What "offline" really means
The word is used loosely in advertising. Precisely, it means one thing: the key was born on the device and has never left it.
"Offline" appears in the advertising for almost every hardware wallet, and it is doing real work — but not the work most buyers assume. It does not mean the device is disconnected. It is connected to your computer while you use it.
The key is born on the device
When you set the device up, it generates a seed phrase using its own hardware, and displays it on its own screen. That phrase is never sent to your computer, never transmitted anywhere, and never exists as a file.
This matters because the alternative is what everything else does. A phone wallet generates its phrase on a machine that runs an operating system, downloads software and connects to the internet. Even if nothing is wrong with it today, the key has existed in an environment where something could be.
Offline describes the key's history, not the device's cable
The claim is that the key has never been present on an internet-connected machine — not at birth, not at signing, not ever. That property is what you are buying.
How signing works without the key leaving
Sending funds looks like a single action and is actually four.
- Your computer builds the transactionRecipient, amount, network, fee. At this point nothing is signed and nothing can move.
- The unsigned transaction goes to the deviceOver the cable, or as a QR code, or on a memory card. It contains no secret.
- The device shows you what it is about to signOn its own screen, driven by its own firmware. This is the security step, and it is the one people skip.
- You confirm, and the device returns a signatureThe signed transaction goes back and gets broadcast. The key stayed inside throughout.
So the cable carries a request and an answer, never the secret. A compromised computer can lie to you about what it is asking for — which is exactly why the device has a screen of its own.
What the secure element adds
Many devices store the key in a chip designed to resist physical attack: the kind of component used in bank cards and passports. It resists somebody who has your device in their hands and equipment on their bench.
Some manufacturers use a general-purpose chip instead and publish all their firmware, arguing that inspectable code matters more than a certified chip whose internals nobody outside the vendor can audit. Both positions are held by serious people, and the page on choosing a device lays out the trade-off.
What offline does not cover
This is the part the advertising is quiet about, and it is where the losses actually happen.
The device will sign whatever you confirm
Including a transfer to a thief, and including an approval that lets a contract drain you later. It protects the key perfectly and your judgement not at all.
The phrase you wrote down. Once it is on paper it is as safe as the paper. Photograph it, and it is as safe as your cloud account. The device cannot help with that.
Blind signing. Complex contract interactions sometimes cannot be displayed in full on a small screen, and the device asks you to approve something it can only partially describe. That is the exact moment the model degrades, and it is worth stopping rather than proceeding.
The supply chain. Offline is a claim about a device that reached you untampered. Bought second hand, or from a marketplace seller, that claim is unverifiable — and the classic version arrives with a phrase helpfully pre-written in the box.
Wrong network, wrong address. Addressing mistakes are invisible to the device. It signs what you told it to sign.
Verifying the claim yourself
Two checks, both quick.
The phrase must appear on the device screen during setup and nowhere else. If any part of the process shows those words on your computer, the offline property is already gone.
Then wipe the device and restore it from your written phrase, while the balance is small. That proves both that the backup works and that the device does what it claims. It is the single most useful ten minutes in this entire subject, and almost nobody spends them.