Transparent, non-custodial, yours

What a hardware wallet actually defends

A hardware wallet keeps the key off an internet-connected machine. It cannot save you from signing a malicious transaction you approved on its screen.

By FBT Swap · 5 October 2026

Open the app See the details

        
        Protects against
        Key extraction by malware on your computer or phone
      
        Does not protect against
        Malicious transactions you confirm on the device
      
        Highest risk setting
        Blind signing an opaque payload

FBT Swap

What you should know

A hardware wallet moves one thing out of reach: the private key never exists on your computer or phone, so malware on those devices cannot read it. That is a large and real improvement.

It is also narrower than most people assume. The device signs whatever you confirm on its own screen, and a drained hardware wallet is almost always a correctly signed malicious transaction.

The threat it removes

Key extraction. Clipboard stealers, infostealers and compromised browser extensions can read a software wallet's encrypted store and attack the password offline. A hardware device never exposes the key material to the host at all.

It also enforces a deliberate physical step. Every signature requires a button press on the device, so nothing can be signed silently in the background.

The threat it does not remove

If you approve an unlimited allowance to a drainer contract, the hardware wallet will sign it, because that is exactly what you asked for. If you send to a poisoned address you copied from your own history, it will sign that too.

The device protects the key. It does not protect the decision, which is why reading the screen it shows you is the entire remaining defence.

Clear signing versus blind signing

A device that can decode the transaction shows you the token, the amount and the destination. A device asked to sign an opaque payload shows a hash and nothing else — that is blind signing, and it is where most hardware-wallet losses originate.

Prefer wallets and chains where the device can display a human-readable summary, and treat a request to blind-sign as a reason to stop and verify independently.

Buying and setting one up

Buy directly from the manufacturer. Supply-chain tampering with a pre-seeded device is a documented attack, and any device arriving with a recovery phrase already printed is fraudulent by definition — you generate the phrase, it does.

Set a PIN, generate the phrase on the device, verify it on the device, and store it as physical media. FBT Swap connects to hardware wallets through your wallet application, so the signing step happens entirely on your device.

At a glance

Protects against

Key extraction by malware on your computer or phone

Does not protect against

Malicious transactions you confirm on the device

Highest risk setting

Blind signing an opaque payload

Buy from

The manufacturer directly — never a marketplace reseller

FAQ

Frequently asked questions

Clear answers before you decide.

Can a hardware wallet be hacked remotely?

The key material is designed never to leave the secure element, so remote extraction is not the realistic threat. The realistic threat is being persuaded to approve something harmful on the device itself.

What happens if I lose the device?

Nothing, provided you have the recovery phrase stored safely. Buy a replacement, restore from the phrase and the same accounts reappear. The device is replaceable; the phrase is not.

Is a hardware wallet worth it for a small balance?

The honest answer is that it depends on the amount against the cost. For small balances a well-maintained software wallet with careful signing habits is reasonable; the device becomes clearly worthwhile as the balance grows.

Risk notice

Crypto assets are volatile and on-chain transactions cannot be reversed. You can lose money, including all of it. Nothing here is financial advice.