The unsigned transaction is moved to the offline wallet and signed with the private key. The signed transaction is then moved back to the online wallet which broadcasts it to the network . Because the offline wallet never gets connected to the internet, its stored private keys remain secure.