A Ledger device keeps your private key in a secure element chip isolated from your computer.

Ledger's firmware update controversy highlighted the ongoing tension between hardware wallet security and user convenience.