Choosing a Hardware Wallet

What a hardware wallet is actually for

A hardware wallet is a small device that generates and stores your private keys offline, and signs transactions without ever exposing those keys to an internet-connected computer or phone. The alternative — keeping coins on an exchange, or a key in a software wallet on a normal computer — means trusting that computer, or that exchange, to never be compromised. A hardware wallet narrows the attack surface to the device itself, which is deliberately built to do one thing.

None of this is financial advice, and a hardware wallet doesn't protect you from the one mistake that defeats every device on this list: typing your seed phrase into a website, an app, or telling it to anyone. See the glossary's seed phrase entry, which is flagged for exactly this reason.

Three options, compared

Prices and lineups change; treat the table above as a snapshot, not a live feed — this page doesn't auto-update from any pricing API, in keeping with the rest of the site.

Not sure yet? Answer three questions

Who each one actually fits

Why Ledger isn't on this page

Ledger is one of the best-known names in this space, and it's deliberately left off the comparison above rather than just quietly omitted. Two facts, both checkable, explain why:

Its secure element firmware is closed source. Unlike the other three devices here, independent researchers can't audit what Ledger's firmware actually does — you're trusting the company's word, not verifiable code. That's a meaningfully different security model from "open source, audit it yourself."

In May 2023, Ledger announced (then paused after backlash) a feature called Ledger Recover — an opt-in service that would encrypt a user's seed, split it into fragments via Shamir's Secret Sharing, and store those fragments with three custodians (including Ledger itself) for identity-verified recovery. Whatever its intent, the announcement proved something the security community had long assumed was architecturally impossible: Ledger's closed-source firmware has the technical capability to export a user's seed off the device. Critics called that capability itself a backdoor, regardless of whether any individual user opts in — because with closed-source firmware, no outside party can independently confirm which capabilities exist in any given update, opted-in or not.

Self-custody's entire premise, laid out in the glossary, is "no counterparty to fail." A device whose vendor has demonstrated — by their own announcement, not a leak or an accusation — that the seed can leave the device under closed-source firmware undermines that premise enough that this page doesn't recommend it or link to it. This is a judgment call, not an independently audited fact about current firmware behavior; readers who've done their own research and reach a different conclusion should trust that research over this paragraph.

The one rule that outranks this whole page

Buy directly from the manufacturer or an authorized reseller, never a marketplace listing or a used device from someone you don't know — a tampered device is a real, documented attack vector. Set it up yourself, write the seed phrase down on paper (never a photo, never a password manager, never typed anywhere), and verify the device's authenticity check on first setup. Every wallet on this page explains this in its own setup flow; follow it.

Common comparisons, answered directly

Where to get one