How to Choose a Bitcoin Hardware Wallet

A hardware wallet is a dedicated physical device whose sole purpose is to store private keys and sign Bitcoin transactions. The keys are generated on the device and never leave it. When you want to send bitcoin, the transaction is constructed on your computer or phone, sent to the hardware wallet for signing, and the signed result is sent back — without the key ever being exposed to the internet-connected device.

For self-custody of any meaningful amount, this is the right tool. This article explains what to look for.

What Matters in a Hardware Wallet

1. Open-source firmware

The firmware running on the device is what generates keys, signs transactions, and enforces security. If the firmware is proprietary and closed-source, you are trusting the manufacturer's word that it does what they claim. This is antithetical to the Bitcoin principle of "don't trust, verify." Choose devices whose firmware is fully open-source and independently audited.

2. Air-gapped operation (optional but preferable)

Most hardware wallets connect to a computer via USB. Some support air-gapped operation — no wired or wireless connection to any other device. Transactions are transferred by QR code or SD card. This eliminates an entire category of attack: supply-chain firmware implants, malicious USB drivers, and remote exploitation via the connection.

3. Supply-chain integrity

Buy directly from the manufacturer. Never buy from eBay, Amazon third-party sellers, or any reseller who could have tampered with the device before shipping. Reputable hardware wallet manufacturers ship with tamper-evident packaging.

4. Recovery via open standards (BIP-39)

The device should generate a standard BIP-39 seed phrase that can be restored on any compatible wallet. Avoid devices that use proprietary seed formats — they lock you into their ecosystem. If the company fails, you lose access.

Why We Do Not Name Devices

You will notice that this guide describes properties rather than products. That is deliberate, and it is a change from how most of this industry — including most of the people you follow — has talked about hardware wallets for a decade.

Confident recommendations of specific devices have not aged well. A device can be open-source, well reviewed, widely recommended and still carry a defect nobody has found yet, because the defect is in code that no one had reason to re-read. Anyone telling you today which device is definitely safe is telling you something they cannot know. We are not going to do that, and you should be wary of anyone who does.

So judge devices by the criteria above, buy from the manufacturer, and — this is the part that actually protects you — arrange things so that no single device being wrong can cost you your savings.

For Savings, Do Not Choose One

Everything above describes how to judge a single device, and for money you expect to spend a single good device is a reasonable answer. For savings it is not. One device is one point of failure: one firmware defect, one tampered shipment, one fire, one theft.

The arrangement we recommend for cold storage is a multi-signature wallet: keys generated on devices from different vendors, each running open-source firmware, each seeded with entropy you generate and verify yourself, and each stored in a geographically separate place. Two of the three keys are needed to move anything. A defect in any one vendor, or the loss of any one location, then costs you nothing — which is the entire point, and the reason it does not matter that we cannot tell you which vendor will have a bad year.

The Honest Caveats

Multi-signature is harder than a single device, and the difficulty is itself a risk. We would rather say so plainly than sell it as a simple upgrade.

• You need the wallet descriptor — the record of which public keys form the wallet — to recover. Holding all three seed phrases without it is not enough. Back up the descriptor everywhere you back up a seed.
• Fall below the threshold and the funds are gone. In a 2-of-3, losing two keys ends it, and "three locations" is only a benefit if the locations are genuinely independent.
• Every additional step is a step to get wrong — at setup, at signing, and years later when someone else has to work out what you did.
• It asks more of your heirs. A single seed phrase is a thing anyone can be taught to use. A multi-signature wallet needs documentation you actually write down.

If that sounds like more than you will realistically maintain, that is a legitimate answer, and it is better to know it now than to discover it during a recovery. It should change what you keep in cold storage rather than push you into a setup you cannot operate — and it is a good reason to practise a full recovery with small amounts before you trust it with anything.

What to Avoid

• Devices whose firmware is not fully open-source — if you cannot inspect what generates and holds your keys, you are trusting a claim rather than verifying it.
• Devices offering cloud or third-party backup of your seed phrase, however it is marketed. A seed that can leave the device is a seed that can be taken.
• "Cold storage" services that hold your keys for you — this is not self-custody, regardless of marketing claims.
• Brain wallets, paper wallets generated on random websites, any setup where you cannot verify exactly how the keys were generated.

Setting Up the Device

Once you have chosen a device, setup is straightforward:

• Unbox and check tamper evidence
• Follow the device's initialisation wizard — it will generate a new seed phrase
• Write down the seed phrase on paper, double-checking each word — see our detailed guide on
• Set a strong PIN to protect against physical access
• Install the companion software (Sparrow Wallet, or the manufacturer's own app)
• Send a small test amount first to confirm everything works before depositing larger sums

For a complete walkthrough from unboxing to first transaction, see our pillar guide: What Is Bitcoin Self-Custody?

Is It Worth It?

A hardware wallet is a one-time cost of €70–€250 that protects funds potentially worth many times that amount. Compared to the cost of losing bitcoin through an exchange collapse — which, historically, has happened to a substantial fraction of all bitcoin users — the investment is trivial.

If you are holding bitcoin as part of a Bitcoin standard, a hardware wallet is not optional equipment. It is the primary tool.