If you own cryptocurrency and it sits on an exchange, someone else holds it for you. That is fine for a small amount you plan to trade. It is not fine for savings. This guide explains what a hardware wallet actually protects you from, when you genuinely need one, when you do not, and what it costs to get started. We have sold these devices since 2017, and the honest answer is that most people need one later than they think and sooner than they act.

What you are actually protecting

Coins are not stored anywhere you can hold. They are entries on a public blockchain. What you own is a private key, a long secret number that lets you sign transactions moving those coins. Whoever controls the key controls the coins. There is no password reset, no fraud department and no reversal. Every security decision in crypto is really a decision about where that key lives.

The three places a key can live

On an exchange. Coinbase, Kraken or Binance hold the key. You hold a login. Risks: your account is phished or hijacked, the exchange is hacked, the exchange freezes withdrawals, or the exchange fails. The last one is not theoretical; customers of FTX, Celsius and others found out their balances were claims in a bankruptcy, not coins.

In a software wallet. MetaMask, Coinbase Wallet, Phantom and others keep the key on your phone or computer. You hold the key, so exchange risk disappears. But the key is on a device that browses the web, installs apps and receives messages. Malware, a fake wallet update or a malicious website that tricks you into signing can empty it, because the key and the screen you trust are on the same machine.

In a hardware wallet. The key is generated and stored inside a dedicated device, usually in a Secure Element chip, and it never leaves. Transactions are shown on the device's own screen and approved with physical buttons. Your computer can be riddled with malware and the worst it can do is show you a transaction you then refuse to approve.

When you need one

  • The balance would hurt to lose. This is the only rule that matters. For most people the line is somewhere between a few hundred and a few thousand dollars. A device costs $30 to $100.
  • You are holding for years. Long term holdings on an exchange carry every exchange risk for no benefit, since you are not trading.
  • You use DeFi, NFTs or new chains. Signing with a hardware wallet connected to MetaMask or a similar app means a malicious contract cannot drain you without a prompt you physically approve.
  • You want your family to be able to recover it. A hardware wallet's 24 word recovery phrase, written on steel and stored properly, is something an executor can act on. An exchange login with two factor authentication tied to your phone is not.

When you do not

  • You hold a small amount you might sell next month. Keep it on the exchange and do not overthink it.
  • You trade actively every day. Moving coins to and from hardware for each trade is impractical. Keep a trading balance on the exchange and the rest on hardware.
  • You are not prepared to look after 24 words. The hardware wallet moves responsibility to you. If you will lose the words, you will lose the coins. Steel backups and a safe make this manageable, but it is a real commitment.

What it costs and what you get

Entry level devices such as the Trezor Model One cost under $30. The Ledger Nano S Plus and Trezor Safe 3, which add a Secure Element, are under $80. Add a steel backup such as the Billfodl for about $100 and you have a setup that protects six or seven figures as well as it protects four. There are no ongoing fees. The device is replaceable; the 24 words are the asset.

The myths that stop people

"If the company goes bust my coins are gone." No. The 24 words follow an open standard and restore into any brand's device.

"If I lose the device my coins are gone." No. Buy another, restore the words. The old device wipes itself after a few wrong PIN attempts.

"Hardware wallets get hacked too." Attacks on these devices have required physical possession, lab equipment and usually an unset passphrase. The realistic threat is phishing: someone tricking you into typing the 24 words into a website. No device can stop that, which is why the words are never typed anywhere.

"It is too technical." Setup takes 15 minutes and our team talks customers through it by phone. If you can install an app and write 24 words on a card, you can do this.

Where to start

Read our shortlist of the best hardware wallets to pick a device, then our guide to seed phrase backups for the words. Everything we sell ships factory sealed from Florida with free US shipping, and we have been an authorized reseller for every brand since 2017. If you would rather talk it through first, call 386 222 2954.