers that use secure elements typically say so clearly in their technical documentation.
On-Device Screen and Physical Confirmation
A screen lets you verify the recipient address and transaction amount on the hardware wallet itself — not on your computer, which could have been compromised by malware that silently swaps addresses. Without a screen, you are trusting a potentially infected machine.
Physical buttons or a touchscreen requiring manual approval before a transaction is signed add a second layer of protection.
What to check: Does the device have a screen large enough to display full addresses? Does every transaction require physical confirmation on the device?
Coin and Network Support
Not every hardware wallet supports every cryptocurrency. Before buying, verify that the device supports everything you currently hold — and ideally some assets you might add later, such as ERC-20 tokens or newer layer-2 networks.
What to check: Check the manufacturer's official compatibility list. Community forks and third-party companion apps sometimes add extra coins, but support quality varies.
Ease of Use
Setup complexity, companion app design, and recovery processes differ significantly between devices. Some are designed for advanced users who prefer maximum control; others target beginners with step-by-step onboarding. If the device is confusing to use, you are more likely to make errors.
What to check: Read beginner reviews and watch setup walkthrough videos. Is the companion app well-maintained? Is customer support responsive?
Price
Hardware wallets range from roughly $50 to $250 USD. Price does not equal security — a mid-range device from a reputable manufacturer with good open-source practices can outperform a premium-priced device with poor transparency. Paying more for unnecessary features is a waste; paying less by buying from an unofficial seller is dangerous (see the scam section below).
Manufacturer Reputation and Track Record
The hardware wallet market has seen security incidents, including data breaches exposing customer details and firmware vulnerabilities. A manufacturer's response to these incidents tells you a great deal about how they prioritise users.
What to check: Search for any major security incidents involving the brand. How quickly did they patch issues? Were they transparent with users? How long have they been in operation?
Recovery Options
Every hardware wallet uses a seed phrase — typically 12 or 24 words — that can restore your funds if the device is lost or damaged. Some manufacturers offer additional recovery tools like encrypted cloud backup or metal backup plates.
What to check: Is the standard BIP39 seed phrase system used, allowing recovery into other compatible wallets? Are there proprietary recovery mechanisms that could create vendor lock-in?
Quick Criteria Comparison Table
| Criterion | Why It Matters | What to Look For |
|---|---|---|
| Open-source firmware | Independent security audits possible | Publicly available code, community audits |
| Secure element chip | Resists physical key extraction | SE chip stated in official specs |
| On-device screen | Verifies addresses without trusting your PC | Full address visible; physical confirm button |
| Coin support | Useless if it doesn't support your assets | Check official compatibility list before buying |
| Ease of use | Complexity leads to user errors | Good companion app, clear setup docs |
| Price | Reflects features, not necessarily security | $50–$250 range; avoid suspiciously cheap |
| Manufacturer reputation | Past incidents reveal priorities | Years in market, incident response history |
| Recovery system | Lose the device, not the funds | Standard BIP39 seed phrase, no lock-in |
Reputable Brands Worth Researching
Several manufacturers have been operating for years and have earned strong reputations in the security community. Each has different design philosophies, price points, and trade-offs.
Ledger (France) — offers devices across multiple price points; uses a certified secure element chip; firmware is partially proprietary though some components are open-source. Had a notable customer data breach in 2020 (hardware was not compromised). Supports a very wide range of coins.
Trezor (Czech Republic) — one of the first hardware wallets on the market; firmware is fully open-source; entry-level models rely on physical tamper-evidence rather than a traditional secure element. Popular with users who prioritise open-source above all else.
Coldcard — aimed at advanced Bitcoin-only users; strong open-source credentials and advanced security features; steeper learning curve.
BitBox02 (Switzerland) — minimal design with strong open-source commitment; Bitcoin-only and multi-edition variants available.
Keystone — air-gapped operation (no USB connection needed); uses QR codes to sign transactions; open-source.
None of these brands is categorically "the best." The right device depends on your coins, technical comfort level, and which security trade-offs you accept. Research each manufacturer thoroughly against the criteria above before deciding.
The Fake Device and Pre-Initialised Seed Scam
This is one of the most common and devastating hardware wallet scams, and beginners are the primary targets.
How it works: A scammer sells a hardware wallet through an online marketplace (Amazon, eBay, local classifieds) or a reseller. The device looks genuine. However, the scammer has either:
- Pre-loaded malicious firmware that captures your keys when you set up the device, or
- Already generated a seed phrase and left "instructions" inside the box telling you to use it, rather than generating a new one yourself.
In both cases, the scammer already knows your private key. They wait until you transfer meaningful funds, then drain your wallet.
How to protect yourself:
- Buy only from the official manufacturer's website. Every major hardware wallet brand sells directly. There is no legitimate reason to buy from a third party.
- Never use a seed phrase that someone else provides. The device must generate a fresh seed phrase on first setup, in front of you, with no prior owner.
- Verify the device has not been opened. Check packaging seals, though note that sophisticated counterfeit packaging exists — buying from the official source eliminates this risk entirely.
- Update firmware immediately after setup using the manufacturer's official companion app before transferring any funds.
For a deeper look at how to stay safe with crypto in general, read how to keep crypto safe.
Setting Up Your Hardware Wallet Safely
Once you have received your device directly from the manufacturer, follow these steps:
Before You Begin
- Do this in a private location with no cameras or observers.
- Use a computer you own and trust — not a public or shared machine.
Step 1: Verify Device Integrity
Check packaging seals and any tamper-evident features described in the manufacturer's documentation. If anything looks opened or damaged, contact the manufacturer before proceeding.
Step 2: Install the Official Companion App
Download the companion software only from the manufacturer's official website. Do not search for it in app stores without verifying the publisher matches exactly.
Step 3: Update Firmware Before Anything Else
Install any available firmware updates before creating a wallet or transferring funds.
Step 4: Generate a New Wallet
Follow the on-device setup to generate a new seed phrase. This happens entirely on the hardware wallet itself — your computer never sees it.
Step 5: Write Down Your Seed Phrase
- Write it on paper, in order, exactly as displayed.
- Do not photograph it. Do not type it into any app.
- Store it in two separate physical locations you control.
- Consider a fireproof metal backup plate for long-term storage.
Step 6: Test Recovery Before Sending Funds
Many manufacturers let you verify your seed phrase before committing funds. Confirming your backup works costs nothing; discovering it doesn't after losing your device costs everything.
Step 7: Send a Small Test Transaction First
Before moving a large amount, send a tiny test transaction to the hardware wallet address, verify it arrives, then send a small amount back out. Confirm the full flow works before trusting it with meaningful funds.
Who Actually Needs a Hardware Wallet?
A hardware wallet is worth the cost and setup effort if:
- You hold more crypto than you could comfortably afford to lose.
- You plan to hold for months or years rather than trading daily.
- You use self-custody and do not want to rely on an exchange holding your assets.
- You have already experienced or witnessed a hot wallet or exchange hack.
If you are holding only a very small amount for short-term experimentation, a reputable software wallet may suffice for now. As your holdings grow, the cost of a hardware wallet becomes negligible compared to the protection it provides.
You can track the value of your holdings in real time on the crypto market dashboard, and check market cap rankings for the assets you plan to hold.
This is educational information, not financial advice.
Frequently asked questions
Can a hardware wallet be hacked remotely?+
No. Because your private keys never leave the device and are never exposed to the internet, remote hackers cannot steal them. The only realistic attack vectors are physical access to the device itself, a compromised supply chain (which is why you must buy from the official manufacturer), or tricking you into approving a malicious transaction on screen — which is why verifying every address on the device's own display matters.
What happens if I lose my hardware wallet?+
Your funds are not lost. Every hardware wallet generates a seed phrase — usually 12 or 24 words — during setup. This seed phrase can restore your wallet on any compatible device. As long as your seed phrase is safe, your funds are recoverable. This is why protecting your written seed phrase is just as important as protecting the hardware device itself.
Is it safe to buy a hardware wallet from Amazon or eBay?+
No, and this is one of the most common ways beginners lose funds. Third-party sellers can ship tampered devices with compromised firmware or pre-generated seed phrases they already know. The only safe source is the official manufacturer's website. Yes, it may cost slightly more or take longer to ship, but eliminating supply-chain risk is worth it.
Do I need a different hardware wallet for different cryptocurrencies?+
Usually not. Most hardware wallets from major manufacturers support hundreds of cryptocurrencies and tokens, including Bitcoin, Ethereum, and a wide range of ERC-20 and other network tokens. Before purchasing, check the manufacturer's official coin support list to confirm your specific assets are covered.
Should I update my hardware wallet's firmware?+
Yes, always — but only through the official companion app downloaded from the manufacturer's website. Firmware updates patch security vulnerabilities. Install updates before sending any funds to a newly set-up device, and apply them promptly when released thereafter. Never install firmware from any source other than the official manufacturer.
Our editorial team covers cryptocurrency market data, on-chain metrics and beginner education. Every guide is fact-checked against live market data from CoinMarketCap and Binance and reviewed for accuracy. Content is educational only and not financial advice. Learn about our data & methodology →
Track the market live
Real-time prices, market cap and trends for the top 100 coins.