If I have a hardware wallet, do I still need a seed phrase backup?

Yes. The device can break, be lost or be stolen. The seed phrase is what lets you rebuild the wallet on a new device, so it needs the same care whether or not you use a hardware wallet.

Can malware steal coins from a hardware wallet?

Malware on the computer cannot read the keys inside the device. It can still try to make you approve a transaction to the wrong address, which is why the address must be checked on the device's own screen before you confirm.

Is a phone wallet safe for small amounts?

For amounts you would carry in a physical wallet, many people accept the risk. The phone's operating system isolates apps, but the keys are still on an internet-connected device that runs other software.

Does a hardware wallet make me anonymous?

No. It changes where the keys are kept, not what is visible on the blockchain. Privacy depends on how addresses are used and which servers your wallet software talks to.

Hardware wallet or software wallet: what each one protects against

The words “hardware” and “software” describe where the keys live, not how safe the coins are. Both kinds of wallet derive their keys from the same kind of seed, under the same standards, and both can restore from the same seed phrase. What differs is how many other programs share a device with those keys, and what you see before a transaction is signed.

What does each kind of wallet do?

Under BIP32, a wallet derives a whole tree of keys from one seed; under BIP39, that seed comes from the words you wrote down. Any wallet that follows these standards can rebuild the same keys from the same words.

A software wallet is an app on a phone or computer. It stores the keys on that device, usually encrypted, and signs transactions there. The same device browses the web, opens email attachments and installs other apps. A wallet that stays online in this way is often called a hot wallet.
A hardware wallet is a small dedicated device. The keys are generated and kept inside it. The computer or phone prepares a transaction and sends it to the device, the device shows the destination and amount on its own screen, and only after you confirm on the device does it sign. The signed transaction goes back to the computer to be broadcast. The keys never leave.

Some hardware wallets never connect to a computer at all and exchange transactions by memory card or QR code. That is air-gapped signing, usually built on the PSBT format defined in BIP174, which exists precisely so that one device can prepare a transaction and another can sign it.

Which threats does each protect against?

Threat	Software wallet	Hardware wallet
Malware on the computer or phone reads the keys	Exposed	Keys stay inside the device
Malware swaps the destination address	Exposed	Visible on the device screen if you check it
Lost or stolen phone or laptop	Depends on device encryption and PIN	Device has its own PIN; seed restores the wallet
Someone finds the paper seed phrase	Exposed	Exposed (unless a passphrase is used)
You send coins to a scammer yourself	Not protected	Not protected
You copy a lookalike address from your history	Not protected	Not protected, unless you compare the full address on screen
A bug in the wallet software	Possible	Possible in companion software and firmware
The device fails	Restore from seed	Restore from seed

Three rows are worth dwelling on.

Address swapping. Clipboard malware replaces a copied address with the attacker’s. With a software wallet, the screen you would check is controlled by the same compromised computer. A hardware wallet shows the address on a screen the computer cannot draw on, which is the whole point of that small display. The protection works only if you actually compare the address shown on the device with the one you intended.

Scams. Neither kind of wallet can tell a legitimate payment from one you were tricked into making. The FBI’s 2025 Internet Crime Report counts $7.228 billion in reported losses from cryptocurrency investment fraud; in those schemes victims send the coins themselves. See how pig butchering scams work.

Lookalike addresses. In an address poisoning attack, a scammer plants an address that resembles one you used before. A hardware wallet faithfully signs whatever address you chose. See how address poisoning works.

Can software bugs affect either kind?

Yes. Hardware wallets run firmware, and both kinds rely on companion software on a computer or phone. Bitcoin Core, the reference implementation, publishes its own advisories. Two from 2026 show the range:

In January 2026 the project disclosed that a failed migration of a legacy wallet in versions 30.0 and 30.1 could delete other files in the wallet directory, risking loss of funds; it was fixed in 30.2 and the affected downloads were removed from the website.
In June 2026 it disclosed that the new private broadcast option in 31.0 could reveal the sender’s IP address after a failed connection attempt; it was fixed in 31.1.

Neither of these stole keys, but either could hurt a user who did not update. The habit that matters is the same for both kinds of wallet: read the maker’s advisories, update promptly, and keep a tested backup so a software fault is never the last word. See what to do when a wallet vulnerability is announced.

What does using a hardware wallet look like day to day?

Receiving. The wallet app on your computer or phone asks the device for a new address. The device shows the address on its own screen. You compare it with the one the app displays, then give it to the payer. Receiving needs no signature and no confirmation of anything else.

Sending. You enter the destination and amount in the app. The app builds an unsigned transaction and sends it to the device. The device shows the destination, the amount and the fee. You check them against the source of the address, not against the app, and confirm with the device’s buttons. The signed transaction returns to the app, which broadcasts it.

Checking balances. The app can show balances and history without the device connected, because it only needs public information. Many people keep the device in a drawer and plug it in only to receive to a verified address or to send.

What if the hardware wallet maker goes out of business?

The keys do not depend on the company. A device that follows BIP39 and BIP32 produces a seed phrase that any compatible wallet can restore, so the coins remain reachable with the words even if the maker, its app or its website disappears. That is one more reason the backup, not the device, is the thing to protect and test.

The same is not automatically true for devices that use their own backup format, or for wallets that store part of the secret with a service. Before buying, check which standard the backup follows and which other software can restore it.

What are the common mistakes?

Treating the device as the backup. It is a signing tool; the seed phrase is the backup.
Approving without reading. The protection of the screen only works if you compare the address on it with a trusted source.
Typing the seed phrase into the companion app during setup or “verification”. A genuine setup shows the words on the device and never asks for them on the computer.
Using a device that arrived already set up, with words printed on a card in the box.
Never updating. Advisories fix real flaws; a device left years out of date gives up some of the protection you bought it for.
Keeping the device and the seed phrase in the same place. A burglar who finds both has everything. Store the backup somewhere the device is not.

When is a software wallet enough?

Small, everyday amounts: what you would carry in a physical wallet.
Learning: sending and receiving small sums to understand fees and confirmations before moving savings.
As a watch-only companion: a software wallet can show balances from a hardware wallet’s extended public key without holding any private key.

When is a hardware wallet worth it?

Savings you would be seriously hurt to lose.
A computer you cannot vouch for: shared, old, or used for everything.
Long-term holding or cold storage, where the device sits unused for months and signs rarely.
Multisig, where each key ideally lives on a separate device.

What should I check before trusting a hardware wallet?

Buy from the maker or an authorised reseller, and treat a device that arrives with a pre-filled seed phrase or a “recovery card” as compromised. A genuine device generates the words itself during setup.
Generate the seed on the device, write the words down by hand, and never type them anywhere else.
Verify addresses on the device screen every time you receive or send.
Test the backup with a recovery on the device before moving savings there. See how to test a seed phrase backup.
Update firmware only from the maker’s official software, and check the device screen during the update.

So which should I use?

Most people who hold meaningful amounts end up with both. A software wallet carries spending money and makes small payments easy. A hardware wallet holds savings and signs rarely, with every address checked on its own screen. The seed phrase behind each needs its own careful backup either way, because no device, however secure, protects words written on paper.