Hardware wallets: keeping keys offline

A hardware wallet is a small device that stores your private keys and signs transactions inside the device. The keys never leave it, even when it is connected to an infected computer.

How it works

1. Your computer or phone prepares a transaction.
2. The transaction is sent to the device.
3. The device shows the details on its own screen — address and amount.
4. You confirm with a button on the device, which signs the transaction internally.
5. Only the signed transaction goes back to the computer.

Setting one up safely

• Buy from the manufacturer or an authorised seller. A tampered device could be prepared by a scammer.
• Generate the seed phrase on the device yourself. Never use a device that arrives with a pre-written seed phrase.
• Write the seed phrase down and store it safely offline — see Seed phrases and private keys.
• Set a PIN on the device.
• Install the official app from the manufacturer's website.

Always verify on the device screen

Malware can change the address shown on your computer. The device screen is the trusted display: check the receiving address and amount there before confirming.

What it does not protect against

• Losing the seed phrase backup, or someone finding it.
• Approving a malicious transaction you did not read.
• Sending to the wrong address or network.

Hardware wallets and XFasil

XFasil balances are custodial — held by the platform. A hardware wallet is useful for funds you keep yourself; you can send deposits from it and set one of its TRC-20 addresses as your withdrawal address.