The short answer
We compared four cold-storage devices, Ledger Nano X, Trezor Safe 5, Ledger Nano S Plus, and Trezor Safe 3, on chip certification, price, and setup friction. Trezor Safe 5 carries an EAL6+ chip at $129; Ledger Nano X adds Bluetooth on a CC EAL5+ chip. All four keep private keys fully offline.
Why it matters
Why cold storage beats a hot wallet
The whole point of a hardware wallet is to keep your private keys somewhere the internet cannot reach them. Even on a computer riddled with malware, a thief cannot sign a transaction without the physical device and its PIN.
Software wallets store keys on a device that is online all day, which is convenient but exposed, most real-world losses come from phishing sites and malicious token approvals. A hardware wallet moves the signing step offline: your computer prepares a transaction, but the keys never leave the chip, and you approve the exact details on the device's own screen. For long-term savings. That is the difference between trusting your setup and trusting a company. If you are weighing wallet types generally, our best crypto wallets guide and the explainer on what a crypto wallet is cover the fundamentals. This is not financial advice.
Step by step
How to set one up safely
A hardware wallet only protects you if it is set up correctly. Follow these steps in order, the mistakes people make happen at setup, not later.
- 1
Buy from the official source
Order directly from ledger.com or trezor.io, never a marketplace reseller. A tampered device is the one attack a hardware wallet cannot protect you from.
- 2
Initialise it yourself
Set it up brand new. The device must generate a fresh recovery phrase in front of you. If a wallet arrives with a pre-filled phrase or a "use this PIN" card, it is a scam, stop.
- 3
Write down the recovery phrase
Record the 12–24 words on paper or metal, in order, offline. This is your only backup. Never photograph it, type it into a computer, or store it in the cloud.
- 4
Set a PIN and test recovery
Choose a strong device PIN. Then send a tiny amount, wipe the device, and restore from your phrase to prove the backup works before you trust it with real money.
- 5
Verify addresses on the device
Always confirm the receive and send addresses on the wallet screen, not just your computer. This defeats malware that swaps addresses in your browser.
Head to head
Ledger vs Trezor
These are the two names that matter in cold storage, and you cannot go wrong with either. The decision comes down to what you value: the widest support and mobile polish, or fully open, auditable firmware.
Choose Ledger if…
- You want the broadest coin and token support.
- You value a polished companion app, and Bluetooth to a phone on the Nano X.
- You want the best-value entry point, the Nano S Plus covers the essentials for less.
Trade-off: firmware is not fully open-source.
Choose Trezor if…
- Open-source, auditable firmware is a must-have for you.
- You like the Model T's touchscreen for entering your PIN and phrase on-device.
- You want a secure-element option on a budget. That is the Safe 3.
Trade-off: coin support is slightly narrower in places. Check your assets.
Buying safely: official source only
The one attack a hardware wallet cannot defend against is a device that was tampered with before it reached you. So buy directly from the manufacturer, ledger.com or trezor.io or an authorised reseller they list. Avoid third-party marketplace sellers, "discounted" units, and anything second-hand, no matter how good the deal looks.
When it arrives, check the packaging and anti-tamper seals, and set the device up from scratch so it generates a brand-new recovery phrase in front of you. Treat these as hard stops: a wallet that comes with a phrase already written down, a scratch-card PIN, or instructions to "import this seed" is a fraud. A genuine device never ships with keys.
Hardware wallet FAQs
What is the best hardware wallet in 2026?
The Ledger Nano X is our overall pick for its broad coin support and mobile Bluetooth convenience, while the Trezor Model T is the top choice for people who want fully open-source firmware. The Ledger Nano S Plus and Trezor Safe 3 are excellent lower-cost options that offer the same core cold-storage protection. All four keep your keys offline.
Is a hardware wallet really necessary?
If you hold crypto you would be upset to lose, yes. A hardware wallet keeps your private keys on an offline device, so malware or a phishing site cannot move your funds without physical confirmation on the device. For small, actively used balances a reputable software wallet can be enough, see our best crypto wallets guide for the full picture.
Ledger or Trezor, which should I buy?
Both are excellent. Choose Ledger for the widest coin support and a polished mobile app; choose Trezor if open-source, auditable firmware is a priority for you. Either one is a massive security upgrade over leaving crypto on an exchange or in a hot wallet.
Can a hardware wallet be hacked?
Remotely. It is extremely difficult, the keys never leave the secure chip and transactions require physical approval. The realistic risks are buying a tampered device from an unofficial seller, being tricked into entering your recovery phrase on a fake site, or losing the phrase itself. Buy official, and never type your seed words anywhere.
What happens if my hardware wallet breaks or is lost?
Your crypto lives on the blockchain, not the device. Buy a new hardware wallet, restore from your recovery phrase, and your funds reappear. That is exactly why protecting the phrase matters more than protecting the device.
Do I need a hardware wallet for NFTs?
For valuable NFTs, yes, the same logic applies. You can connect a hardware wallet to a software wallet so that signing happens on the device, keeping high-value collectibles in cold storage. Learn the basics in our what is an NFT explainer.