Monero Hardware Wallets: How to Store XMR Offline
A Monero hardware wallet is a small physical device that stores your private keys offline and signs transactions without ever exposing those keys to your computer or phone. For anyone holding a meaningful amount of XMR, it is the strongest practical defense against malware and remote theft. This guide covers which devices support Monero, how they actually protect your funds, and how to set one up without the common mistakes.
What a hardware wallet actually does
A hardware wallet keeps your private spend key inside a dedicated chip that never hands the key to the outside world. When you want to send Monero, the transaction is built on your computer or phone, sent to the device, signed inside the device, and the signed result comes back out. The key itself stays put the entire time.
This matters because the most common way people lose crypto is malware on an everyday machine. With a hardware wallet, even a fully compromised computer cannot spend your funds, because it never sees the key and you physically confirm each transaction on the device's own screen.
Which devices support Monero
Monero support is narrower than for Bitcoin, so the device matters. Ledger devices support Monero through the Monero app and pair with wallets like the official Monero GUI, Cake Wallet, Feather, and Monerujo. Trezor's Model T and Safe line also support Monero through compatible wallet software.
Before buying, confirm that the specific model you want is listed as Monero-compatible by both the device maker and the wallet you plan to use. Support can vary by firmware version, so check current documentation rather than older forum posts.
Buy the device the right way
Always buy a hardware wallet new, directly from the manufacturer or an authorized reseller. Avoid used devices and third-party marketplace listings, where a tampered unit could come pre-loaded with a seed an attacker already knows. A device that arrives already set up with a seed for you is a red flag, full stop.
When it arrives, you should be the one generating a brand-new seed during setup. If the box claims to contain a pre-written recovery phrase, do not use it. The whole security model depends on you, and only you, knowing the seed.
Setting up your Monero hardware wallet
Setup has two halves. First you initialize the device itself: set a PIN and let it generate a recovery seed, which you write down on paper or steel and store offline. This seed is the backup for everything on the device. Then you install the Monero app on the device and pair it with a desktop or mobile wallet that supports hardware signing.
The first time you connect, the wallet imports your view key so it can see incoming funds, while the spend key stays locked in the device. Syncing a hardware wallet can be slow the first time, so be patient. After that, sending requires you to confirm the amount and address on the device screen.
Verify addresses on the device, always
The device's screen exists so you can trust what you confirm. When sending, check that the address and amount shown on the hardware wallet match what you intended. Malware can change an address shown on your computer, but it cannot change what the device displays, so the device is your source of truth.
This habit is the entire point of owning the hardware. Skipping the on-device check throws away most of the protection you paid for. A few extra seconds per transaction is the trade.
Funding cold storage without KYC
Once your hardware wallet is set up, you can move XMR into it the same way as any wallet. Generate a receiving address in the paired software, confirm it on the device, and send to it. If you are acquiring Monero in the first place, you can swap another coin into XMR and have it delivered straight to that address, non-custodially and without an account or identity check.
Send a small test amount before moving a large balance, confirm it arrives, then move the rest. Your keys never leave the device, and the coins go directly into cold storage you control.
Hardware wallet limits worth knowing
A hardware wallet protects your keys, but it does not protect a seed you backed up carelessly. If you write the recovery phrase on paper and someone finds it, they can restore your funds on their own device. Treat the seed backup with the same seriousness as the device itself.
It also does not make you anonymous on its own. The node your paired wallet connects to can still see your IP, so combine the hardware wallet with your own node or Tor if network privacy matters to you. The device secures custody. your network setup secures privacy.
Swap into or out of Monero, no KYC
MoneroSwap is non-custodial, no account, no KYC, no logs, 0% fee right now, open source, and available over Tor. Verify every claim, then pick a pair and swap into Monero. New here? Start with the FAQ.
← All guides