A physical device that stores private keys offline and signs transactions locally, preventing remote theft of funds or device rewards.