Hardware wallet
A hardware wallet is a dedicated physical device that stores private keys and signs transactions internally, so the secret keys never leave the device or touch an internet-connected computer. You confirm each transaction on the device itself, which limits what malware on a PC or phone can do. It is a common form of cold storage.
A common misconception is that a hardware wallet “contains” your coins; it holds the keys, while balances remain on the blockchain and can be recovered from the seed phrase if the device is lost. See hardware vs software wallets.