Hardware Wallets

Advanced8–10 min read

Use hardware wallets for cold storage on EVM networks. This guide covers Ledger, Trezor, Keystone, WebHID/WebUSB, and EIP‑712 typed data for secure signing.

  • Non‑custodial: PRC never sees your seed or private keys.
  • Vendor features and browser support determine availability.
  • Not investment advice; device support subject to change.

Hardware Wallet Support (Planned)

USB connections (WebHID/WebUSB) for Ledger and Trezor are in active development. Join the beta waitlist via [email protected].

Track progress on /support/changelog · /status

Planned device support

Ledger

Planned

Nano S, S Plus, Nano X

USB only at launch; no Bluetooth

Trezor

Planned

Model One, Model T

WebUSB and Bridge support

Keystone

Planned

QR / Air‑gapped

Phase 2 — camera‑based signing

Others

Evaluating

BitBox02, GridPlus Lattice1

Under security review

Vendor trademarks belong to their owners. Availability depends on vendor APIs and security reviews.

Connection methods & browser support

WebHID (Ledger)

Chrome/Brave/Edge on desktop

WebUSB (Trezor)

Chrome/Brave/Edge on desktop

Bridge (fallback)

Trezor Bridge desktop helper

QR signing (Keystone)

Camera‑based, fully air‑gapped

Not supported at launch: Safari, Firefox (for HID/USB), Bluetooth connections.

Security model

  • Keys stay on the device. PRC never sees your seed or private keys.
  • Public data only: optional local cache of xpub/addresses to speed discovery.
  • Human‑in‑the‑loop: verify critical tx details on the device screen.
  • Revocation: disconnect devices and clear cached public data anytime.
  • DeFi tip: prefer low or one‑time allowances; revoke approvals after use.

How it will work (technical flow)

Connect & unlock device

Ledger: open Ethereum app; Trezor: confirm connection.

Request public data

Derive addresses from public data (no private keys leave the device).

Account picker

Choose from derived addresses (with balances).

Build transaction

Build tx in PRC (chainId, nonce, gas, data).

Review & sign

Confirm details on the device screen and sign.

Broadcast

PRC broadcasts signed tx and shows status + hash.

Typed data: EIP‑1559 supported; EIP‑712 (typed‑data) staged per device/firmware. Blind signing may be required until enabled.

Troubleshooting (quick fixes)

Device not detected

Close vendor apps (Ledger Live), use Chrome, try another USB port/cable.

"Open app on device" prompt

Ensure Ethereum app is open on Ledger.

WebUSB/HID blocked

Allow the site permission; on Linux add udev rules and replug.

Bridge required

Install Trezor Bridge; restart browser.

Addresses don't match

Check derivation path and network; compare on a block explorer.

Stuck at "Waiting for confirmation"

Confirm on device; if frozen, unplug/reopen app and retry.

Helpful links: Ledger Live · Trezor Bridge

Prerequisites

  • Set up the hardware wallet with the vendor's app; back up the seed offline.
  • Firmware up to date; Ethereum app installed (Ledger).
  • Desktop browser: Chrome/Brave/Edge (latest).
  • OS: Windows 10+, macOS 12+, or Linux (udev rules for USB).
  • USB cable (original or quality). Avoid hubs for first pairing.

Known limitations (at launch)

  • No Bluetooth (Ledger X over BT not supported).
  • Safari/Firefox: no WebHID/WebUSB — use Chromium browsers.
  • EIP‑712: staged rollout per device/firmware; may require enabling a setting.
  • Vite/BTC: not in the first release.

FAQs

Can PRC export my hardware private key?
No — by design.
Can I mix software and hardware accounts in PRC?
Yes; they appear as separate accounts with labels.
Does PRC store my xpub?
Optionally and locally to speed discovery; you can clear it anytime.
Are fees different with hardware?
Network gas only; no extra PRC fee for signing.
Can I use passphrases?
Yes (device‑supported); be consistent — wrong passphrase = different wallet.

Last updated: