DEV Community

TildAlice
TildAlice

Posted on • Originally published at tildalice.io

Air-Gapped Signing via QR Codes: The Safest Way to Sign Crypto

OneKey Classic 1S hardware wallet
Credit-card sized, four physical buttons, a small but crisp OLED display.

Air-Gapped Signing via QR Codes: The Most Secure Way to Sign Transactions

I've been using hardware wallets for years, and the paranoia never really goes away. Every time I plug a device into my laptop, there's that tiny voice asking: "What if the USB controller is compromised?" Air-gapped signing via QR codes solves this problem completely—no cables, no Bluetooth, no physical connection at all.

What Air-Gapping Actually Means

Air-gapping is a security practice where a device is physically isolated from all networks and direct connections. In crypto, this means your signing device never touches your computer via USB, Bluetooth, or any other data transfer method.

Here's the workflow:

  1. Your hot wallet (MetaMask, Rabby, etc.) creates an unsigned transaction on your computer
  2. The unsigned transaction is displayed as a QR code on your screen
  3. Your air-gapped hardware wallet scans the QR code with its camera
  4. You review and approve the transaction on the hardware wallet's screen
  5. The wallet signs it and displays the signed transaction as a QR code
  6. Your computer's webcam scans this QR code and broadcasts the transaction

Continue reading the full article on TildAlice

Top comments (0)