Hardware Wallet

Physical self-custody of crypto assets

A hardware wallet is a dedicated physical device — usually the size of a USB stick or small remote control — that stores private keys to crypto assets in a specially secured chip and signs transactions offline. All cryptographic operations take place exclusively inside the device; the private keys never leave the chip. That makes hardware wallets the gold-standard solution for long-term self-custody of crypto wealth, and in particular for cold storage.

The leading manufacturers in mid-2026 are Ledger (France, with models Nano S Plus, Nano X, Stax, Flex), Trezor (Czech Republic, models Model One, Model T, Safe 5) and Swiss provider BitBox. Prices range from roughly €80 to €400 depending on feature set and screen size.

Security architecture

The central strength of a hardware wallet is the separation of signing and connectivity: the seed phrase and every private key derived from it sit on a Secure Element (hardened microchip certified to Common Criteria EAL5+ or EAL6+), itself hardened against physical attack. For every transaction the companion app (Ledger Live, Trezor Suite, etc.) sends the transaction draft to the device. The user has to inspect the transaction on the device's physical display and confirm it with an explicit button press.

This architecture protects against theft even on a compromised PC: an attacker controlling the computer can prepare a malicious transaction — but the user would see the wrong destination address on the hardware display and refuse to confirm.

Day-to-day operation

The typical workflow:

1. First-time setup with generation of a 24-word seed phrase on the device itself
2. Secure recording of the seed phrase (see seed phrase) on paper or steel plate
3. Setting a PIN for device protection
4. Installation of the companion app on PC or smartphone
5. Sending crypto assets to the addresses managed by the wallet
6. For every outgoing transaction: verification and confirmation on the device

Modern devices typically support hundreds of blockchains and thousands of tokens in parallel — Ledger Nano X covers more than 5,500 assets, Trezor Safe 5 more than 9,000.

Security incidents and risks

Despite strong architecture, hardware wallets are not invulnerable. Notable incidents include:

• Ledger data leak, July 2020: 270,000 customer records (names, addresses, order history) stolen — no crypto keys, but a wave of mass phishing and even targeted home invasions ("wrench attacks") followed.
• Ledger Recover, May 2023: controversial launch of a cloud-backup service for the seed phrase, criticised by parts of the community as an architectural breach of principle.

Key risk mitigations include buying directly from the manufacturer (never via Amazon Marketplace or eBay), verifying device authenticity during setup, and strictly keeping the seed phrase off every digital storage medium.

Tax and legal aspects

Crypto assets on a hardware wallet remain the economic property of the holder and in Austria are subject to KESt when gains are realised. Self-managed wallets require full self-declaration on tax form E1kv — professional crypto-tax software (Blockpit, CoinTracking, Accointing) is practically indispensable beyond a handful of transactions per year.

For Privatstiftungen and GmbHs looking to custody crypto assets, multi-signature setups with several hardware wallets (typically 2-of-3 or 3-of-5) are the market standard.

What investors often ask

Do I really need a hardware wallet for €500 in Bitcoin? Not strictly necessary in economic terms — for holdings below €1,000, custody on a regulated CEX like Bitpanda is an acceptable compromise. From around €5,000 upwards, self-custody is strongly recommended.