Tamper Seals on Hardware Wallets — What We Record

Tamper-evident seals are a simple physical control for hardware wallets stored in safes. They do not prevent a determined actor with vault access, but they show whether a device was opened since the last verification.

Seal Types We Commonly See

Clients use manufacturer packaging seals, numbered anti-tamper stickers, or custom holographic labels. We record the seal type, number if present, and photograph the seal in place when permitted.

Intact Seals

An intact seal entry reads: condition intact, photograph reference CB-PHOTO-XX. The photograph is pasted or referenced in the bound log appendix.

Replaced Seals

Firmware updates or legitimate device openings require new seals. The log notes the prior seal number, reason for replacement, date of replacement, and who replaced it. Without this chain, a trustee cannot tell whether access was authorised.

Missing or Damaged Seals

We describe damage objectively—lifted corner, slice mark, discolouration—without speculating on cause. Clients may attach a written explanation on a separate sheet initialed by witnesses.

Seals Are Not a Guarantee

Seals supplement, not replace, access controls on the safe itself. Our logs treat seal condition as one data point alongside inventory and reserve snapshots.

Discuss seal conventions with your verifier during the pre-visit questionnaire so entries match your internal custody policy.