Tamper evidence is any visible sign, seal, or design feature that helps show whether a device was opened, replaced, or altered after it left trusted control. Common examples include sealed packaging, breakaway labels, holograms, and enclosures that leave marks when forced open.
It matters in cyber security because many attacks start before software ever runs. A modified hardware wallet, token, or network appliance may look legitimate while hiding a malicious implant or swapped component. Tamper evidence does not guarantee safety, but it raises the chance that a buyer or operator will notice interference before using the device. Defenders use it with chain-of-custody checks, serial-number verification, and careful inspection at receipt. Attackers try to defeat it by resealing packaging, cloning labels, or making changes that are hard to spot, which is why tamper evidence is a control, not proof of integrity.