Tangem generates a seedless wallet’s private key inside the Secure Element when the card or ring is activated. Hardware-generated entropy supplies the randomness, the key remains in protected chip memory, and signing takes place inside the device. Choosing seed-phrase mode changes an important part of that design: the Tangem App generates a BIP39 mnemonic on the phone, creating a portable recovery secret that the owner must protect.
Last reviewed: September 30, 2026. Hardware, application behavior, supported backup modes and security documentation can change. Confirm critical steps in the current official Tangem App and documentation. Never disclose a private key, seed phrase or access code to a website or support agent. This independent guide is educational and is not financial advice.
How does Tangem generate private keys?
A private key is a secret number used to authorize blockchain transactions. It must be selected from an enormous range with enough unpredictability that nobody can reproduce it. Tangem’s seedless workflow creates this secret inside the card rather than displaying it as a recovery phrase.
- The user installs the authentic Tangem App and scans an unactivated device.
- The device and app perform an authenticity check.
- The Secure Element collects hardware-generated randomness.
- The chip creates the wallet’s secret key material internally.
- Public keys and blockchain addresses are derived from that secret.
- If backup devices are selected, the key is transferred to them through the protected backup protocol.
- An access code is applied to each device before the wallet is used.
The card does not arrive with a funded user’s private key already installed. Tangem states that wallet key generation happens during activation. This distinction helps reduce the risk of an unknown copy existing before the owner creates the wallet.
What is entropy in a crypto wallet?
Entropy is the unpredictable input used to select a private key. The word does not describe encryption strength by itself; it describes how much uncertainty exists in the key-generation process. A 256-bit-looking value can still be unsafe if it came from a small, predictable set.
Good entropy makes every possible key effectively independent and prevents an attacker from narrowing the search to likely values. Weak generation can produce valid addresses and signatures while remaining vulnerable. A wallet interface cannot reveal whether a key came from strong randomness merely by displaying a normal address.
Why generation quality matters permanently
Wallet addresses and transaction signatures are derived through deterministic cryptographic rules after setup. If the original secret came from weak randomness, later activity cannot add strength to it. The safe response to a genuinely compromised generation process is to create a new wallet with a trusted process and transfer the assets.
Seedless Tangem entropy: the hardware TRNG
Tangem documents that seedless devices use a hardware True Random Number Generator inside the Secure Element. A TRNG measures unpredictable physical effects in electronic hardware rather than relying on a simple clock, serial number or human-chosen pattern.
The raw signal requires processing. Secure random-number systems condition noisy input to remove bias, test the source for failures and produce evenly distributed output suitable for cryptographic operations. Tangem identifies the generator as certified to the German BSI PTG.2 standard under AIS 31.
TRNG, HRNG and CSPRNG
| Term | Role | Main consideration |
|---|---|---|
| TRNG or HRNG | Collects randomness from physical hardware behavior | The physical source and health tests must work correctly |
| CSPRNG | Expands secure seed material into unpredictable bytes | Its seed and implementation must be cryptographically strong |
| Entropy pool | Collects unpredictable events for an operating system | Quality depends on platform design and available sources |
| Mnemonic encoding | Represents entropy and a checksum as readable words | Words are a representation, not an extra source of randomness |
Where is the Tangem private key stored?
In the hardware-wallet design, the private key is stored in protected memory inside the Tangem Secure Element. The chip receives transaction data, performs the signing operation internally and returns a cryptographic signature. The signature can be public; the private key cannot.
The smartphone provides the interface, network connectivity and blockchain data. It can prepare an unsigned transaction and broadcast the signed transaction, but the normal seedless workflow does not require the raw private key to enter phone memory.
What the phone can see
- public wallet addresses and balances;
- unsigned transaction details prepared by the application;
- public keys needed by supported networks;
- the resulting transaction signature;
- tokens, networks and application preferences.
This information is enough to operate the interface. It is not enough to calculate a properly generated private key. However, address and transaction data can still expose financial privacy, so a protected key does not make wallet activity anonymous.
What is a Secure Element?
A Secure Element is a specialized chip designed to isolate secret material and resist software and physical extraction. It differs from ordinary storage because access rules and cryptographic operations are enforced inside a constrained environment.
Tangem describes its hardware as using a Common Criteria EAL6+ certified chip. Certification is relevant evidence about a chip’s evaluated protection profile, but it is not a promise that every possible wallet workflow is invulnerable. Application code, transaction interpretation, backup practices and user decisions remain part of the system.
Tangem seedless mode versus seed phrase mode
| Question | Seedless Tangem | Seed phrase mode |
|---|---|---|
| Where is entropy generated? | Inside the Secure Element hardware | Through the phone platform’s cryptographic random generator |
| Readable recovery secret | No mnemonic is shown | 12- or 24-word BIP39 phrase |
| Primary recovery path | Another device from the completed Tangem backup set | The seed phrase or configured Tangem backups |
| Portability | Depends on a working Tangem device | Can be restored in compatible wallets |
| Paper-secret exposure | Eliminated | Owner must secure the words |
| Loss of every device | Permanent loss if no seed exists | Recoverable while the seed remains correct and private |
Entropy in seed phrase mode
When seed phrase mode is deliberately selected, Tangem says the app obtains cryptographically secure random bytes from the operating system: SecureRandom on Android and SecRandomCopyBytes on iOS. It then encodes the entropy and checksum under BIP39.
This is not the same as extracting a seedless key from the card. A new recovery phrase is created through a different setup route. Once words are displayed, anyone who copies them may restore the wallet without possessing a Tangem card or knowing its access code.
How Tangem backup cards receive the key
A Tangem backup is not a split phrase. Each completed backup device is intended to become an independent signing copy for the same wallet. During initial setup, devices authenticate one another and establish encrypted communication through the phone.
Tangem’s published description uses device certificates, temporary key pairs and a Diffie–Hellman exchange to derive an encrypted transfer channel. The smartphone relays messages but should not receive the unencrypted wallet key. Backup must be completed as one setup procedure; an unrelated new card cannot simply be added to a finished set later.
This process solves a different problem from entropy generation. Entropy determines the original key’s unpredictability. Backup determines how controlled copies reach other trusted devices.
Can Tangem or its servers access the private key?
Tangem states that it does not receive or store the wallet private key and that ordinary blockchain operations do not require company custody. The hardware signs locally, and public blockchain infrastructure processes the transaction.
Users should understand the evidence behind that claim rather than treating it as a slogan. Relevant controls include the chip architecture, immutable device firmware, application source code, device-authentication certificates and independent security reviews. No single control replaces the others.
Immutable Tangem firmware
Tangem hardware firmware is designed to be non-updatable after manufacturing. This removes the field-update channel as a route for installing new code on an existing device. It also means a remote firmware prompt should never be part of normal Tangem card use.
The trade-off is equally important: a device cannot receive a firmware patch or new low-level capability after sale. Tangem addresses that constraint by keeping much of the evolving blockchain interface in the mobile app and by auditing the fixed firmware before deployment. If a material hardware or firmware problem required a new implementation, replacement hardware—not a firmware download—would be the expected remedy.
Firmware and app are different layers
- Card firmware: controls secure key operations and is immutable.
- Tangem App: displays accounts, builds transactions and can be updated.
- Blockchain services: provide balances, fee data and transaction broadcasting.
An app update does not rewrite the card firmware. Conversely, immutable firmware does not guarantee that every screen shown by the app is correct. The user must still verify destinations, networks, amounts and contract actions.
How Tangem checks card authenticity
Tangem devices are provisioned with manufacturer-related authentication material. During a scan, the official app can challenge the card and verify cryptographic evidence that it is recognized as an authentic Tangem device with approved firmware.
Perform this check before creating or funding a wallet. If the app reports a failed authenticity check, unexpected test device or other warning, stop. Do not continue merely because the NFC scan works or the packaging appears genuine.
Authenticity does not prove safe handling
A genuine card can still be used unsafely. Buying through a trusted channel, inspecting the package, installing the verified app and generating a new wallet are separate precautions. Never use a recovery phrase supplied on paper inside packaging, and never accept a pre-funded wallet from a seller.
What independent audits can and cannot show
Tangem cites firmware assessments by Kudelski Security and Riscure, along with later reviews of related software components. A professional audit can examine architecture, commands, NFC behavior and implementation weaknesses within a stated scope.
An audit is valuable evidence, not permanent insurance. Read its date, tested product generation, version, scope, assumptions and unresolved findings. It cannot protect a user who approves a malicious transaction or stores all backup devices together.
Can you verify the entropy yourself?
Not by examining the resulting address. A valid key generated from poor entropy looks like a valid key generated from strong entropy. Revealing internal random output for user testing could itself create a dangerous export path.
Practical evaluation therefore relies on the documented randomness source, relevant certification, design review, independent audits and incident history. Avoid improvised tests that require exposing key material, entering a seed online or installing unofficial diagnostic software.
Threats the secure chip helps address
| Threat | Relevant Tangem control | Remaining responsibility |
|---|---|---|
| Predictable seedless key | Certified hardware TRNG and internal generation | Use an authentic device and official setup |
| Key theft from phone storage | Seedless key remains in Secure Element | Do not export secrets through another workflow |
| Lost single card | Independent backup device plus access code | Create backups and separate their locations |
| Counterfeit device | Cryptographic authenticity check | Stop when verification fails |
| Brute-force access-code attempts | Attempt delays enforced by device | Choose a strong, memorable access code |
| Malicious firmware update | Firmware is not field-updatable | Recognize fake update requests |
Threats private-key isolation does not prevent
- Address substitution: malware can try to replace a recipient address before signing.
- Blind signing: a user may authorize contract data they do not understand.
- Token approvals: a malicious allowance can let a contract transfer assets later.
- Seed disclosure: seed phrase mode creates a secret usable without the hardware.
- Physical concentration: fire or theft can remove all cards stored together.
- Access-code compromise: possession of a card and its code can permit signing.
- Privacy leakage: public addresses and activity remain visible on blockchains.
- Unsupported recovery assumptions: a replacement card cannot be added to a completed backup set.
Safe Tangem activation checklist
- Obtain the wallet from Tangem or a trustworthy authorized seller.
- Install Tangem App from its verified official store listing.
- Confirm the publisher and reject cloned applications.
- Scan each card and complete the in-app authenticity check.
- Create a new wallet; never accept seller-provided recovery words.
- Choose seedless or seed phrase mode deliberately after understanding recovery consequences.
- Complete all intended backup devices before depositing meaningful value.
- Set a unique access code that is not a trivial PIN or reused account password.
- Store backup devices in separate protected locations.
- Receive a small test amount and verify the address independently.
- Send a small test transaction before relying on the wallet for larger holdings.
Seedless setup decision guide
Seedless mode may suit a user who wants to eliminate a readable recovery phrase and can maintain at least two physical signing devices in different locations. It reduces exposure to photographed, mistyped or phished seed words.
Seed phrase mode may suit a user who requires recovery outside the Tangem hardware ecosystem and already has a disciplined offline storage plan. That portability introduces a universal bearer secret: possession of the words can be sufficient to recreate the wallet.
The safer option depends on which failure is more realistic for the owner. Someone likely to lose every card may value seed portability. Someone likely to mishandle a written phrase may prefer device-only backups. Neither model eliminates the need for a tested inheritance and emergency plan.
What happens if one Tangem card is lost?
A remaining device from the same completed backup set can continue signing. The lost card still holds a usable key copy, although its access code and attempt-delay controls protect it. If the card and its code might both be compromised, move assets to a newly created wallet rather than assuming the physical device can be remotely disabled.
If every seedless device is lost or destroyed, the wallet cannot be reconstructed. Tangem does not keep a server-side copy. Our separate lost Tangem card and phone recovery guide explains the available scenarios in detail.
Common misunderstandings
- “The NFC connection sends my key to the phone.” Normal signing sends transaction data and a signature, not the raw seedless private key.
- “My access code is my private key.” The code unlocks use of a device; it is not the blockchain signing key.
- “Biometrics replace the card.” Biometrics can unlock a saved access code, but a Tangem device is still required for hardware-wallet signing.
- “A backup card contains only half the key.” Tangem backup devices are independent signing copies, not threshold fragments.
- “Immutable means the mobile app never updates.” The hardware firmware is fixed; the companion application remains updateable.
- “A secure key makes every transaction safe.” The device can securely sign an unsafe instruction approved by its owner.
- “I can add another backup card later.” Backup membership is established during the supported initial backup procedure.
Frequently asked questions
How does Tangem generate private keys?
In seedless mode, the Tangem Secure Element uses its hardware true random number generator to create the key internally during activation. Seed phrase mode uses the smartphone platform’s cryptographic random generator to create BIP39 entropy.
Where is my Tangem private key stored?
For the hardware wallet, it resides in protected Secure Element memory on each completed device in the backup set. Signing occurs inside the chip.
Can I view or export a seedless Tangem private key?
No supported seedless workflow displays or exports it. That restriction is central to the design. If portability through readable words is required, seed phrase mode must be selected when creating the wallet.
Does Tangem App know my private key?
The normal seedless design keeps the private key out of the application. The app prepares transactions and receives signatures. In seed phrase mode, the mnemonic generation workflow necessarily involves the phone environment before the phrase is loaded onto the devices.
Does Tangem store private keys on its servers?
Tangem states that it does not store users’ wallet private keys. A seedless wallet depends on its physical Tangem devices, not a company recovery account.
What entropy does Tangem use?
Seedless devices use a hardware TRNG inside the Secure Element. Current Tangem documentation identifies it as meeting the BSI PTG.2 standard under AIS 31.
Can a hacked phone steal a seedless Tangem key?
The key is designed not to enter phone memory, which limits direct extraction. A compromised phone can still show a false address, manipulate transaction data, target the access code or trick the user into approving a malicious contract action.
Can Tangem update card firmware?
Tangem describes the hardware firmware as immutable after manufacturing. Application updates can add interface and blockchain support without rewriting the firmware stored on the card.
Is seedless Tangem safer than a seed phrase?
It protects against exposure or destruction of written recovery words but makes the physical backup set essential. Seed phrases improve cross-wallet recovery while creating a secret that can be copied and used without the card.
Are Tangem backup cards key shares?
No. Each completed backup card or ring is an independent signing device holding a protected copy of the same wallet key. This is different from SLIP39 threshold shares or a multisignature wallet.
How do I know a Tangem card is authentic?
Install the official Tangem App and complete its authenticity check before creating the wallet. Stop if the verification fails or the app reports unexpected device status.
Final perspective
Tangem’s key-generation model separates two workflows that should not be confused. Seedless mode creates randomness and the private key inside a certified Secure Element, then keeps signing within the chip. Seed phrase mode creates portable BIP39 recovery material through the phone’s cryptographic facilities.
The secure element reduces key-extraction risk, and immutable firmware removes a post-sale update route. Neither protects a user from approving the wrong transaction, losing every recovery device or exposing a deliberately created seed phrase. Good security therefore combines strong generation with authentic hardware, separated backups, careful transaction review and a recovery plan that another trusted person could actually follow.
Official sources and further reading
- Tangem — How Tangem Generates Entropy for Private Keys
- Tangem — How Tangem Wallet Backs Up Private Keys
- Tangem — Immutable and Updatable Firmware
- Tangem — How to Verify Wallet Authenticity