Keeping private keys on a device that is never connected to the internet, eliminating remote attack vectors at the cost of reduced convenience.