Compare our in-depth reviews of the two most established hardware wallet makers. The full breakdowns live on their own pages — the Ledger Wallet Review and the Trezor Wallet Review — and this page summarises the decision: what a hardware wallet is for, how the two brands differ, and what to check before you buy.
What Is a Crypto Hardware Wallet?
A crypto wallet is the tool that holds the private keys you need to spend your coins, and a hardware wallet is the version that keeps those keys offline. Your coins never actually live inside the device — they live on the blockchain as entries in a public ledger. What the wallet stores is the private key that proves you control a given address, and it is the private key that a thief actually wants. A hardware wallet keeps that key on a dedicated chip that stays disconnected from the internet, so it cannot be copied by malware running on your computer or phone.
The two brands our team indexed here are Ledger (rating 8.8) and Trezor (8.6), the two hardware wallet makers with the longest track records in the market. Ledger is a Paris-based maker founded in 2014 that has sold more than eight million devices; Trezor, part of the SatoshiLabs Group in the Czech Republic, released its first device in 2014 and is widely credited with inventing the category. Both are non-custodial: you, not the company, hold the recovery phrase that can rebuild your wallet, and neither company can spend or freeze your funds.
Hardware wallets are one point on a spectrum, not a universal answer. A software wallet on a clean device is cheaper and faster but shares its keys with the operating system. Keeping coins on an exchange means trusting the exchange to stay solvent and to honour withdrawals. A hardware wallet moves the risk from software to a physical object: you now have to protect a device and a written seed phrase against loss, theft and fire, and the trade-offs change with every model — see the comparison below.
How Hardware Wallets Work
The core idea is that the signing key never leaves the device. When you set a wallet up, the device generates a seed phrase — a list of words that is the human-readable form of your private key — and shows it once on the screen. You write it down and store it somewhere safe. Every transaction after that is signed inside the device’s secure chip, and only the finished signature is sent to the computer or phone, which broadcasts it to the network.
Two details matter more than most buyers realise. The first is the confirmation step: a hardware wallet shows the destination address and amount on its own screen, so even a compromised computer cannot silently rewrite where the money goes — it can only ask you to approve the wrong thing, which is why reading the screen before every confirmation is the habit that stops most attacks. The second is the seed phrase itself. Anyone who obtains those words can rebuild the wallet on another device and empty it, without ever touching your hardware. That makes the paper or metal backup the real target, not the device.
Both brands here use a certified Secure Element to hold keys: a chip designed to resist physical extraction and rated CC EAL6+ on most current models (Ledger’s Nano X uses the older CC EAL5+ rating). Trezor pairs its EAL6+ chip with fully open-source firmware, while Ledger publishes its companion app and device apps openly but keeps low-level firmware partly closed. The practical difference is auditability versus a tighter hardware boundary — a trade-off we score separately rather than declaring one approach categorically better.
Ledger vs Trezor Compared
The short version: Ledger has the wider model range and deeper coin support inside its own app, while Trezor leans on open-source firmware and a simpler three-model line-up. The table sets out the two line-ups as recorded in our fact bank; prices are the late-September 2026 figures from each maker’s shop and change with region, taxes and promotions.
| Wallet | Rating | Current models | Secure Element | Firmware | Price range |
|---|---|---|---|---|---|
| Ledger | 8.8 | Stax, Flex, Nano Gen5, Nano X, Nano S Plus | CC EAL6+ (EAL5+ on Nano X) | Partly closed | €49 to €399 |
| Trezor | 8.6 | Safe 3, Safe 5, Safe 7 | EAL6+ OPTIGA Trust M (Safe 7 adds a second chip) | Open source | €59 to €249 |
Ledger’s line-up. Five current signers split into two groups: the touchscreen Stax, Flex and Nano Gen5, and the button-operated Nano X and Nano S Plus. The touchscreen models add a Transaction Check layer that screens a transaction through Blockaid before you sign — an extra warning, not a substitute for reading the screen. The Nano S Plus is the budget entry at €49 / $59, while the Stax tops the range at €399. All five work with the Ledger Wallet app (formerly Ledger Live).
Trezor’s line-up. Three current models, each also sold as a Bitcoin-only edition at the same price. The Safe 7 is the flagship at €249 with a colour touchscreen, Bluetooth, wireless charging and full iPhone signing; the Safe 5 adds a colour touchscreen at €129; the Safe 3 is the €59 entry with a monochrome screen and two buttons. On an iPhone, the Safe 3 and Safe 5 are limited to balances, buying and receiving — full phone signing needs the Safe 7. All three run Trezor Suite.
Coin support. Ledger supports 500+ coins natively in its app and thousands more through third-party wallets; Trezor supports thousands of coins and tokens through Trezor Suite. Both cover the majors — Bitcoin, Ethereum and Solana across 100+ chains on Ledger’s side — but a specific token you hold may be supported on one and not the other, so check the asset list before you buy rather than after.
Which to pick. If you want the widest model range, a touchscreen option and the deepest native asset coverage in one app, Ledger is the stronger default. If open-source firmware and full phone signing on the flagship matter more than model variety, Trezor is the pick. Neither is meaningfully “safer” in the abstract; the deciding factors are the specific model’s screen and chip, and whether the software’s openness matters to you.
Ledger Models, Ranked
Five devices cover two jobs: the button-operated Nano S Plus and Nano X are compact backup signers, while the Stax, Flex and Nano Gen5 are touchscreen daily drivers. All five sign offline, run the same companion app and share the same core recovery flow; they differ in screen, connections and extras.



| Model | Screen | Connections | Secure Element | Battery | Price |
|---|---|---|---|---|---|
| Stax | 3.7-inch curved E Ink touchscreen | USB-C, Bluetooth, NFC, Qi | CC EAL6+ | Up to 10h / 150 tx | €399 / $399 |
| Flex | 2.8-inch E Ink, Gorilla Glass | USB-C, Bluetooth, NFC | CC EAL6+ | Up to 10h / 150 tx | €249 / $249 |
| Nano Gen5 | 2.8-inch monochrome E Ink touchscreen | USB-C, Bluetooth, NFC | CC EAL6+ | Up to 10h / 150 tx | €179 / $179 |
| Nano X | 1.1-inch OLED, two buttons | USB-C, Bluetooth | CC EAL5+ | Up to 5h | €99 / $99 |
| Nano S Plus | 1.1-inch OLED, two buttons | USB-C only | CC EAL6+ | None | €49 / $59 |
Nano S Plus (€49 / $59). The cheapest entry: a battery-free, cable-only signer with a 1.1-inch OLED screen and two buttons. Long transactions are split across several screens, and it has no Transaction Check and no Recovery Key card, and cannot sign from an iPhone. It is a fine budget or backup signer, not a daily phone companion.
Nano X (€99 / $99). Adds Bluetooth and a battery rated up to five hours, so it pairs with iPhone and Android. It shares the small screen and missing extras with the S Plus, and it is the only current model on the lower CC EAL5+ chip rating.
Nano Gen5 (€179 / $179). The first touchscreen in the Nano line, launched October 2025, with a 2.8-inch monochrome E Ink screen, Bluetooth, NFC, Transaction Check and an included Recovery Key — cheaper than the Flex.
Flex (€249 / $249). A higher-resolution 2.8-inch grayscale E Ink screen behind Gorilla Glass in an aluminium frame, same connections as the Gen5, no wireless charging.
Stax (€399 / $399). The flagship: a 3.7-inch curved E Ink display in a credit-card-sized body with Qi wireless charging, built for owners who regularly review complex contract interactions and want more of each request visible at once.
Trezor Models, Ranked
Three models, each also sold as a Bitcoin-only edition at the same price. All three run open-source firmware in Trezor Suite and share the EAL6+ OPTIGA Trust M secure element; the Safe 7 adds a second chip and is the only one that fully signs from an iPhone.



| Model | Screen | Connections | Secure Element | Battery | iPhone signing | Price |
|---|---|---|---|---|---|---|
| Safe 7 | 2.5-inch colour touchscreen | USB-C, Bluetooth, Qi2 | OPTIGA Trust M + TROPIC01 | 330 mAh | Full | €249 / $249 |
| Safe 5 | 1.54-inch colour touchscreen | USB-C | OPTIGA Trust M | None | Balances / buy / receive only | €129 / $129 |
| Safe 3 | 0.96-inch monochrome OLED, two buttons | USB-C | OPTIGA Trust M | None | Balances / buy / receive only | €59 / $59 |
Safe 3 (€59 / $59). The entry model with a 0.96-inch monochrome OLED screen and two buttons. It uses the same secure element as the Safe 5 and ships with two 20-word backup cards. On an iPhone it only shows balances and receives or buys — signing needs a desktop or Android.
Safe 5 (€129 / $129). Released June 2024, adding a 1.54-inch colour touchscreen with haptic feedback behind Gorilla Glass 3 and a newer STM32U5 microcontroller that Trezor says the 2025 Safe 3 research did not affect. iPhone support is limited the same way as the Safe 3.
Safe 7 (€249 / $249). The October 2025 flagship: a 2.5-inch colour touchscreen, aluminium body with IP54 protection, Bluetooth, Qi2 wireless charging and full iPhone signing. It pairs the OPTIGA chip with TROPIC01, a second secure element Trezor markets as auditable and designed to receive quantum-secure updates. It costs more than four times the Safe 3.
Security, Recovery and the Track Record
A hardware wallet is only as good as the key-management story around it, and the two brands have taken different paths here. Ledger launched an optional paid recovery service, Ledger Recover, that backs up an encrypted version of the seed phrase across three custodians; it is opt-in and off by default, but it is the single biggest point of debate about the brand, because it introduces a cloud dependency into a product sold on the premise of keeping keys offline. Trezor’s answer has been Multi-share Backup on the newer models, which splits the recovery data into multiple shares held separately, plus a Keep Metal plate for fire-proof physical backup.
Both companies have security histories worth reading rather than hand-waving away. Trezor’s older Safe 3 design was the subject of a March 2025 research disclosure from Ledger’s own Donjon security lab, and Trezor has disclosed past research findings and a support-portal data breach; Ledger has published numbered security bulletins over the years — including an August 2026 Ethereum app flaw it fixed in version 1.22.3 — and its 2020 e-commerce data breach is part of the public record. In every case the device security model held — the leaks were marketing databases, portals and app code, not extracted keys — which is exactly what a hardware wallet is built to survive. The lesson is the same as with any self-custody: a hardware wallet protects your keys from malware, not your name and address from a breached mailing list.
Recovery is the part most people get wrong. If you lose the device, the seed phrase restores everything on a new wallet from either brand or any BIP39-compatible alternative. If you lose the phrase, the device alone cannot help you. Write the phrase down, never store it digitally, never photograph it, and treat anyone asking for it — by email, DM or a fake support page — as a thief by definition. No legitimate wallet company will ever ask you for your seed phrase.
How We Rate Crypto Wallets
Every rating on this page is a weighted composite our team scores against the same wallet-specific rubric. We test the hardware and its companion app hands-on and re-check the figures with each update of this list.
Security (30%). The secure element’s certification level, how the device handles confirmations on-screen, firmware openness, and the quality and history of the vendor’s security disclosures. This is the heaviest weight because it is the entire reason the product exists.
Coin and asset support (25%). How many chains and tokens the device signs for natively and through its companion app, and whether a mainstream asset you actually hold is covered.
Ease of use and setup (20%). How clearly the seed phrase flow, first transaction and recovery are guided, and whether the app works the same across desktop and mobile.
Product range and ecosystem (15%). The spread of models and price points, the quality of the companion app, and whether the maker has a credible roadmap for firmware updates.
Price and value (10%). What the entry price buys you relative to the cheapest software-wallet and exchange alternatives, and whether premium models justify their premium.
Ledger’s 8.8 rests on the widest model range and the deepest native asset coverage, held back only by the partially closed firmware; Trezor’s 8.6 reflects open-source firmware and a clean three-model line-up, held back by a narrower model spread and limited iPhone support on its cheaper models. Two brands can land within a few tenths of each other and suit completely different buyers.
Two things never move a score. Commercial terms between a brand and this publication have no bearing on its rating, and any claim we cannot attribute to a verifiable source — the maker’s own comparison page, its security bulletins, or public reporting — stays out entirely. Where a fact is missing, we describe the situation in words rather than filling the gap with a number.
Before You Buy
Buy only from the maker’s official shop or a listed authorised reseller, and check the tamper-evident seal and the device’s initial firmware state when it arrives — a “pre-configured” wallet with a pre-written seed phrase is a scam by definition. Start with a small test transfer before moving a meaningful balance, keep firmware updated, and store the seed phrase somewhere that survives both a house fire and a casual glance. Prices and model line-ups change, so treat the maker’s shop as the current source of truth before ordering.
Hardware wallets reduce risk; they do not eliminate it. A device can be lost, a seed phrase can be destroyed, and a user who approves a transaction without reading the screen can still send funds to an attacker. Self-custody means the responsibility — and the full benefit — of controlling your keys is yours.
This page is editorial information, not financial, legal or investment advice. We cover the wallets and their security models, not the coins they store. Verify current specifications, prices and availability with the maker before you purchase, and never share your seed phrase with anyone.