Yes. No security device is immune to every attack. A hardware wallet reduces the risk by keeping your private keys away from your internet-connected computer or phone and requiring sensitive actions to be verified on the device itself.

The important questions are which attacks a hardware wallet prevents, where its limits are, and what remains your responsibility.

How hardware wallets reduce risk

A hardware wallet has one dedicated purpose: generating, storing, and using private keys without exposing them to the connected computer. A computer or smartphone runs many applications and may be exposed to malware, which makes this separation important.

The computer prepares a transaction, but the hardware wallet signs it internally. Your private keys do not need to leave the device. The device screen also gives you an independent place to verify important details before approving an action.

How a hardware wallet can be attacked

Malware on your computer or phone

Malware may change a receiving address, alter transaction details, imitate a wallet app, or try to trick you into revealing secrets. A hardware wallet is designed to keep private keys isolated even when the connected computer is compromised.

However, you must compare the address and amount on the hardware wallet screen with what you intend to approve. If you confirm manipulated details, the device cannot know that they are not what you wanted.

Only connect and unlock your BitBox with the official BitBoxApp or trustworthy third-party wallets and browser extensions. A malicious or untrusted application may try to mislead you into approving harmful actions. If you are unsure whether an application is trustworthy, contact BitBox Support before using it with your BitBox.

Phishing and recovery-word theft

An attacker does not need to hack the hardware wallet if they can persuade you to reveal your recovery words. Anyone with your recovery words can restore the wallet elsewhere and access its funds.

Never enter your recovery words into a website, computer, phone, form, support chat, or any online service. BitBox Support will never ask for them.

Theft and physical access

A stolen device may be subjected to password guessing or laboratory attacks. Security features can make these attacks much harder, but your device password still matters. An attacker who has both your device and its password may be able to access your wallet.

Supply-chain attacks and fake devices

A device could be replaced or modified before it reaches you or after someone gains temporary access to it. Buy from BitBox or an authorized reseller, and stop immediately if the BitBoxApp reports that the connected device is not authentic. Inspect the device for unexpected damage before setup, but rely on the BitBoxApp authenticity check if a warning appears.

The BitBoxApp automatically checks whether a connected BitBox is genuine. For a deeper explanation, read how BitBox mitigates supply-chain attacks.

Firmware and hardware vulnerabilities

Like any security product, a hardware wallet may contain previously unknown vulnerabilities. Open-source code, reproducible builds, independent security reviews, layered protections, and responsible disclosure help researchers identify and fix vulnerabilities.

BitBox maintains an official bug bounty program so security researchers can report vulnerabilities responsibly.

How BitBox implements these protections

BitBox protects your private keys through multiple independent security layers, so one failed safeguard does not automatically expose them. These include isolated transaction signing, on-device verification, secure firmware checks, device-authenticity checks, protected seed storage, open-source firmware, and protections against specific physical and software attacks.

For more background on the general security principles behind these safeguards, see what makes a hardware wallet secure.

See the BitBox security features for an approachable overview of these protections.

Advanced users and security researchers can review the BitBox threat model, which explains the assumptions, covered attack vectors, countermeasures, and risks that are outside the model.

What a hardware wallet cannot protect you from

A hardware wallet cannot protect your funds if:

• someone obtains your recovery words or another usable wallet backup;
• you enter recovery words into a computer, phone, website, or fake app;
• you approve an address, amount, or other security-sensitive action on the device without verifying it;
• an attacker obtains both your device and the information needed to unlock it;
• you follow fraudulent instructions or use an unauthentic device despite a warning; or
• you lose access to both the device and every valid backup.

How to use a hardware wallet safely

Buy and verify the device

• Buy from BitBox or an authorized reseller.
• Stop if the BitBoxApp reports that the device is not authentic.

Use the device securely

• Use the official BitBoxApp and keep it and the device firmware up to date.
• Verify receiving addresses, transaction destinations, amounts, and security-sensitive prompts on the BitBox screen.

Protect your password and wallet backup

• Keep your device password private and difficult to guess.
• Store your wallet backup offline and separately from the device.
• Never share or digitally enter your recovery words.

Frequently asked questions

What is the most important hardware-wallet security rule?

Never reveal or digitally enter your recovery words, and verify every security-sensitive action on the hardware wallet itself. Protecting your wallet backup and carefully verifying every action on your BitBox are the two most important responsibilities that remain yours.

Can malware steal private keys from a hardware wallet?

A hardware wallet is designed to prevent private keys from being exposed to the connected computer. Malware can still manipulate what the computer shows or trick you into approving the wrong action, so always verify critical details on the hardware wallet screen.

Can a fake hardware wallet steal my funds?

Yes, a fake or modified device may try to capture secrets or make you follow malicious instructions. Buy from an official source and stop immediately if the BitBoxApp reports that your BitBox is not authentic.

Are my funds safe if my hardware wallet is stolen?

A device password and multiple built-in security protections make unauthorized access more difficult, but you should treat a stolen device as a security incident. Your funds are recoverable with a valid backup, and you can move them to a new wallet if the situation requires it.