Hardware wallet

A hardware wallet is a physical device that stores your keys offline and signs transactions without exposing them. It looks like a small USB stick or a key fob. Ledger and Trezor are the best-known brands, and a device runs roughly 50 to 150 pounds.

The trick is where the signing happens. Your private key is generated on the device and never leaves it. When you want to send coins, the transaction is passed in, signed inside the chip, and only the finished signature comes back out. Even if the computer you plug into is riddled with malware, the key stays sealed.

That is the line it draws against a hot wallet. A phone or browser wallet keeps the key on an internet-connected device, exposed to phishing and malware. A hardware wallet keeps it air-gapped, so this is a practical form of cold storage you can still use without much fuss.

Setup gives you a seed phrase, usually 12 or 24 words. Write it down and store it offline. If the device is lost, stolen or broken, those words restore your keys onto a new one. Lose the device and the phrase together, though, and the coins are stranded on the chain forever.

A few habits matter. Buy direct from the maker, never second-hand or from a marketplace listing, since a tampered device can hide a known key. Set a PIN. Confirm the receiving address on the device screen, not just the computer, because malware can swap an address shown in a browser. Most devices wipe themselves after several wrong PIN attempts.

For larger balances you rarely touch, this is the standard choice. The upfront cost buys you keys that no website can reach.