Choosing a Hardware Wallet
Last reviewed 2026-09-06
Your hardware wallet holds your private keys and signs transactions. Every other security decision builds on this one. Choose carefully — you are trusting this device with your money.
What should a Bitcoin hardware wallet have?
A Bitcoin hardware wallet should have its own screen, air-gapped signing, secure elements, open and reproducible firmware, secure boot, open standards, no remote-validation dependency, and a supported way to add your own entropy during seed generation. These traits reduce malware, supply-chain, vendor, network, and weak-randomness risk while keeping you in control of your keys.
| Requirement | Why it matters | Minimum standard |
|---|---|---|
| Screen | Prevents address-swapping malware from tricking you | Verify address and amount on the device before signing |
| Air gap | Keeps private keys away from internet-connected computers | Sign with QR codes or MicroSD, not a live data cable |
| Secure element | Makes seed extraction harder during physical attacks | Dedicated secure chip plus anti-tamper design |
| Reproducible firmware | Lets users verify what the device actually runs | Public source and builds that can be independently checked |
| Secure boot | Keeps unauthorized firmware off the device | Verify signed firmware before every boot |
| Open standards | Avoids vendor lock-in during recovery | BIP39, PSBT, standard derivation paths |
| No remote dependency | Keeps the wallet usable if a vendor disappears | No required remote validation or PIN server |
| Bring your own entropy | Reduces reliance on device-generated randomness | Mix private physical input with independent device entropy |
Non-Negotiable Traits
A good hardware wallet must have all eight:
- A screen to verify transaction details before you sign. Without one, you're trusting a potentially compromised computer.
- Air-gapped operation — no USB data connection, no Bluetooth, no WiFi. Communication only via MicroSD cards or QR codes. Any live connection is an attack surface.
- A secure element to protect the seed. A tamper-resistant chip designed to withstand physical extraction attacks.
- Open-source and reproducible firmware so anyone can verify the code matches what runs on the device. Closed-source means you're trusting the vendor blindly.
- Real secure boot to prevent unauthorized firmware from running. The device cryptographically verifies its own software on every startup.
- Open standards like BIP39, PSBT, and standard derivation paths. No proprietary formats locking you into one vendor.
- No remote validation or PIN servers. The device works entirely offline. If a company's server goes down, your wallet still functions.
- Bring your own entropy. The supported setup flow should mix private physical input you control with independent device entropy. Do not make up seed words, use an online generator, or replace the device RNG with a short or recorded sequence.
Our Recommendation
COLDCARD meets all eight criteria, is Bitcoin-only, and has been battle-tested since 2018.
COLDCARD Q has a full QWERTY keyboard, large screen, QR code scanner, and dual MicroSD slots. Best choice for most people.
COLDCARD Mk5 uses a numeric keypad and single MicroSD slot. Smaller and more affordable, same security model.
Both are fully air-gapped. Your keys never touch a computer.
What About Other Wallets?
Other hardware wallets exist. Some are good, some have serious compromises. Use the eight-point list above as your checklist. If a device fails any point, think hard about whether the trade-off is worth it.
Common compromises to watch for:
- USB-only operation — plugging into your computer means no air gap
- Bluetooth connectivity — wireless is an attack surface
- Closed-source firmware — you can't verify what the device actually runs
- Reliance on vendor servers — company disappears, wallet stops working
- No user-supplied entropy — the owner cannot add an independent seed input
- Altcoin support — multi-coin wallets have a far larger attack surface than Bitcoin-only devices
See coldcard.com/compare for detailed side-by-side comparisons.
The device is only one part of a savings setup. Before a wallet holds more than spending money, separate it from your spending seed and complete the COLDCARD savings security checklist.