Hardware wallets for merchants — cold storage explained

A software wallet on your phone is a perfectly fine place to start accepting Bitcoin. It's free, easy to set up, and works with OrangeTill right out of the box. But as your Bitcoin holdings grow — as payments accumulate and you start holding meaningful amounts — the question of where to store it becomes more serious.

That's where hardware wallets come in. They're not complicated, but they do require a bit of understanding before you commit. This guide covers everything you need to know.

Hot wallets vs. cold wallets

You'll hear these terms a lot. The difference is simple: it's about whether your private keys touch the internet.

A hot wallet like Muun or Exodus lives on your phone. It's convenient, but your private keys are on an internet-connected device. If your phone is compromised by malware, or if someone gains access to it, your funds are at risk.

A cold wallet (also called a hardware wallet) stores your private keys on a dedicated physical device that never connects to the internet. To authorize a transaction, you physically interact with the device — plugging it in, pressing a button, or tapping it to your phone. The private key never leaves the hardware. It cannot be stolen remotely.

Do you need a hardware wallet?

Honestly — not necessarily, especially when you're just getting started. A reputable software wallet is secure enough for modest amounts. But there are a few situations where a hardware wallet starts to make real sense:

• You're accumulating crypto and not converting it to cash regularly
• You're holding what you'd consider a meaningful amount of money in crypto
• You want the peace of mind that comes with truly offline storage
• You're serious about self-custody and don't want to depend on any company's servers

If you're accepting Bitcoin as a convenience for customers and converting it to dollars at the end of each week, a software wallet is probably all you need. If you're accumulating Bitcoin as a long-term holding, a hardware wallet is worth the investment.

Hardware wallets and OrangeTill

Good news: any hardware wallet that generates a receive address works with OrangeTill. You get your wallet address from the hardware wallet's companion app, paste it into OrangeTill Settings, and that's it. Customers pay to your address, the crypto arrives in your hardware wallet, and your private keys never left the device.

The workflow looks like this: your customer scans the OrangeTill QR code, sends crypto from their wallet to your address, and the payment lands on the blockchain associated with your hardware wallet. You don't need to have your physical hardware device present at the point of sale — only the address is needed for receiving.

The main hardware wallets

There are several reputable hardware wallets available. Here are the ones most relevant for small business merchants.

A closer look at Tangem

Tangem is worth a deeper look for merchants because it's genuinely different from traditional hardware wallets — and in some ways it's a better fit for a point-of-sale environment.

Most hardware wallets look like USB drives or small devices with screens and buttons. Tangem is a credit-card-sized NFC card, about the same size and thickness as a credit card. To use it, you tap it to the back of your NFC-enabled phone while the Tangem app is open. That's it. No cables, no charging, no USB ports to wear out.

The other thing that makes Tangem unusual is its approach to seed phrases. Traditional hardware wallets give you a 12 or 24-word recovery phrase that you write down and store. Tangem's default approach generates the private key entirely inside the chip — and never outputs a seed phrase at all. This eliminates the risk of someone stealing your written-down words, but it does mean recovery works differently: Tangem sells its wallets in sets of two or three cards, all sharing the same key. If you lose one card, you use the backup.

A closer look at Ledger

Ledger is the most widely used hardware wallet in the world, and for good reason. The company has been at it since 2014, and its devices use the same Secure Element chip technology found in passports and bank cards — the highest available standard for tamper-resistant key storage.

Ledger offers several models. The Ledger Nano S Plus is the entry-level option at around $79 — it connects via USB-C and covers all the essentials. The Ledger Nano X adds Bluetooth for wireless mobile use. The Ledger Flex adds a touchscreen for around $249. For most merchants, the Nano S Plus is plenty.

Setup involves downloading Ledger Live (their companion app), generating your 24-word recovery phrase — which you write down on the included card and store safely — setting a PIN, and installing the apps for the cryptocurrencies you want to use. Getting your receive address for OrangeTill is then straightforward: in Ledger Live, click Receive, select your coin, verify the address on the device screen, and copy it.

Setting up OrangeTill with a hardware wallet

The process is the same regardless of which hardware wallet you use:

1. Set up your hardware wallet following the manufacturer's instructions. Generate and safely store your seed phrase (or backup cards, in Tangem's case).
2. Find your receive address in the wallet's companion app — Ledger Live for Ledger, the Tangem app for Tangem. Select Bitcoin and tap Receive.
3. Copy that address and paste it into OrangeTill Settings under the appropriate coin. OrangeTill will validate the format and show a green confirmation.
4. Test it by sending a small amount to yourself before relying on it for real transactions.

That's the entire setup. Your hardware device doesn't need to be present when customers pay — it only needs to be available when you want to move or spend the crypto you've received.

The seed phrase still matters

Whether you use Ledger, Trezor, or a seed-phrase-enabled Tangem setup, the same rule applies: your recovery phrase is everything. Write it down on paper. Store it somewhere fireproof and private. Never photograph it, type it into any app, or store it in the cloud.

Hardware wallets protect against remote attacks — someone trying to hack you over the internet can't steal keys that are never online. But if someone physically finds your written seed phrase, they can access your funds from any device, anywhere. Physical security matters just as much as digital security.