Hardware Wallets Explained: Keys Offline, Recovery via Seed Phrase

A hardware wallet is a physical device that keeps your private keys offline and signs transactions without ever exposing them. The keys never leave the device; your funds remain on the blockchain.

What protects what

The PIN protects the device itself; repeated wrong attempts may cause delays, a lockout or a wipe, depending on the model. A usable backup is needed to restore access after a wipe. The recovery phrase restores the wallet on a replacement that supports its backup format, assets and account settings. Being from the same manufacturer does not guarantee compatibility. If the wallet uses an optional passphrase, that exact passphrase is also needed: the phrase alone opens a different wallet.

Recovery situations

• Device lost or broken, phrase intact: restore on a compatible replacement using the phrase and any passphrase used for that wallet.
• Device wiped, phrase intact: restore from the phrase and any required passphrase, checking that the device supports the original wallet setup.
• Device gone and phrase gone: a seed problem, not a hardware problem. Recovery then depends on file backups or other material.

Never enter your recovery phrase into a website, even one that looks like the manufacturer. Follow the manufacturer’s recovery instructions for your exact model. For Ledger, enter recovery words only on the device, never in Ledger Live or another computer or phone app.

Always buy hardware wallets directly from the manufacturer or an authorized reseller. If a device arrives pre-configured, or with a seed already written down for you, do not use that seed: reset the device and generate a new one yourself, or return it.

What to back up

The backup method depends on the model and how the wallet was set up. Many hardware wallets use a recovery phrase; a BitBox02 can also restore from its microSD backup. Keep the backup supported by your device and verify it using the manufacturer’s instructions. If you use an optional passphrase, preserve it separately: neither the recovery phrase nor a BitBox02 microSD backup includes it.

The failure modes

• Forgotten PIN: attempt limits, delays, lockouts and wipe behaviour depend on the model and firmware. Verify the backup and the manufacturer’s current instructions before trying another PIN or resetting the device.
• Broken screen or connection: the device may be readable or repairable, but the phrase is the reliable route.
• Wiped or reset device: recoverable only if the phrase or backup exists.
• Missing passphrase: the recovery phrase alone opens a different wallet, which may be empty. The original passphrase is needed to access the wallet that used it.

Start with the backup and any access that remains. Depending on the model and the problem, a usable device or repair may also provide a route. The hardware wallet recovery guide explains what to check before resetting or replacing a device.