Hardware Seed Vault

A hardware seed vault is a purpose-built offline environment whose only job is to generate, hold, and occasionally use a Bitcoin seed without ever exposing it to networked hardware.

It's a bigger umbrella than "hardware wallet." A hardware wallet (Trezor, ColdCard, Jade, BitBox, Ledger, etc.) is the consumer-friendly version: a small dedicated signing device. A seed vault might be:

• An air-gapped laptop that's never connected to a network, with the seed entered manually and held in encrypted offline storage.
• A SeedSigner-style stateless device that derives keys from a memorized or paper-stored seed each signing session.
• A vault appliance built around a hardware security module (HSM) in an institutional setting, with multi-person physical access controls.
• A dedicated computer running in a Faraday-shielded room, used only for offline transaction signing via PSBT files transferred on SD cards.

The shared property is air-gap discipline. The seed never sees an internet-connected machine. Transactions get assembled on an online machine, exported as an unsigned PSBT to media, taken to the vault, signed, and brought back. Whatever malware lives on the online machine never touches the seed.

For most individuals, a single hardware wallet is enough. For higher-stakes setups (large balances, institutions, multisig cosigner duties), a dedicated seed vault with stricter air-gap controls is the next step up. The threat model justifies the operational cost only when the value warrants it.