What Is a Secure Element?
The chip that guards your keys: what a secure element does, how EAL certification works, and which hardware wallets use one.
On this page
A secure element is a dedicated microchip built for one job: to store secrets like private keys and perform cryptographic operations in a way that resists tampering and extraction. In a hardware wallet, it is the vault that holds your keys where no software, malware, or attacker can read them.
You have almost certainly used one already. The gold chip on a credit card, the chip in a passport, the SIM in your phone, and the secure enclave behind Apple Pay are all secure elements. A hardware wallet uses the same proven technology to guard your crypto.
The key is generated inside the chip, used inside the chip, and never comes out. That is the whole idea.
How a secure element protects a private key
What a secure element actually is
A secure element, often shortened to SE, is not a general-purpose processor. It is a specialized chip designed from the ground up to hold sensitive data and resist attacks, both digital and physical.
That focus is what makes it different from an ordinary microcontroller. A normal chip is built to be fast and flexible; a secure element is built to keep a secret even when someone is physically attacking it with professional equipment.
Putting that same technology into a hardware wallet is a deliberate choice. Banks and governments already trust secure elements to guard cards, passports, and payment systems, so using one to protect a crypto private key applies more than a decade of proven, real-world hardening rather than inventing a new and untested approach.
Why a hardware wallet needs a secure element
Crypto ownership comes down to one thing: the private key. Whoever holds it controls the funds, and if a copy leaks, the wallet can be drained instantly with no way to recover the money.
A secure element solves this by storing the key in protected, encrypted memory that the device's main processor cannot read. When you approve a transaction, the signing happens inside the chip and only the finished signature comes out. The key itself never leaves, which is why a secure element is the heart of serious cold storage.
How a secure element protects your keys
Protection comes from several layers working together, not a single trick.
- Tamper resistance. The chip is encased so that trying to physically probe it typically destroys it or wipes the secret.
- Active monitoring. Built-in sensors watch for abnormal voltage, temperature, light, or electromagnetic interference and react if an attack is detected.
- Isolated signing. Keys never leave the chip in readable form; the signing operation happens inside and only the signed transaction exits.
- Dedicated cryptography. Purpose-built circuits generate random numbers, create key pairs, and sign transactions, with countermeasures against side-channel and fault attacks.
The attacks a secure element is built to stop
A secure element earns its certification by resisting the specific techniques a serious attacker would use to pull a key off a chip. The table below shows the main ones and how the chip fights back.
| Attack | What it is | How the secure element counters it |
|---|---|---|
| Physical probing | Opening the chip to read internal signals directly | Tamper-resistant casing that destroys the secret if breached |
| Side-channel attack | Reading power use or electromagnetic leaks to infer the key | Masking circuitry that hides power and radiation patterns |
| Fault attack | Glitching voltage or clock to force an error that leaks data | Sensors that detect abnormal conditions and lock down |
| Software attack | Malware on the connected computer trying to reach the key | Isolation; the key is never exposed to outside software |
EAL certification explained
Because you cannot see inside a chip, independent certification is how a secure element proves itself. The main standard is Common Criteria (CC), and its rating is the Evaluation Assurance Level, or EAL. The higher the number, the more rigorous the testing the chip survived.
| EAL level | What it means |
|---|---|
| EAL1 to EAL4 | Basic to moderate assurance; not enough for holding crypto keys |
| EAL5+ | High assurance; the minimum most people should accept in a wallet |
| EAL6+ | Very high assurance; used in passports and banking hardware |
| EAL7 | The highest level, used in military and government systems |
The plus sign (as in EAL5+ or EAL6+) signals extra requirements beyond the base level, such as specific defenses against side-channel attacks.
For a buyer, the practical takeaway is simple: treat EAL5+ as the floor for a wallet you trust with real money, and read a higher number as extra margin rather than a different league. Certification is one input alongside a maker's track record and open testing, not the only thing that matters.
An EAL6+ certification means trained researchers attacked the chip with professional equipment, and within the scope of the test, they failed.
What certification actually proves
Secure element vs no secure element
Not every reputable wallet uses a secure element, and this is a genuine design debate rather than a simple right and wrong.
The secure-element approach
Most leading devices, including Ledger, the newer Trezor Safe line, Tangem, and SafePal, use a certified secure element to isolate keys in dedicated hardware. The argument is straightforward: a chip proven to resist physical and side-channel attacks is the strongest place to keep a secret, and independent certification backs that up.
The open-source approach
Older or open-first designs, like the original Trezor models, instead paired a general-purpose chip with open-source firmware that anyone can audit. The argument here is transparency: you can inspect exactly how the device handles your keys rather than trusting a closed chip. Both camps have shipped safe products, so the real trade-off is hardware secrecy versus code openness.
Does a secure element make a wallet unhackable?
No single feature does. A secure element hugely raises the bar, but it is not a magic shield, and honest buyers should know its limits.
- Certification has scope. A rating proves the chip resisted defined attacks, not that no future exploit exists.
- Supply chain matters. A tampered device from an unofficial seller can undermine even a great chip, so buy new from the maker.
- User error still wins. A secure element cannot save you if you type your seed phrase into a phishing site or lose your backup.
Treat a secure element as a strong foundation that you finish with good habits.
Which wallets have a secure element?
If a certified secure element is a priority, these are common choices and their chip levels.
| Wallet | Secure element |
|---|---|
| Ledger Nano X | Certified secure element (EAL5+) |
| Trezor Safe 5 | EAL6+ secure element |
| Tangem | EAL6+ secure element (card format) |
| SafePal S1 | EAL5+ secure element, air-gapped |
| NGRAVE Zero | EAL7 secure element, the highest certified |
For the full picture, compare them in our best hardware wallets round-up.
Frequently asked
What is a secure element in simple terms?
It is a small, dedicated chip built only to store secrets and resist attacks. In a hardware wallet, it holds your private keys and signs transactions internally, so the keys never leave the chip where malware or an attacker could read them.
Why does a hardware wallet need a secure element?
Because whoever gets your private key can drain your funds. A secure element keeps that key in isolated, tamper-resistant memory the main processor cannot read, which is a much stronger guarantee than storing the key on a general-purpose chip.
What is EAL certification?
EAL (Evaluation Assurance Level) is a rating under the Common Criteria standard that measures how thoroughly a chip was tested against real attacks. It runs from EAL1 to EAL7; the higher the number, the more rigorous the independent testing the chip survived.
What do EAL5+ and EAL6+ mean?
They are the levels most relevant to hardware wallets. EAL5+ is high assurance and a sensible minimum; EAL6+ is very high assurance, the level used in passports and banking hardware. The plus sign means the chip met extra requirements, such as side-channel defenses.
Does Trezor have a secure element?
The newer Trezor Safe line (including the Safe 5) uses an EAL6+ secure element, while the original Trezor One and Model T did not, relying instead on open-source firmware. So it depends on the specific model you are looking at.
Is a secure element unhackable?
No single feature is. A secure element dramatically raises the bar and its certification proves it resisted defined attacks, but it cannot stop supply-chain tampering or user mistakes like entering a seed phrase on a phishing site. Pair it with good habits.
What is the difference between a secure element and a normal chip?
A normal chip is built for speed and flexibility; a secure element is built to keep a secret even under physical attack. It adds tamper resistance, active sensors, isolated signing, and dedicated cryptographic circuitry that a general processor lacks.
Which hardware wallet has the best secure element?
By certification level, the NGRAVE Zero uses an EAL7 chip, the highest available, while Trezor Safe 5 and Tangem use EAL6+ and Ledger and SafePal use EAL5+. Higher is stronger, but track record and usability matter too. See our best hardware wallets guide.
Does a secure element store the seed phrase?
It stores the private keys, and on many devices the seed that derives them, in protected memory. What matters is that the sensitive material stays inside the chip and is only used there; you still keep your own offline backup of the recovery phrase.
Is Common Criteria the same as EAL?
Not quite. Common Criteria (CC) is the overall international standard for evaluating security products; EAL is the specific assurance-level rating within it. When a wallet says CC EAL6+, it means it was evaluated under Common Criteria and reached that level.
Do I need a secure element to be safe?
It is not strictly required, since well-audited open-source designs also protect users. But for most people a certified secure element is the simplest way to get strong, independently tested hardware isolation for their keys.
Are secure elements used outside crypto?
Yes, everywhere. The chip in your credit card, the one in your passport, your phone's SIM, and the enclave behind Apple Pay and Google Pay are all secure elements. Hardware wallets simply apply the same proven technology to crypto keys.
See which wallets we actually recommend
Every wallet in the register was bought at our own cost and scored on one fixed standard.
Read the register →