Bitcoin hardware wallets: keep your own keys, offline
If you plan to hold bitcoin for years, a hardware wallet that you set up and back up yourself is the safest option most people have. This guide explains why, how one works, how to set it up step by step, and which mistakes and scams to watch for. Educational only, not financial advice.
One rule first: Hold My Bitcoin never asks for, stores or handles seed phrases, private keys or exchange logins. No real support person, from us or from any wallet maker, will ever ask for your recovery words.
Why a hardware wallet
Bitcoin is controlled by private keys. Whoever holds the keys can move the coins. When your bitcoin sits on an exchange, the exchange holds the keys and you hold a promise. That works while the exchange stays secure, solvent and open for withdrawals. People sum this up as “not your keys, not your coins.”
Exchanges do fail or freeze. Most recently, Binance said that on October 29, 2026, an attacker made unauthorized withdrawals from its hot wallets, and it paused withdrawals while it ran security checks (AP). Some well-known failures are on our bitcoin is dead timeline.
A phone wallet already gives you your own keys, but they sit on a device that is online all day and runs many other apps. A hardware wallet keeps the keys on a small device built only for this. The keys are created on the device and never leave it, so malware on your computer or phone can't copy them.
How a hardware wallet works
- The device creates your keys and shows a recovery phrase (usually 12 or 24 words). Those words are the master backup: anyone with them can rebuild the wallet on any compatible device.
- A companion app on your computer or phone shows balances and builds transactions, but it can't spend on its own.
- To send, the app passes the unsigned transaction to the device (by cable, Bluetooth, QR code or memory card). You check the address and amount on the device's own screen and approve with its buttons. Only the signature goes back.
- If the device breaks or is lost, your coins are still on the blockchain. You restore them on a new device from the recovery phrase. A PIN protects the device itself if someone steals it.
Setting one up, step by step
- Buy direct from the maker (or a reseller the maker lists). Avoid marketplaces and second-hand devices.
- Check the packaging and the device. Follow the maker's own checks: seals, a numbered bag, or a genuine-device check in their app. If anything looks opened or odd, stop and contact the maker through their website.
- Install or update the firmware from the maker's official app or site, and let the device verify it.
- Create a new wallet on the device and set a PIN. Never use a recovery phrase that came printed in the box or was given to you by anyone.
- Write the recovery words on paper in order, as the device shows them, and check them twice. A steel backup plate survives fire and water better than paper.
- Never photograph, scan or type the words into a phone, computer, cloud note, password manager or website. The only place they ever go is onto the device itself, during a restore.
- Test with a small amount. Send a little bitcoin in, check the receive address on the device screen, then send a small amount out. Our self-custody guide walks through a test withdrawal from an exchange and choosing a network fee.
- Only then move the rest, and check it arrived.
Backups and the optional passphrase
Keep the recovery words somewhere safe from fire, water and curious visitors, and away from the device. Some people keep a second copy in another location they trust.
Most devices also offer an optional passphrase (sometimes called the 25th word). It creates a separate wallet that the recovery words alone can't open. It protects you if someone finds your words, but if you forget the passphrase, nobody can recover that wallet. Only use one if you will back it up as carefully as the words, stored separately.
Inheritance basics
If something happens to you, your family needs to know the bitcoin exists, where the backup is, and how to use it, without anyone being able to take it early. A few simple steps help: write a short letter explaining which wallet you use and how a restore works; keep it apart from the recovery words; say in your will or with your lawyer where both can be found; and tell someone you trust that the letter exists. Never put the recovery words in a will itself, since wills can become public.
Common mistakes and scams
- Fake support. Scammers reply on social media, in app reviews or by email posing as “support” and ask for your recovery words. Real support never asks for them.
- Seed-phrase phishing. Fake websites, fake apps and fake “security alert” emails or letters ask you to “verify” or “sync” your wallet by typing your words. Typing them anywhere except the device is how coins get stolen.
- Pre-seeded devices. A device that arrives already set up, or with a recovery card already filled in, is a trap. Whoever wrote those words can empty the wallet. Reset it or return it.
- Address swaps. Malware can change an address you copy and paste. Always check the address on the device's screen.
- Skipping the test. Sending everything on the first try leaves no room for a mistake.
- A single backup in one place. One fire or flood, and it's gone.
- Telling people. The fewer people who know how much bitcoin you hold, the safer you are.
More warning signs, and what to do if it happens: bitcoin scams to avoid.
Major hardware wallet brands, side by side
This is a neutral list, not a ranking, and we earn nothing from any of these makers. Each fact comes from the maker's own website, checked on Oct 31, 2026. Wording in quotes is the maker's. Features and prices change, so confirm on the maker's site before you buy.
| Brand (models) | Open-source firmware? | Bitcoin-only edition? | Screen | Connection | List price as shown* |
|---|---|---|---|---|---|
| Trezor Safe 3 / Safe 5 | Yes (“open-source security and design”) | Yes, Bitcoin-only versions of each model | 0.96″ mono OLED (Safe 3); 1.54″ color touchscreen (Safe 5) | USB-C | $50 / $109 maker's page |
| Ledger Nano S Plus / Flex | Not stated on Ledger's comparison page | Not listed | 1.1″ mono OLED (Nano S Plus); 2.8″ E Ink touchscreen (Flex) | USB-C (Nano S Plus); USB-C, Bluetooth, NFC (Flex) | $69 / $249 maker's page |
| Coldcard (Coinkite) Mk5 / Q | Yes (“open source and reproducible”) | Bitcoin-only device | OLED with keypad (Mk5); 3.2″ LCD with keyboard (Q) | USB-C, NFC, MicroSD; Q adds QR camera | $219 / $319 (shown reduced from $269 / $369) maker's page |
| BitBox (BitBox02) BitBox02 / BitBox02 Nova | Yes (“fully open-source”) | Yes, Bitcoin-only edition | 128×64 OLED (BitBox02); glass OLED (Nova) | USB-C; Nova adds Bluetooth for iPhone/iPad | $167 / $196 maker's page |
| Foundation Passport Prime | Yes (“open source hardware + software”) | Not stated; the product page lists Bitcoin as its coin support | 3.5″ IPS touchscreen | USB-C, Bluetooth, NFC, QR camera | $349 maker's page |
| Keystone Keystone 3 Pro | Yes (“100% open source”) | Yes, Bitcoin-only firmware | 4″ full-color touchscreen | Air-gapped: QR codes and microSD | $149 (pre-order, 1-year coverage option) maker's page |
*US dollar list prices as shown on each maker's site on Oct 31, 2026, before tax and shipping. “Not stated” and “Not listed” mean we didn't find it on the maker's page linked in that row, not that the feature is missing.
Frequently asked questions
Is a hardware wallet the safest way to store bitcoin?
For most people holding for the long term, yes: the keys are created and kept offline on a device you control, and you approve every payment on its own screen. It is only as safe as your recovery phrase backup, so the backup matters as much as the device.
What happens if I lose my hardware wallet?
Your bitcoin is not on the device; it is on the blockchain. Buy a new device (any compatible brand works) and restore the wallet from your recovery words. The PIN protects the lost device from whoever finds it.
Do I need a passphrase?
No, it is optional. It adds protection if someone finds your recovery words, but if you lose the passphrase, that wallet cannot be recovered. Use one only if you will back it up separately and carefully.
Can I buy a hardware wallet second-hand?
It is safer not to. Buy new, directly from the maker or a reseller the maker lists, and create a fresh wallet on the device yourself.
Will Hold My Bitcoin ever ask for my recovery phrase?
No. Hold My Bitcoin never asks for, stores or handles seed phrases, private keys or exchange logins. Anyone who asks for your recovery phrase is trying to take your coins.
New to self-custody? Start with how to move bitcoin off an exchange, or track your stack with the sats tracker.
Educational only, not financial advice. Brand facts and prices are as shown on each maker's site on Oct 31, 2026 and can change. We have no affiliate links.