Hardware devices and offline signing

A hardware device is a small, single-purpose computer built to do one job: hold private keys and sign messages. The key is generated inside the device and is designed never to leave it. When a wallet app on a laptop or phone wants to send a transaction, it prepares the details and hands them to the device. The device shows the recipient and amount on its own screen, waits for a physical button press, signs inside its protected chip and returns only the signature. The connected computer sees the result but never the key. That separation is why ethereum.org describes this kind of device as a stronger option than keeping keys in a browser extension.

The design has limits that deserve attention. The screen on the device is the part to trust, so the address and amount should be compared there, not only in the app. A device that arrives with a pre-filled word list, or one that has been opened, should be returned to the maker. The unit can still be lost, dropped in water or simply worn out, so its recovery phrase needs the same offline backup as any other wallet. Firmware updates should come only from the maker's own site. Finally, approving a harmful request is still possible, because the device signs whatever the owner confirms. Reading each prompt slowly is part of the protection.