Ledger

Ledger produces hardware wallets: devices that keep private keys in dedicated hardware and sign transactions without the key ever reaching a connected computer.

That separation is the security model — malware on your computer can propose a transaction but cannot extract the key, and the device screen shows what you are actually signing.

Buy only from the manufacturer or an authorized reseller. Supply-chain tampering is a real attack, and a device that arrives with a pre-printed recovery phrase is compromised.