A hardware wallet (such as Ledger or Trezor) is a physical device that stores private keys offline; transaction signing is completed inside the device, and the private key never touches a networked environment.