Ratings · Documented, not tested
Hardware wallets
A hardware wallet has exactly one job: make sure that what you see on its screen is what you actually sign. We scored these on the chip, on whether the code running on it can be read and rebuilt by anyone, and on whether your seed is allowed to leave — because a wallet you cannot escape is not self-custody.
The short answer
The best crypto hardware wallet in our ranking is the Coldcard Q, because it parses and shows every output of every transaction on its own screen and never has to touch a computer. The catch is that it holds only bitcoin. For a cold wallet that also handles Ethereum and other coins, the BitBox02 leads on open, reproducibly built firmware, and the $79 Blockstream Jade is the value pick for bitcoin. We scored chips, licences, build reproducibility, seed portability and incident records from documentation checked on July 14, 2026, without buying the devices.
The verdict
measured July 14, 2026
Shows you every output, every time — because it is Bitcoin-only and has no blind-signing surface at all. Fully air-gapped. And useless if you hold anything else.
Apache-2.0, reproducible builds, published schematics, no incidents. Its one weakness: the audit is named but the report was never published.
Open, reproducible, and it shows you what you sign. No secure element, and Blockstream says so plainly instead of hiding it.
What we did
We read the certificates, the licences, the build-reproducibility docs and the incident record — not the marketing. We did not buy the devices: that is Level C evidence and we say so rather than implying we plugged them in.
The thing nobody weights properly
When a hardware-wallet company leaks its customer list, it publishes the names, home addresses and phone numbers of people known to hold crypto.
That is not a privacy inconvenience to be listed under “cons”. In 2020, roughly 272,000 Ledger customers had exactly that dumped in public, and the documented consequence was extortion emails and physical threat letters arriving at their homes. It happened to Ledger again in January 2026. Trezor leaked names and emails — no addresses — in 2024. We give this its own criterion, at 10%, because the industry treats it as a footnote and the people it happened to do not.
The ranking
13 rated
Click a row for the quick read, or open a company for its per-criterion scores and full profile.
Guide
Understanding hardware wallets
What a hardware wallet does
A hardware wallet keeps your private key on a separate device and signs transactions there, so the key never sits on an internet-connected computer. The phone or laptop builds the transaction; the device shows it, you approve it on the device, and only the signature leaves.
That makes the device's screen the part that matters most. If malware on your computer swaps the destination address, the hardware wallet is the second screen that should catch it. Ledger's developer documentation calls the principle "what you see is what you sign". A device that cannot show you what you are approving, such as one with no screen, gives up most of that protection.
"Cold wallet" and "cold storage" are the broader terms for keeping keys offline. A hardware wallet is the most common way to do it, though a paper backup alone is also cold storage. Our explainer on what a hardware wallet protects you from covers the threat model in more depth.
How to choose a cold wallet for crypto
Each of our criteria guards against a specific way people lose money or privacy, and the weights reflect how often each one is the cause.
- Security architecture (30%): guards against firmware you cannot check. Open firmware with reproducible builds means anyone can compile the code and confirm it matches what shipped, which Trezor's own documentation describes as verifying that a build is identical to the official firmware.
- Clear signing (15%): guards against approving a malicious contract call. Bitcoin-only devices can show every output; EVM devices depend on decoding calldata and typed messages under EIP-712, and fall back to blind signing when they cannot.
- Recovery and seed portability (15%): guards against lock-in. A BIP39 seed should restore in a rival vendor's device.
- Company and customer-data safety (10%): guards against your name and home address ending up on a list of known crypto holders.
- Connectivity and air-gap (10%): guards against attacks over USB or Bluetooth. QR and microSD devices never connect.
- Assets (8%), price (7%) and maintenance (5%): what the vendor supports, what you actually pay, and whether firmware updates keep coming.
A secure element is a tamper-resistant chip that makes extracting the key with physical access much harder. Its certification level is only meaningful with a certificate you can look up; Keystone, OneKey and SafePal are examples in our table where the claimed level could not be matched to a published certificate.
What hardware wallets cost
Vendor store prices in July 2026 ran from about $50 to $397. The SafePal S1 is around $50, the Trezor Safe 3 $59, the Blockstream Jade $79, the Trezor Safe 5 $129, the Keystone 3 Pro $149, the ELLIPAL Titan 2.0 $169, the Coldcard Q $249.21, the OneKey Pro $278 and the GridPlus Lattice1 $397.
Price tracks security only loosely. The Trezor Safe 3 pairs an EAL6+ secure element with reproducible firmware at $59, while several devices at twice that price offer firmware nobody outside the company can rebuild. There is no ongoing fee for any device; the cost after purchase is network fees and whatever the companion app charges on swaps, which our software wallet ranking measures.
What has gone wrong
The incidents on record are mostly about customer data and supply chains, not broken chips. Ledger's 2020 e-commerce breach published the names, postal addresses and phone numbers of about 272,000 customers, and a second exposure through payment partner Global-e followed in January 2026. In December 2023 a phished former employee's npm account was used to push a drainer into Ledger Connect Kit; about $600,000 was taken and Ledger reimbursed users. Trezor's January 2024 support-portal breach exposed contact details of up to 66,000 users.
Physical attacks exist but need the device in hand. Ledger Donjon showed in 2025 that the Trezor Safe 3's microcontroller could be glitched with desoldering, Kraken Security Labs bypassed the SafePal S1's tamper detection in 2021, and Unciphered unlocked a OneKey Mini in 2023 before a patch. Buying directly from the vendor and checking the device on arrival is the practical defense.
Setting up, and getting out
Setup is where most of the risk is decided. Generate the seed on the device itself, write it down offline, and never photograph it or type it into a computer. A device that arrives with a seed already written on a card has been tampered with. Our step-by-step guide to setting up a first hardware wallet walks through it.
Getting out depends on the backup format. A standard BIP39 seed from Coldcard, BitBox02, Trezor or Ledger restores into another vendor's wallet, so a lost or broken device costs you the hardware and nothing else. Tangem's default backup is more Tangem cards rather than an exportable seed, and Cypherock splits key shares across cards whose code is not open, so check the recovery path before you fund either.
If you are moving coins off an exchange, send a small test amount first, confirm the receiving address on the device screen rather than the computer, then send the rest.
Before you choose
7 checks- Buy from the vendor's own store, not a marketplace reseller, and reject any device that ships with a pre-filled seed card.
- Look up the secure element's certificate number with the certifying body rather than trusting an EAL claim on the box.
- Check whether the vendor documents reproducible builds and whether its firmware licence is OSI-approved.
- Confirm the device supports BIP39 and test-restore your seed on a second wallet before depositing a large balance.
- Sign a small test transaction and confirm the device shows the full destination address and amount on its own screen.
- Decide whether you need USB, Bluetooth or a full air gap, and pick a device whose connections match.
- Check the firmware release history on the vendor's public repository for updates in the past few months.
Terms on this page
8 terms- Cold wallet
- Any setup where the private key is kept off internet-connected devices. A hardware wallet is the most common form.
- Secure element
- A tamper-resistant chip designed to keep secrets from being extracted even by someone who holds the device.
- EAL (Common Criteria)
- An assurance level awarded after a lab evaluation under the Common Criteria standard. It only counts when a certification body has published the certificate.
- Clear signing
- The device decodes a transaction into readable fields such as recipient, amount and action, and shows them on its own screen before you approve.
- Blind signing
- Approving a transaction the device cannot decode, usually shown as a hash or raw data. Most drainer losses happen here.
- Reproducible build
- Firmware that anyone can compile from the published source and get a byte-identical result to the official release.
- Air-gapped
- A device that never connects by USB, Bluetooth or Wi-Fi and passes data only by QR code or memory card.
- PSBT
- Partially Signed Bitcoin Transaction, a standard format that lets a computer prepare a transaction and a hardware wallet sign it separately.
How we scored this
weights sum to 100A hardware wallet has one job: make sure that what you see on its screen is what you actually sign. We rank these on the chip, on whether the code that runs on it can be read and rebuilt by anyone, and on whether your seed can leave — because a wallet you cannot escape is not self-custody.
Security architecture30%
Secure element: present or not, which chip, and the actual certification level (EAL5+, EAL6+) as published by the certifying body rather than the vendor’s marketing. Then the three questions vendors like to blur into one: is the firmware open source, is the hardware design open, and are the builds REPRODUCIBLE — can you verify that the binary on your device was built from the source you just read? Audits count only when the firm is named and the report is public.
Clear signing15%
Its own criterion, not a footnote to UX, because this is the hole the money actually leaves through. Does the device parse and display what you are signing — the ERC-20 approval amount, the swap destination, the EIP-712 payload — or does it show you a hash and ask you to trust the computer it is plugged into? Read from vendor documentation and firmware source. NOT hands-on: we have not bought these devices, and we say so rather than implying we pressed the buttons.
Recovery and seed portability15%
BIP39, SLIP39/Shamir, passphrase support. The decisive question: can the seed be restored into a DIFFERENT vendor’s wallet? If it cannot, that is vendor lock-in, and it loses points — the entire premise of self-custody is that you can walk away from the company that sold you the device.
Company and customer-data safety10%
Jurisdiction, ownership, and the history of customer-data leaks. This carries more weight than it looks: when the buyer list of a hardware wallet leaks, it publishes the names, home addresses and phone numbers of people known to hold crypto. That is a physical-safety event, not a privacy inconvenience, and it is scored as one.
Connectivity and air-gap10%
Is the device fully air-gapped (QR or SD only), or does it require USB or Bluetooth? Which software wallets it interoperates with, from vendor documentation.
Assets and networks8%
What the official support list actually contains, and — importantly — whether support is native on the device or delegated to third-party software with caveats. This is the vendor’s own claim; we mark it as such, because verifying it properly means buying the device and trying ten coins, which is Level C and which we have not done.
Price and true cost7%
Vendor store price, plus any accessory the device genuinely needs to be usable. A cheap device that requires a paid dongle is not a cheap device.
Maintenance5%
Firmware release cadence and how long old models keep receiving updates — counted from the public repository’s release history, not from a promise on the website.
Disqualifies a company outright
- — A closed-source device whose seed cannot be restored elsewhere — you would be trusting a company you cannot audit and cannot leave.
- — A known unpatched vulnerability that extracts the seed with physical access.
- — A vendor that has leaked customer addresses and has not changed its data-retention practice.
Weights sum to 100. A criterion we cannot verify is deleted, not guessed. Full methodology →
Is there a free alternative?
The winner costs $249 and the runner-up costs $79. The difference between them is not security.
Blockstream Jade is $79, fully open source, reproducibly built, and shows you every output before you sign. It has no secure element at all — and Blockstream says so openly rather than burying it. That is a real trade-off, not a defect: a secure element resists someone who has your device in their hands, and for most people the realistic threat is a malicious transaction on the screen, not a laboratory attack on the chip. If your threat model is a thief with lab equipment, pay for the chip. If it is a drainer contract, the $79 device that shows you what you are signing is doing the job that actually matters.
What changed since last time
1 entry- 2026-07-14Category rebuilt. The previous wallet rating scored five devices on a soft rubric including a "support" criterion we never measured.It contradicted our own published methodology, so it is gone.
Questions
9 questionsWhy does Ledger rank eighth when it has the best secure element?
Because a secure element is not the only thing a hardware wallet company can get wrong. Ledger's chip is genuinely the best here — EAL6+ — and its clear-signing engine decodes contract calls better than Trezor's. But the firmware is still not open source in 2026: Ledger's own developer documentation says the secure-element firmware is under NDA and closed, so you cannot reproduce the binary running on your device from source you have read. And Ledger has leaked its customer list twice. The 2020 breach put the names, home addresses and phone numbers of roughly 272,000 crypto holders into public circulation and produced documented extortion and physical threat letters; it happened again in January 2026 through a payment partner. For a company whose customer list is by definition a list of people known to hold crypto, that is a physical-safety failure, not a privacy one.
A Bitcoin-only device wins? Is that useful advice?
It is honest advice, which is not the same thing, and we say so in the card itself. The Coldcard Q wins on the criterion that actually decides whether people lose money — it shows you exactly what you are signing, always — and it does that precisely because it is Bitcoin-only and therefore has no EVM blind-signing surface. If you hold anything other than Bitcoin, it cannot help you, and that is a categorical exclusion rather than a compromise. The property that makes it safest is the property that makes it useless to you.
Why does the Tangem card score zero on clear signing?
Because it has no screen. It signs whatever the phone tells it to sign. The entire purpose of a hardware wallet is to give you a trusted second screen that a compromised computer cannot lie to you through — and this device does not have one. That is not a harsh reading; it is the architecture.
Did you actually test these devices?
No, and we will not pretend otherwise. Buying them is Level C evidence and we did not spend the money. So this rating scores what is documented and checkable: the chip and its certificate number, the licence, whether the firmware builds are reproducible, who audited it and whether the report is actually published, the incident record, and whether your seed can be restored into a rival's device. Where a criterion would have required our hands on the buttons, it is read from vendor documentation and labelled that way rather than dressed up as a field test.
What does "reproducible builds" mean and why does it carry so much weight?
It means you can take the published source code, compile it yourself, and check that the binary you produced is byte-for-byte identical to the firmware the vendor shipped. Without it, "open source" tells you what the company says the code is — not what is actually running on the device in your hand. Trezor, BitBox and Blockstream document it. Ledger cannot offer it, because the OS binary is not published at all.
Is a cold wallet the same as a hardware wallet?
Not exactly. A cold wallet is any arrangement that keeps the private key offline, and a hardware wallet is the most common device for doing it. The difference matters in practice: a hardware wallet can still connect over USB or Bluetooth to sign, while a fully air-gapped model such as the Coldcard Q or Keystone 3 Pro passes data only by QR code or memory card.
Which hardware wallet is best for Ethereum and altcoins?
In our ranking the BitBox02 is the strongest general-purpose device, with Apache-2.0 firmware and documented reproducible builds, though its coin list is narrower than Ledger's. Ledger's clear signing decodes contract calls best where a descriptor exists, but its firmware is closed. For heavy DeFi use, how well the device displays approvals matters more than how many coins it lists, so test a small approval first.
What happens if my hardware wallet is lost or breaks?
Your coins are not on the device, so with a BIP39 recovery phrase you restore them on a replacement or a different vendor's wallet. The risk is the backup, not the hardware. If the seed is lost along with the device, nobody can recover the funds. Devices with non-standard backups, such as Tangem's card-based default, need their own recovery path, so learn it before you need it.
Do I need an air-gapped hardware wallet?
You need one if you want to remove USB and Bluetooth as attack paths entirely, which suits larger balances and people who sign rarely. An air gap does not fix blind signing: a QR-only device that cannot decode a contract call is still asking you to trust it. Our guide to air-gapped wallets explains when the extra steps are worth it.
Sources for the guide
5 sourcesHow this is funded
It is not. There are no affiliate links on this page or anywhere on this site, no paid placements and no sponsored positions. Nobody in this table can buy a place in it or influence a score. The full policy →