The phone prepares it, the device signs it

What is hardware signing?

Hardware signing separates where you manage your wallet from where your private keys live. Your phone or computer runs the Jaxx Liberty interface — it shows your balances, lets you choose recipients and amounts, and builds unsigned transactions. But the actual cryptographic signing happens on a separate, purpose-built hardware device.

The hardware device stores your private keys in a tamper-resistant secure element. When a transaction needs to be signed, the device displays the details on its own screen so you can verify them, then signs the transaction after you physically press a button to confirm. The signed transaction is returned to your phone and broadcast to the network.

At no point does the private key leave the hardware device. Even if your phone is compromised by malware, the attacker cannot extract your keys or sign transactions without physical access to the hardware and your confirmation.

Supported devices

How it works

1. Connect your device. Plug in your Trezor or Ledger via USB, or connect via Bluetooth if your device supports it. Jaxx Liberty detects the hardware automatically.
2. Prepare the transaction. Use the Jaxx Liberty interface to select the recipient, amount, and fee. The wallet constructs an unsigned transaction and sends it to your hardware device.
3. Verify on device. Your hardware device displays the transaction details on its own screen — recipient address, amount, and fee. Compare these with what you see on your phone to ensure they match.
4. Confirm with a button press. Press the physical button on your hardware device to authorize the signing. The device signs the transaction internally using your private key.
5. Transaction broadcast. The signed transaction is returned to Jaxx Liberty and broadcast to the blockchain network. Your private key remains inside the hardware device throughout the entire process.

Why hardware signing matters

Software wallets store private keys in the memory or storage of a general-purpose device — a phone or computer that also runs a browser, email client, messaging apps, and other software. Each of these programs is a potential attack surface. A single vulnerability in any app could expose your private keys to theft.

Hardware wallets eliminate this risk by isolating the keys in a device that runs only one program: the firmware that manages cryptographic operations. The secure element is designed to resist physical tampering, side-channel attacks, and firmware exploitation. Even if an attacker gains full control of your phone, they cannot extract keys from the hardware device.

Hardware signing also protects against address substitution attacks, where malware replaces the recipient address with the attacker's address. Because the hardware device displays the transaction details on its own trusted screen, you can verify the recipient before confirming.

Setting up your device

If you already own a Trezor or Ledger, connecting it to Jaxx Liberty takes just a few steps. Open the wallet, tap "Connect hardware" in the wallet dialog, select your device type, and follow the on-screen instructions. The wallet will detect your device and import your accounts automatically.

If you are new to hardware wallets, start by purchasing a device directly from the manufacturer's official website. Never buy hardware wallets from unofficial resellers, as they may have been tampered with. Initialize the device following the manufacturer's setup guide, write down your recovery phrase, and then connect it to Jaxx Liberty.

For detailed setup instructions, see the Documentation. For a broader overview of the Jaxx Liberty security model, visit the Security page.