[{"data":1,"prerenderedAt":590},["ShallowReactive",2],{"page-\u002Fguides\u002Fhardware-wallet-wrench-attack\u002F":3,"related-guides-\u002Fguides\u002Fhardware-wallet-wrench-attack":564},{"id":4,"title":5,"body":6,"description":544,"excerpt":545,"extension":546,"meta":547,"navigation":558,"path":559,"publishedAt":560,"seo":561,"stem":562,"updatedAt":560,"__hash__":563},"content\u002Fguides\u002Fhardware-wallet-wrench-attack.md","Can a Hardware Wallet Protect You From a $5 Wrench Attack?",{"type":7,"value":8,"toc":530},"minimark",[9,13,16,24,29,62,66,144,148,151,154,157,168,175,189,192,195,199,202,205,208,236,249,253,256,263,266,269,272,275,295,307,311,314,317,320,323,326,340,343,351,355,361,364,367,383,386,403,407,414,417,431,437,451,455,458,483,486,497,501,504,507,510,527],[10,11,12],"p",{},"A hardware wallet is excellent at one job: keeping private keys off your everyday phone or computer.",[10,14,15],{},"A wrench attack is a different problem.",[10,17,18,19,23],{},"If someone can threaten you in person, force you to unlock a phone, demand your seed phrase, or push you to sign a transaction, the question is no longer \"Is the key offline?\" The question becomes ",[20,21,22],"strong",{},"how much one moment of coercion can actually expose",".",[25,26,28],"h2",{"id":27},"short-answer","Short answer",[30,31,32,38,44,50,56],"ul",{},[33,34,35],"li",{},[20,36,37],{},"A hardware wallet helps against remote theft, not against every physical threat.",[33,39,40,43],{},[20,41,42],{},"Passphrase wallets can hide a larger balance behind a second secret,"," but only if you can document and recover that setup correctly later.",[33,45,46,49],{},[20,47,48],{},"Multisig can be stronger for larger holdings,"," because one person or one device may not be enough to move the full balance.",[33,51,52,55],{},[20,53,54],{},"A separate travel or visible wallet with a smaller balance can reduce damage"," if you ever face pressure in person.",[33,57,58,61],{},[20,59,60],{},"Tangem, Ledger, and Trezor fit different parts of this problem."," Tangem is simpler for low-friction compartmentalization, while Ledger and Trezor are more natural fits for passphrase-based hidden-wallet setups.",[25,63,65],{"id":64},"quick-decision-table","Quick decision table",[67,68,69,85],"table",{},[70,71,72],"thead",{},[73,74,75,79,82],"tr",{},[76,77,78],"th",{},"Your situation",[76,80,81],{},"Better fit",[76,83,84],{},"Why",[86,87,88,100,111,122,133],"tbody",{},[73,89,90,94,97],{},[91,92,93],"td",{},"You mostly worry about online scams and malware",[91,95,96],{},"One well-backed-up hardware wallet",[91,98,99],{},"Physical-threat complexity may be unnecessary",[73,101,102,105,108],{},[91,103,104],{},"You want a visible wallet and a separate hidden balance",[91,106,107],{},"Ledger or Trezor with a passphrase",[91,109,110],{},"A passphrase creates a different wallet from the same backup",[73,112,113,116,119],{},[91,114,115],{},"You hold a larger amount and want one person to be unable to move everything",[91,117,118],{},"Multisig",[91,120,121],{},"Shared signing control is stronger than a decoy balance alone",[73,123,124,127,130],{},[91,125,126],{},"You travel, spend, or use crypto publicly",[91,128,129],{},"Separate smaller wallet for active use",[91,131,132],{},"Limits how much one device or one moment can expose",[73,134,135,138,141],{},[91,136,137],{},"You know you are bad at managing complex recovery steps",[91,139,140],{},"Simpler separation, not advanced secrecy",[91,142,143],{},"Self-custody complexity can fail before an attacker does",[25,145,147],{"id":146},"what-a-wrench-attack-actually-changes","What a wrench attack actually changes",[10,149,150],{},"Ledger defines a wrench attack as physical force or intimidation used to make someone reveal wallet access or move funds.",[10,152,153],{},"That matters because many normal wallet defenses become less powerful once the attacker is standing next to you.",[10,155,156],{},"A hardware wallet still helps with some things:",[30,158,159,162,165],{},[33,160,161],{},"it keeps keys off malware-infected devices;",[33,163,164],{},"it makes random remote theft much harder; and",[33,166,167],{},"it creates a deliberate signing step instead of one careless click.",[10,169,170,171,174],{},"But it does ",[20,172,173],{},"not"," automatically solve these physical-threat scenarios:",[30,176,177,180,183,186],{},[33,178,179],{},"someone forces you to unlock the phone or wallet app;",[33,181,182],{},"someone demands the seed phrase backup;",[33,184,185],{},"someone pressures you to sign a transfer right now; or",[33,187,188],{},"someone steals both the device and enough recovery information to restore elsewhere.",[10,190,191],{},"That is why the better question is not \"Which wallet is impossible to steal from?\"",[10,193,194],{},"It is \"How much can one person force me to reveal in one place?\"",[25,196,198],{"id":197},"the-first-defense-is-boring-lower-your-visibility","The first defense is boring: lower your visibility",[10,200,201],{},"A lower-profile setup matters more than clever wallet theory.",[10,203,204],{},"If strangers, casual acquaintances, social-media followers, or even people around you know you hold a meaningful amount of crypto, your risk changes before the wallet choice even begins.",[10,206,207],{},"Practical rules:",[209,210,211,216,221,226,231],"ol",{},[33,212,213],{},[20,214,215],{},"Do not brag about balances or wallet holdings publicly.",[33,217,218],{},[20,219,220],{},"Do not post screenshots that reveal balances, addresses, or hardware-wallet details.",[33,222,223],{},[20,224,225],{},"Do not tie your identity to obvious on-chain history unless you have a reason.",[33,227,228],{},[20,229,230],{},"Do not carry your main wallet and recovery backup together.",[33,232,233],{},[20,234,235],{},"Use separate wallets for long-term storage and for active, public, or travel use.",[10,237,238,239,244,245,23],{},"If your setup still combines long-term savings, travel use, and dapp activity in one place, fix that first with ",[240,241,243],"a",{"href":242},"\u002Fguides\u002Fshould-you-split-crypto-across-multiple-wallets","Should You Split Crypto Across Multiple Wallets?"," and ",[240,246,248],{"href":247},"\u002Fguides\u002Fshould-you-travel-with-hardware-wallet","Should You Travel With a Hardware Wallet?",[25,250,252],{"id":251},"when-a-passphrase-or-hidden-wallet-helps","When a passphrase or hidden wallet helps",[10,254,255],{},"This is where Ledger and Trezor become especially relevant.",[10,257,258,259,262],{},"Both support passphrase wallets. Official guidance from both brands explains the same core rule: the passphrase creates a ",[20,260,261],{},"different wallet"," tied to the same underlying backup.",[10,264,265],{},"That can matter in a physical-threat scenario.",[10,267,268],{},"If the standard wallet holds a modest visible balance while the larger balance sits behind a separate passphrase, a coercive attacker may not automatically reach everything with the main seed phrase or main wallet view alone.",[10,270,271],{},"That is the practical logic behind a decoy or visible wallet setup.",[10,273,274],{},"But there are three hard truths:",[209,276,277,283,289],{},[33,278,279,282],{},[20,280,281],{},"A passphrase is not magic."," If the attacker knows the feature exists, the pressure may not stop at the first wallet.",[33,284,285,288],{},[20,286,287],{},"A bad passphrase setup can lock you out of your own funds later."," Trezor is especially blunt that every different passphrase creates a different wallet, including a typo.",[33,290,291,294],{},[20,292,293],{},"Your family or heirs can miss the hidden wallet entirely"," if you document the setup badly.",[10,296,297,298,244,302,306],{},"So a passphrase wallet can help, but only for readers who can already handle the recovery burden. If that still feels uncertain, read ",[240,299,301],{"href":300},"\u002Fguides\u002Fshould-you-use-a-passphrase-on-your-hardware-wallet","Should You Use a Passphrase on Your Hardware Wallet?",[240,303,305],{"href":304},"\u002Fguides\u002Fforgot-hardware-wallet-passphrase","Forgot Your Hardware Wallet Passphrase? What You Can Still Recover"," before you rely on this as a safety plan.",[25,308,310],{"id":309},"when-multisig-is-stronger-than-a-decoy-wallet","When multisig is stronger than a decoy wallet",[10,312,313],{},"For larger balances, a decoy wallet may not be enough.",[10,315,316],{},"If one person under pressure can still produce every secret needed to move the full stack, the setup is still fragile.",[10,318,319],{},"That is where multisig can be stronger.",[10,321,322],{},"A multisig wallet changes the spending rule itself. Instead of one device or one backup being enough, multiple keys in multiple locations may be required. Ledger's own wrench-attack glossary explicitly points to multisig as a stronger defense because coercing one person may still not complete a transfer.",[10,324,325],{},"This is often the cleaner answer when:",[30,327,328,331,334,337],{},[33,329,330],{},"the balance is large enough that a small visible wallet is not the real issue;",[33,332,333],{},"business, partner, or family control already exists;",[33,335,336],{},"you want spending approval separated across people or places; or",[33,338,339],{},"you do not want one passphrase note to become the second single point of failure.",[10,341,342],{},"The downside is complexity. Multisig is harder to document, harder to test, and easier to mismanage than a standard wallet.",[10,344,345,346,350],{},"If you are considering that jump, read ",[240,347,349],{"href":348},"\u002Fguides\u002Fmultisig-wallet-vs-shamir-backup","Multisig Wallet vs Shamir Backup: Which Should You Use?"," before treating multisig as an automatic upgrade.",[25,352,354],{"id":353},"where-tangem-fits-and-where-it-does-not","Where Tangem fits, and where it does not",[10,356,357,358,23],{},"Tangem matters here because many readers do not actually need a hidden-wallet strategy. They need ",[20,359,360],{},"separation they will really maintain",[10,362,363],{},"Tangem is not the natural choice for a classic passphrase-based decoy-wallet setup. Ledger and Trezor are more natural if your main goal is a hidden wallet behind an extra secret.",[10,365,366],{},"But Tangem can still fit a lower-risk physical setup in two practical ways:",[30,368,369,376],{},[33,370,371,372,375],{},"you keep a ",[20,373,374],{},"separate smaller Tangem wallet set"," for active or travel use;",[33,377,378,379,382],{},"you keep your ",[20,380,381],{},"larger long-term balance in a different wallet setup"," with a different recovery model.",[10,384,385],{},"That kind of separation is often more realistic than an advanced passphrase plan for users who know they prefer simple, mobile-first routines.",[10,387,388,389,393,394,398,399,23],{},"If that sounds closer to your habits, compare ",[240,390,392],{"href":391},"\u002Freviews\u002Ftangem-review","Tangem Wallet Review",", ",[240,395,397],{"href":396},"\u002Fcomparisons\u002Ftangem-vs-ledger","Tangem vs Ledger",", and ",[240,400,402],{"href":401},"\u002Fcomparisons\u002Ftangem-vs-trezor","Tangem vs Trezor",[25,404,406],{"id":405},"a-safer-way-to-think-about-decoy-balances","A safer way to think about decoy balances",[10,408,409,410,413],{},"A decoy wallet is only useful if it is believable ",[20,411,412],{},"and"," does not create more recovery risk than it removes.",[10,415,416],{},"That usually means:",[30,418,419,422,425,428],{},[33,420,421],{},"the visible wallet has a real but limited balance;",[33,423,424],{},"the main holdings do not share the same obvious access path;",[33,426,427],{},"you are not relying on memory alone for the hidden setup; and",[33,429,430],{},"you have already tested the recovery path privately before trusting serious funds to it.",[10,432,433,434,436],{},"What does ",[20,435,173],{}," help much:",[30,438,439,442,445,448],{},[33,440,441],{},"creating five tiny hidden wallets you will never remember correctly;",[33,443,444],{},"storing the passphrase next to the seed phrase;",[33,446,447],{},"carrying the long-term wallet and backup during travel anyway; or",[33,449,450],{},"assuming a hardware wallet screen alone solves coercion risk.",[25,452,454],{"id":453},"a-practical-setup-most-readers-can-maintain","A practical setup most readers can maintain",[10,456,457],{},"For most readers, the best physical-risk upgrade is simpler than it sounds:",[209,459,460,466,472,478],{},[33,461,462,465],{},[20,463,464],{},"one long-term wallet"," that stays boring and signs rarely;",[33,467,468,471],{},[20,469,470],{},"one smaller active or travel wallet"," for public use, dapps, or frequent movement;",[33,473,474,477],{},[20,475,476],{},"separate storage"," for device access and recovery access; and",[33,479,480,23],{},[20,481,482],{},"advanced features only if you can test and document them properly",[10,484,485],{},"That can mean:",[30,487,488,491,494],{},[33,489,490],{},"Tangem for a smaller mobile-first active wallet plus a separate long-term wallet elsewhere;",[33,492,493],{},"Ledger or Trezor for a long-term wallet with a carefully documented passphrase; or",[33,495,496],{},"a multisig setup if the balance and risk justify the extra work.",[25,498,500],{"id":499},"bottom-line","Bottom line",[10,502,503],{},"A hardware wallet can reduce the chance of getting drained remotely.",[10,505,506],{},"It cannot make physical coercion disappear.",[10,508,509],{},"If wrench-attack risk is part of your threat model, the better defense is layered:",[30,511,512,515,518,521,524],{},[33,513,514],{},"lower your visibility;",[33,516,517],{},"separate long-term funds from active-use funds;",[33,519,520],{},"use passphrase wallets only if you can recover them correctly;",[33,522,523],{},"use multisig when one-person control is the real problem; and",[33,525,526],{},"avoid building a secrecy plan you will not be able to explain to yourself a year from now.",[10,528,529],{},"The best setup is not the one that sounds toughest online. It is the one that limits what one bad moment can expose without turning your own recovery path into the bigger risk.",{"title":531,"searchDepth":532,"depth":532,"links":533},"",2,[534,535,536,537,538,539,540,541,542,543],{"id":27,"depth":532,"text":28},{"id":64,"depth":532,"text":65},{"id":146,"depth":532,"text":147},{"id":197,"depth":532,"text":198},{"id":251,"depth":532,"text":252},{"id":309,"depth":532,"text":310},{"id":353,"depth":532,"text":354},{"id":405,"depth":532,"text":406},{"id":453,"depth":532,"text":454},{"id":499,"depth":532,"text":500},"A hardware wallet can reduce remote theft risk, but a physical attack changes the rules. Learn when passphrase wallets, decoy balances, multisig, and a lower-profile setup actually help.",null,"md",{"faqs":548},[549,552,555],{"question":550,"answer":551},"Can a hardware wallet stop a physical robber from taking crypto?","Not by itself. A hardware wallet can block remote theft, but someone who can physically coerce you may force a transfer, demand the seed phrase, or make you unlock the device. The better defenses are lower visibility, balance separation, and advanced setups such as passphrase wallets or multisig when you can manage them correctly.",{"question":553,"answer":554},"Is a passphrase wallet good protection against a wrench attack?","It can help, but only if you understand the recovery risk. Ledger and Trezor both treat passphrases as advanced features, and the exact passphrase is required to recover the hidden wallet later.",{"question":556,"answer":557},"Is multisig better than a decoy wallet for physical-threat protection?","Often yes for larger balances, because one person or one device may not be enough to move everything. The tradeoff is much higher setup and recovery complexity.",true,"\u002Fguides\u002Fhardware-wallet-wrench-attack","August 23, 2026",{"title":5,"description":544},"guides\u002Fhardware-wallet-wrench-attack","sUI1ETJc751lXQ1Hy12PERARK0NvVcOs9ryI9hSoDQA",[565,570,574,578,582,586],{"path":566,"title":567,"description":568,"score":569},"\u002Fguides\u002Fhardware-wallet-with-metamask-or-coinbase-wallet","Can You Use a Hardware Wallet With MetaMask or Coinbase Wallet?","Yes, but not every wallet uses the same path. Learn when Ledger, Trezor, and Tangem work directly with MetaMask or Coinbase Wallet, and when WalletConnect is the safer fit.",3,{"path":571,"title":572,"description":573,"score":569},"\u002Fguides\u002Fimport-hot-wallet-seed-phrase-hardware-wallet","Should You Import a Hot Wallet Seed Phrase Into a Hardware Wallet?","Do not turn a MetaMask or other hot-wallet seed into cold storage. Learn the safer migration path before buying Ledger, Trezor, or Tangem.",{"path":575,"title":576,"description":577,"score":569},"\u002Fguides\u002Freplace-hardware-wallet-same-seed-or-new-wallet","Should You Restore an Old Seed Phrase to a New Hardware Wallet?","Replacing or upgrading a Ledger, Trezor, or Tangem wallet? Learn when restoring the old seed is fine and when a new wallet plus transfer is safer.",{"path":579,"title":580,"description":581,"score":569},"\u002Fguides\u002Fwatch-only-wallet-hardware-wallet","Should You Use a Watch-Only Wallet With a Hardware Wallet?","A watch-only wallet can help you monitor balances and receive payments without carrying your hardware wallet everywhere, but sharing an XPUB creates real privacy tradeoffs.",{"path":583,"title":584,"description":585,"score":569},"\u002Fguides\u002Ftangem-mobile-wallet-vs-hardware-wallet","Tangem Mobile Wallet vs Tangem Hardware Wallet: Should You Start Free or Buy the Cards?","Tangem now lets you start with a free mobile wallet inside the app. Learn when that is enough, when the cards are safer, and what the upgrade tradeoff really is.",{"path":587,"title":588,"description":589,"score":532},"\u002Fguides\u002Fbest-hardware-wallet-after-losing-seed-phrase","Best Hardware Wallet After Losing a Seed Phrase Before","If you have lost a seed phrase before, choose your next hardware wallet around the mistake you are most likely to repeat: backup loss, fake apps, or daily-use friction.",1787458119896]