<blockquote>
<p>Is my understanding correct that even when connected to a computer with an internet connection the private keys are unaccessible and the only thing that can be seen is a signature/signed transaction? (let's take the Ledger Nano S as an example)</p>
</blockquote>
<p>Right, if you plug a hardware wallet/signer into a laptop your hardware wallet/signer will provide signatures when requested so that transactions can be constructed and broadcast but will not ever provide private keys to that laptop. The private keys stay on the hardware wallet/signer.</p>
<blockquote>
<p>How can I know that the seed phrase I see is new and hasn't been seen by the manufacturer before? How can I be confident that when I get the seed phrase/access to the private key nobody else has before me?</p>
</blockquote>
<p>You can generate a fresh seed phrase (or enter an existing one, Coldcard supports <a href="https://coldcard.com/docs/verifying-dice-roll-math" rel="nofollow noreferrer">dice rolls</a>) on the hardware wallet/signer but you are trusting the manufacturer that they haven't pre-loaded a set of seed phrases on the hardware wallet/signer. Hence it is important to buy directly from the manufacturer's website and not third party sellers who may have tampered with the hardware wallet/signer or be selling you a replica. One thing you may want to look into if this concerns you is <a href="https://btcguide.github.io/" rel="nofollow noreferrer">multisignature or threshold schemes</a>. This would allow you to use multiple different products and manufacturers and mitigate the risk of any one manufacturer being malicious. (They now wouldn't be able to spend your coins with knowledge of the seed on the device they sold you.) It does introduce complexity though so practise first on testnet/signet and make sure you understand what you are doing.</p>

CC BY-SA 4.0
2022-07-18T11:50:31.403Z
2022-07-18T12:12:41.383Z
2022-07-18T12:12:41.383Z
Michael Folkson
<p>Specifically two questions are interesting to me:</p>
<ol>
<li>Are private keys ever accessible?</li>
<li>When are they generated and how can we know/prove this?</li>
</ol>
<p>In more detail:</p>
<ol>
<li><p>Is my understanding correct that even when connected to a computer with an internet connection the private keys are unaccessible and the only thing that can be seen is a signature/signed transaction? (let's take the Ledger Nano S as an example)</p>
</li>
<li><p>How can I know that the seed phrase I see is new and hasn't been seen by the manufacturer before? How can I be confident that when I get the seed phrase/access to the private key nobody else has before me?</p>
</li>
</ol>

<private-key><wallet-security><seed><hardware-wallet>
How secure are the private keys on a hardware wallet?
MManke
# How secure are the private keys on a hardware wallet?

(Asked by: username_0 on 2022-07-18)

Specifically two questions are interesting to me:

1. Are private keys ever accessible?
2. When are they generated and how can we know/prove this?

In more detail:

1. Is my understanding correct that even when connected to a computer with an internet connection the private keys are unaccessible and the only thing that can be seen is a signature/signed transaction? (let's take the Ledger Nano S as an example)
2. How can I know that the seed phrase I see is new and hasn't been seen by the manufacturer before? How can I be confident that when I get the seed phrase/access to the private key nobody else has before me?

**Tags:** private-key, wallet-security, seed, hardware-wallet


---

## 1 answers

### Answer by username_1 on 2022-07-18. Score: 3 | Accepted answer

> Is my understanding correct that even when connected to a computer with an internet connection the private keys are unaccessible and the only thing that can be seen is a signature/signed transaction? (let's take the Ledger Nano S as an example)

Right, if you plug a hardware wallet/signer into a laptop your hardware wallet/signer will provide signatures when requested so that transactions can be constructed and broadcast but will not ever provide private keys to that laptop. The private keys stay on the hardware wallet/signer.

> How can I know that the seed phrase I see is new and hasn't been seen by the manufacturer before? How can I be confident that when I get the seed phrase/access to the private key nobody else has before me?

You can generate a fresh seed phrase (or enter an existing one, Coldcard supports [dice rolls](https://coldcard.com/docs/verifying-dice-roll-math)) on the hardware wallet/signer but you are trusting the manufacturer that they haven't pre-loaded a set of seed phrases on the hardware wallet/signer. Hence it is important to buy directly from the manufacturer's website and not third party sellers who may have tampered with the hardware wallet/signer or be selling you a replica. One thing you may want to look into if this concerns you is [multisignature or threshold schemes](https://btcguide.github.io/). This would allow you to use multiple different products and manufacturers and mitigate the risk of any one manufacturer being malicious. (They now wouldn't be able to spend your coins with knowledge of the seed on the device they sold you.) It does introduce complexity though so practise first on testnet/signet and make sure you understand what you are doing.


---

