An air-gapped signing setup keeps the signing device disconnected from the internet. A companion app can prepare an unsigned transaction, display it as a QR code, and scan a signed response back from the hardware wallet.
The wallet should show what it is signing
The offline device parses transaction details and signs according to its own rules. Users should verify destination, asset, amount, network, and contract actions on the device display—not only on a connected computer or phone.
Check details on the signing device
The secure display is the independent place to verify what the device is authorizing.
Air-gapping reduces one connection, not every risk
A compromised companion app can still mislead users, and recovery phrases, firmware, physical access, and supply-chain controls remain important. QR-based workflows also depend on compatible formats and correct parsing.
Offline does not mean risk-free
The wallet, firmware, recovery process, and connected companion app remain part of the security model.
Sources
Educational information, not investment advice.