External Signer
An external signer is a hardware wallet or remote device that signs cryptocurrency transactions securely, keeping private keys isolated from the connected software wallet.
What Is a External Signer?
A External Signer is a hardware wallet or remote device that signs cryptocurrency transactions securely. It keeps private keys isolated from the connected software wallet. Also known as a hardware signer or remote signer.
The external signer receives unsigned transaction data from the software wallet over USB, Bluetooth, or another interface. It displays transaction details for user review on its secure screen. The user confirms the details using the device's physical buttons. The signer then uses its stored private key to create a digital signature. This signed transaction returns to the software wallet for broadcast to the blockchain. Private keys never leave the device.
External signers matter for security. They protect against malware, keyloggers, and phishing attacks on the host computer. Even if the software wallet compromises, attackers cannot access funds without physical device control. This setup follows the principle of key isolation in cryptocurrency best practices.
Key characteristics include tamper-resistant hardware, user verification prompts, and support for standards like BIP-39 for seed phrases. Common types feature USB-connected devices like Ledger Nano or Trezor Model T. Air-gapped versions use QR codes for fully offline signing. Remote signers operate over secure networks but require additional trust in the service provider.
Cryptocurrency is a digital or virtual currency secured by cryptography, operating on decentralized blockchain networks to enable secure, peer-to-peer transactions.
Read full definitionA Hot Wallet is a cryptocurrency wallet connected to the internet, allowing for easy access and transactions but more vulnerable to hacks.
Read full definitionA software wallet is a digital application that stores cryptocurrency private keys and enables transactions, typically on mobile or desktop devices.
Read full definitionA digital signature is a cryptographic method that uses a private key to sign blockchain transactions, verifiable with the public key to prove authenticity and prevent tampering.
Read full definitionFirmware Trust Model describes the trust level users place in a hardware wallet's firmware, from fully relying on the vendor (vendor-only trust) to independently verifying it (user verification).
Read full definitionBIP39 is a standard for generating mnemonic seed phrases that are used to create deterministic wallets and securely back up cryptocurrency private keys.
Read full definitionLedger is a brand of hardware wallets that securely store cryptocurrency private keys offline, such as the Ledger Nano series.
Read full definitionTrezor is a hardware wallet by SatoshiLabs. It stores private keys offline to secure cryptocurrencies.
Read full definitionOffline Signing refers to signing cryptocurrency transactions on a device that is not connected to the internet, ensuring private keys remain secure from online threats.
Read full definitionReal-World Examples
Example 1: Ledger Nano S with MetaMask
Connect your Ledger Nano S to a computer running MetaMask. MetaMask prepares an unsigned Ethereum transaction to send 0.1 ETH. It sends the transaction data to the Ledger over USB. Review the recipient address and amount on the Ledger's screen. Press both buttons to confirm. The Ledger signs the transaction with its private key and returns the signature to MetaMask. MetaMask broadcasts it to the blockchain.
Example 2: Trezor Model T for Bitcoin transfer
Use Trezor Suite software with your Trezor Model T. Create a Bitcoin transaction to send 0.01 BTC to a friend. The software displays the unsigned transaction and forwards details to the Trezor via USB. Verify the details on the Trezor's color touchscreen. Swipe to approve. The device signs it offline and sends the signed transaction back for broadcasting.
Example 3: Air-gapped signing with QR codes
On an online computer with Electrum, generate an unsigned transaction QR code. Scan it with your air-gapped Coldcard wallet's camera. The Coldcard displays transaction details for review. Confirm with physical buttons. It generates a signed transaction QR code. Scan this back on the online computer to broadcast. Private keys stay offline.
Ledger is a brand of hardware wallets that securely store cryptocurrency private keys offline, such as the Ledger Nano series.
Read full definitionEthereum is a decentralized blockchain platform that enables smart contracts and decentralized applications (dApps). Its native cryptocurrency is Ether (ETH).
Read full definitionTrezor is a hardware wallet by SatoshiLabs. It stores private keys offline to secure cryptocurrencies.
Read full definitionBitcoin (BTC) is the first decentralized cryptocurrency, launched in 2009. It uses blockchain technology for secure, peer-to-peer digital transactions without intermediaries.
Read full definitionTrezor Suite is a software interface for managing Trezor hardware wallets, allowing users to send, receive, and store cryptocurrencies securely.
Read full definitionOffline Signing refers to signing cryptocurrency transactions on a device that is not connected to the internet, ensuring private keys remain secure from online threats.
Read full definitionElectrum is a lightweight Bitcoin wallet that allows users to store, send, and receive Bitcoin securely. It is known for its speed and low resource usage.
Read full definitionColdcard is an air-gapped hardware wallet for Bitcoin, made by Coinkite, that stores private keys offline and signs transactions without internet exposure.
Read full definitionReady to Choose a Secure Wallet?
Use our tools to find the right hardware wallet for your needs.