Hardware Security Module
ELI5 — The Vibe Check
An HSM is a physical device that generates, stores, and uses cryptographic keys without ever exposing them. The keys are literally trapped inside tamper-proof hardware. Try to break in physically? The device self-destructs the keys. It's the ultimate 'you can't steal what you can't touch.'
Real Talk
Hardware Security Modules are certified (FIPS 140-2/3) physical devices for secure cryptographic key management and operations. Keys are generated and used inside tamper-resistant hardware and never exported in plaintext. HSMs back cloud KMS services, PKI infrastructure, and payment processing.
When You'll Hear This
"Our root CA keys are in HSMs — they've never existed outside that hardware." / "Cloud KMS is backed by HSMs, but for the highest compliance you need CloudHSM with dedicated hardware."
Related Terms
Certificate Authority (CA)
A Certificate Authority is like the DMV of the internet — a trusted organization that vouches for websites' identities.
Key Management Service
A Key Management Service (KMS) manages your encryption keys so you don't have to.
Secure Enclave
A Secure Enclave is a tiny, isolated computer inside your computer that handles the most sensitive stuff — biometric data, encryption keys, payment info.