Hardware Security Module (HSM)

A Hardware Security Module is a dedicated, tamper-resistant device that generates, stores, and uses cryptographic keys inside a sealed boundary. The keys never leave the device in usable form. Signing happens on-board: you send the HSM a message and an operator's authorization; it returns a signature.

HSMs are the traditional-finance security primitive. Banks, payment processors, and certificate authorities have run them for decades. FIPS 140-2 / 140-3 certification, tamper-evident enclosures, role-based access control, dual-control policies (no single operator can sign alone) are all standard features.

In Bitcoin, HSMs underpin most large custodial operations: exchange cold storage, regulated custodians (Coinbase Custody, Anchorage, BitGo, Fidelity Digital Assets), corporate treasuries. The typical pattern is a multisig wallet where each cosigner key lives in a separate HSM under separate operational control, so no single HSM compromise (or operator collusion) is enough to move funds.

The cost is real. Enterprise HSMs run from $10K (low-end network HSM) to $100K+ (top-tier FIPS-140-3 Level 3 / 4 appliance), plus the operational team to run them. They're aimed at institutions where regulatory compliance demands them and where the secured value justifies the overhead.

For individuals, a hardware wallet is the consumer-grade equivalent. Same idea (keys never leave the device, signing happens on-chip), much smaller threat model, vastly lower cost. The difference between a $100 hardware wallet and a $50K HSM is mostly the certification regime, the physical-security guarantees, and the multi-party access controls.