Swapping without plugging in your hardware wallet

07 September 2026

Yes, you can swap assets held on a hardware wallet without ever physically connecting the device to a computer or phone. The method relies on pairing a watch-only wallet with the exchange service, while the actual signing happens later, offline, in a separate step.

How it works

A hardware wallet derives public keys without needing to be plugged in. You can extract those public keys once - when the device is connected - and then use them to create a watch-only wallet. This watch-only wallet sees your balances and addresses but cannot sign transactions. You send the unsigned swap transaction to the watch-only wallet; the exchange service processes it up to the point where a signature is required. At that moment, you connect your hardware wallet, verify the transaction details on its screen, and sign. The signed transaction is then returned to complete the swap.

The critical distinction: the hardware wallet is only needed for the signing step, which takes seconds. The entire swap negotiation, rate quotation, and transaction construction happen while the device stays safely unplugged.

Why this matters for Monero

Monero adds a complication. Its privacy model means a view key can reveal your entire transaction history. The hub page - "How to swap Monero from a Ledger without exposing the view key" - addresses this exact problem. With a standard watch-only wallet, you hand over your view key to see incoming transactions. That is a privacy leak many users want to avoid. The solution involves generating a view-only wallet that uses a derived, restricted key that shows only the outputs you choose, not your full history.

The practical steps

1. Export public keys from your hardware wallet while it is connected. Save them securely.
2. Build a watch-only wallet on a computer or phone that never touches your hardware wallet again until signing.
3. Initiate the swap through the exchange service using the watch-only wallet. The service constructs a transaction sending your asset to its address.
4. Receive an unsigned transaction file or PSBT (Partially Signed Bitcoin Transaction) or equivalent for the asset you are swapping.
5. Connect your hardware wallet, load this unsigned transaction, verify the destination address on the device screen, and sign.
6. Return the signed transaction to the exchange service. The swap completes, and your swapped funds arrive at an address your hardware wallet controls.

What you still must plug in for

You cannot avoid connecting the hardware wallet entirely. The signing step requires physical confirmation. This is not a bug - it is the security guarantee. An attacker who never needs your hardware to sign could drain your funds without ever touching the device. The brief connection is the price of self-custody.

Limitations and gotchas

• Firmware updates can change how your device derives addresses. If you update firmware between exporting public keys and signing, the watch-only wallet may generate addresses that no longer match your hardware wallet. Always check derivation paths match.
• Large balances require careful transaction batching. A single swap that moves your entire balance may create a large transaction that exceeds what some hardware wallets can sign. Splitting into smaller swaps avoids this.
• Exchange rate lock expires while you wait. Most swap services give you a rate valid for minutes. If your hardware wallet is in a safe and takes time to retrieve, the rate may change. You can restart the swap with a fresh rate.

When to use this method

Use it when your hardware wallet is stored separately from your daily computer - in a safe, a bank box, or another location. It lets you initiate swaps from anywhere, then only briefly access the device to finalise. It also helps if you manage funds for others: you can construct all swaps from a watch-only wallet, then have the key holder sign in one batch.

Do not use it if your watch-only wallet is on a compromised device. The unsigned transaction can be intercepted and replaced with a malicious one. Verify the destination address on your hardware screen every time.

Back to privacy coins