A hardware implant is a hidden component added to a device to observe, alter, or exfiltrate data. It may be built into the circuitry, attached inside the case, or inserted during manufacturing, shipping, or repair. In cybersecurity, implants matter because they bypass software defenses: if the hardware is untrusted, encryption and passwords can still be undermined by a component that captures keystrokes, copies secrets, or changes device behavior.
Hardware implants are especially dangerous in high-trust devices such as security tokens, phones, and crypto hardware wallets, where users assume the box and firmware are clean. Real-world attacks often target the supply chain or a reseller path, because that is where tampering is hardest to notice. Defenders reduce risk by verifying provenance, inspecting devices, using tamper-evident controls, and replacing any suspect hardware before entering sensitive data. If an implant is suspected, the safest response is to treat the device as compromised and move to a trusted replacement.