If you hold crypto-assets yourself rather than leaving them on an exchange, the security of your private keys becomes your responsibility. A hardware wallet is one of the most common tools for that job. This guide explains how hardware wallets work, what they protect against, what they do not protect against, and how to compare models. We do not recommend a specific product; the right choice depends on your situation.

What is a hardware wallet?

Crypto-assets are not stored “in” a wallet. They exist on a blockchain. What a wallet stores are the private keys that let you authorise transactions. Whoever controls the keys controls the assets.

A hardware wallet (many manufacturers now call them “signers”) is a small dedicated device that generates and stores your private keys offline. When you want to send crypto, your computer or phone prepares the transaction, the device shows the details on its own screen, you confirm with a button or touchscreen, and the device signs the transaction internally. The private key never leaves the device.

This is different from:

• Custodial accounts at an exchange, where the provider holds the keys for you.
• Software wallets (apps or browser extensions), which keep keys on an internet-connected phone or computer. These are convenient but more exposed to malware.

What a hardware wallet protects against

• Malware on your computer or phone: even if your laptop is infected, an attacker cannot simply copy the key from the device.
• Remote theft: because signing requires physical confirmation on the device, a hacker cannot drain your wallet just by accessing your PC.
• Exchange failure: if you self-custody, your assets are not tied to a platform’s solvency. (You then carry the full responsibility yourself.)
• Address swapping: the device screen lets you verify the receiving address and amount independently of your computer screen.

What it does NOT protect against

• Losing your recovery phrase. During setup, the device gives you a recovery phrase (often 12, 20 or 24 words). If the device breaks and you lose the phrase, your crypto is gone for good.
• Someone else finding your recovery phrase. Anyone with the words can recreate your wallet on another device.
• Signing a malicious transaction. If you approve a transaction or a smart-contract permission you do not understand, the device will faithfully sign it. Many losses happen this way.
• Phishing and fake support. No genuine manufacturer will ever ask for your recovery phrase.
• Price risk. A hardware wallet secures access; it does nothing about the value of what you hold.

Criteria for choosing a hardware wallet

1. Buy from the source

Buy only from the manufacturer’s official website or an authorised reseller. Avoid second-hand devices and marketplace listings. Tampered devices, sometimes with a “pre-filled” recovery phrase card, are a known scam. A genuine device will always make you generate a new phrase yourself.

2. Security architecture

Most modern devices use a secure element, a tamper-resistant chip similar to those in bank cards and passports, certified under the Common Criteria standard (look for ratings such as EAL5+ or EAL6+). Manufacturers also differ in how much of their software is open source, meaning it can be reviewed publicly. Both approaches have supporters; what matters is that you understand the trade-offs.

3. Screen and usability

A larger, clearer screen makes it easier to check addresses and transaction details before signing. Touchscreen models are easier to use; button models are often smaller and cheaper. Some newer devices also show readable transaction details (“clear signing”) rather than raw data, which helps you spot suspicious requests.

4. Connectivity

Options include USB-C, Bluetooth and NFC. Bluetooth is convenient for phones (especially iPhones), while some users prefer cable-only devices to reduce the number of wireless interfaces. Data sent via Bluetooth is designed to be useless without your physical confirmation, but the choice is a matter of preference.

5. Supported coins and apps

Check that the device supports the specific networks and tokens you use, both in the manufacturer’s own app and via compatible third-party wallets. “Thousands of coins” claims usually include support through third-party software.

6. Backup options

Standard backups are a written recovery phrase. Some devices support multi-share backups (splitting the backup into several parts, of which a minimum number is needed to restore), metal backup plates for fire and water resistance, or optional paid recovery services. Think about which approach you can manage reliably.

7. Track record and support

Look at how the manufacturer has handled security issues in the past, how often it releases firmware updates and how responsive its support is. No vendor has a perfect record; transparency matters.

Ledger and Trezor compared, neutrally

Ledger (France) and Trezor (Czech Republic, by SatoshiLabs) are the two best-known manufacturers. Both offer several models at different price points, roughly from tens of euros to a few hundred euros.

Ledger

• Models (as of October 2026): Nano S Plus and Nano X (button models), and the touchscreen models Nano Gen5, Flex and Stax.
• Software: the Ledger Wallet app (formerly Ledger Live), plus compatibility with many third-party wallets.
• Security: uses a certified secure element. Part of its firmware is closed source.
• Connectivity: most current models support Bluetooth; touchscreen models also support NFC.
• Backup: 24-word recovery phrase; touchscreen models come with a Ledger Recovery Key card; an optional paid service, Ledger Recover, is available for those who want it (it is controversial among some users because it involves identity verification and third parties).
• History: in 2020 a breach of Ledger’s e-commerce database exposed customer contact details, which was followed by phishing campaigns. The devices themselves were not compromised.

Trezor

• Models (as of October 2026): Safe 3 (buttons), Safe 5 (touchscreen) and Safe 7 (touchscreen, Bluetooth), each also available in a Bitcoin-only edition.
• Software: Trezor Suite, plus compatibility with third-party wallets.
• Security: known for open-source firmware and hardware designs; current Safe models also use a secure element.
• Connectivity: USB-C; Bluetooth on the Safe 7.
• Backup: supports single-share and multi-share backups (for example 20-word shares), and metal backup products.
• History: like other vendors, Trezor has dealt with phishing campaigns targeting its customers and with vulnerabilities found by security researchers in lab conditions.

Which one fits whom?

There is no objective winner. Roughly speaking, users who value open-source software and a Bitcoin-only option often look at Trezor, while users who want Bluetooth across most of the range and broad app support often look at Ledger. Many experienced users simply pick the model whose screen and workflow they find clearest. Compare current specifications on both manufacturers’ official websites before deciding.

Setting up safely

• Unbox and check for signs of tampering. Install the official app only from the manufacturer’s site.
• Generate a new recovery phrase on the device itself. Never use a phrase that came with the device.
• Write the phrase down on paper or metal. Never photograph it, type it into a computer or phone, or store it in the cloud or a password manager you do not fully control.
• Set a strong PIN.
• Send a small test transaction first and practise restoring the wallet before you rely on it.
• Keep firmware up to date, but only through the official app.
• Consider a passphrase (an extra word) only if you fully understand it; forgetting it means losing access.

Bottom line

A hardware wallet is a strong tool for protecting private keys, but it shifts responsibility to you. The biggest risks are not technical: they are losing your recovery phrase, giving it away to a scammer, or approving a transaction you do not understand. Choose a device you find easy to use, buy it from an official source, and protect your backup as carefully as the device itself.

Sources: official product and support pages of Ledger and Trezor (checked October 2026). This article contains no affiliate links and neither manufacturer has paid for it.