Your Personal keys are stored offline over a CC EAL5+ certified chip. The machine can then connect to a smartphone by using Bluetooth or to a computer via USB. While the approvals are sent among the hardware machine and also your on the web product, your precise non-public key is waiting for link from Web 2.0 Blogs (17)