Non-Extractable Keys

A Non-Extractable Key is a private cryptographic key generated and stored exclusively within a hardware wallet's secure chip. Users cannot export, copy, or extract this key from the device. This feature prevents access even if an attacker gains physical control of the wallet.

Hardware wallets create non-extractable keys during initialization using a tamper-resistant secure element, like a microcontroller. The private key never leaves this chip. To sign a transaction, the wallet receives unsigned data, computes the signature internally with the key, and outputs only the signed transaction. For example, a Ledger device generates keys on-device and signs without exposing them.

Non-extractable keys matter in cryptocurrency because private keys control access to funds. Software wallets store extractable keys on potentially compromised computers, risking theft via malware or phishing. Hardware wallets with non-extractable keys protect against these threats, making them ideal for holding large amounts long-term.

Key characteristics include:

• On-device generation: Keys derive from a master seed without external input.
• Immutable protection: Immune to software extraction attacks.
• Recovery via seed: Users back up a mnemonic seed phrase to regenerate keys on a new device if needed.

Synonyms include key protection and secure key storage.