How to Choose a Bitcoin Hardware Wallet

A hardware wallet is a dedicated physical device whose sole purpose is to store private keys and sign Bitcoin transactions. The keys are generated on the device and never leave it. When you want to send bitcoin, the transaction is constructed on your computer or phone, sent to the hardware wallet for signing, and the signed result is sent back — without the key ever being exposed to the internet-connected device.

For self-custody of any meaningful amount, this is the right tool. This article explains what to look for.

What Matters in a Hardware Wallet

1. Open-source firmware

The firmware running on the device is what generates keys, signs transactions, and enforces security. If the firmware is proprietary and closed-source, you are trusting the manufacturer's word that it does what they claim. This is antithetical to the Bitcoin principle of "don't trust, verify." Choose devices whose firmware is fully open-source and independently audited.

2. Air-gapped operation (optional but preferable)

Most hardware wallets connect to a computer via USB. Some support air-gapped operation — no wired or wireless connection to any other device. Transactions are transferred by QR code or SD card. This eliminates an entire category of attack: supply-chain firmware implants, malicious USB drivers, and remote exploitation via the connection.

3. Supply-chain integrity

Buy directly from the manufacturer. Never buy from eBay, Amazon third-party sellers, or any reseller who could have tampered with the device before shipping. Reputable hardware wallet manufacturers ship with tamper-evident packaging.

4. Recovery via open standards (BIP-39)

The device should generate a standard BIP-39 seed phrase that can be restored on any compatible wallet. Avoid devices that use proprietary seed formats — they lock you into their ecosystem. If the company fails, you lose access.

Recommended Devices

Coldcard Mk4 / Q

Coldcard is the most security-focused option. It supports fully air-gapped operation via SD card or QR code. The firmware is open-source. It has no Bluetooth or WiFi — no possibility of wireless attack. The interface is text-based and utilitarian. Price: approximately €150–€250.

Best for: users who prioritise security over convenience, and holders of significant amounts.

Trezor Model T / Safe 3

Trezor was one of the first hardware wallets. The firmware is fully open-source. The Model T has a touchscreen; the Safe 3 has buttons and a smaller display. Easy to use for beginners. Connects via USB. Price: approximately €70–€180.

Best for: beginners, first-time self-custody users.

Blockstream Jade

Affordable, open-source, supports air-gapped operation via camera (QR codes) or USB. Smaller user base than Coldcard or Trezor, but growing. Price: approximately €65.

Best for: users who want air-gapped capability at the lowest price.

What to Avoid

• Ledger devices — the firmware is not fully open-source, and the company has introduced features (seed phrase recovery via cloud) that are inconsistent with the principle of self-custody. Many long-time users have migrated away.
• "Cold storage" services that hold your keys for you — this is not self-custody, regardless of marketing claims.
• Brain wallets, paper wallets generated on random websites, any setup where you cannot verify exactly how the keys were generated.

Setting Up the Device

Once you have chosen a device, setup is straightforward:

• Unbox and check tamper evidence
• Follow the device's initialisation wizard — it will generate a new seed phrase
• Write down the seed phrase on paper, double-checking each word — see our detailed guide on
• Set a strong PIN to protect against physical access
• Install the companion software (Sparrow Wallet, Trezor Suite, or the manufacturer's app)
• Send a small test amount first to confirm everything works before depositing larger sums

For a complete walkthrough from unboxing to first transaction, see our pillar guide: What Is Bitcoin Self-Custody?

Is It Worth It?

A hardware wallet is a one-time cost of €70–€250 that protects funds potentially worth many times that amount. Compared to the cost of losing bitcoin through an exchange collapse — which, historically, has happened to a substantial fraction of all bitcoin users — the investment is trivial.

If you are holding bitcoin as part of a Bitcoin standard, a hardware wallet is not optional equipment. It is the primary tool.