Choosing a hardware wallet — tier first, then fit

You met this idea on the ladder, and it bears repeating once at shopping time because it reframes the whole purchase: the device is not your wallet. Your seed phrase — the list of 12 or 24 words the device shows you when you first set it up — is your wallet. The device is just a convenient, secure way to store and use it.

What that means for buying:

• A lost, stolen, or broken device is not a disaster. Buy a new one, type the words in, and you're back exactly where you were — any device can restore a seed backed up on another, as long as both follow the standard word list (called BIP-39).
• Losing the seed backup is the real disaster. No new device can recover money whose words are gone. This is the one thing that must not fail.

So if you find yourself agonizing over which device is toughest against theft, but you haven't thought hard about where those words live — you've got the priorities backwards. Pick a device you'll use comfortably, then pour your care into the seed backup.

Instead of chasing a winner, score your shortlist against these. Weight them by how you'll actually use the device.

• Air-gap capability — an "air-gap" means the device never physically connects to an internet-connected computer; it passes transactions back and forth by QR code or a memory card instead of a cable. Stricter, a little more fiddly. For most people, a device that plugs in by USB but keeps the keys locked inside is plenty. Strict air-gap earns its extra friction mainly for large, rarely-touched holdings.
• Open-source firmware — "firmware" is the device's built-in software; "open-source" means anyone can read and check that code for flaws. That's safer than trusting a company's word that their secret code is sound. Our published standard treats this as a floor, not a preference: a device whose code can't be independently inspected doesn't clear the bar at all, whatever else it does well. Between devices that clear it, more open is better.
• A secure element — a specialized chip built to resist someone who physically has your device and tries to pry the keys out. Nice to have; it matters most if a determined in-person attacker is part of your worry.
• Multisig quality — multisig ("multiple signatures") is a setup where spending needs approval from several devices, not just one, so no single device is a single point of failure. If you plan to use it, some devices handle it smoothly and quickly and others are slow or clumsy. If you're on a single-signature setup, you can largely ignore this for now.
• Vendor track record — every maker has had a bug or incident. What matters is how they responded: did they patch fast, tell people honestly, and learn? Steady, transparent history beats a flashy spec sheet.
• A UX you'll actually use — the most important and most overlooked. A device you find painful is a device you'll avoid, and an avoided wallet is an untested wallet. A full keyboard suits someone who types long passphrases; a simple phone-first device suits someone who wants no fuss. Match it to you.

A quick test for whether you're choosing on fit or on hype: can you say, in one sentence, why your pick suits your situation better than two alternatives? If not, you're buying a brand, not a fit.

How you buy and set up the device matters as much as which one you pick — a compromised device makes every other criterion on this page irrelevant.

• Buy new, direct from the maker's own website — not from a marketplace listing or a reseller. This avoids tampered units and avoids creating a public record that ties “owns a hardware wallet” to your name and address.
• Check the tamper-evident packaging when it arrives. It's a 30-second look that catches whole categories of trouble.
• Set it up yourself, from scratch. A trustworthy device generates brand-new seed words in front of you the first time you power it on — that's the whole point of it. If a device arrives already showing you a seed phrase, or with a card of pre-printed words in the box, then someone else has seen those words and the device is compromised. Don't use it; return it. What to do with the words it shows you is the next level's job — this page is only about getting an honest device into your hands.

Already own a Ledger? Know that it doesn't clear our standard: its closed firmware has proven — via its 2023 seed-backup service — that it can send your seed off the device over the internet. It still functions, and your seed is a standard one, so moving to a device that clears the bar is cheap and easy. Read the reasoning before relying on it for savings.

This one rule is worth restating at buying time, because it's the cheapest meaningful upgrade in all of self-custody.

If you set up multisig — say, three devices where any two can approve a spend — use three different brands, not three of the same. The ladder covered why: three identical devices share a single point of failure, because a flaw in that one brand touches all three keys at once. Three different makers means a problem with any one brand can compromise at most one key. It costs you nothing but a little shopping variety.

Mixing brands takes no special product. Each device just holds one key, and a piece of coordinator software — a desktop app such as Sparrow — assembles the keys into one multisig wallet (see the glossary). The hardware-wallet comparison rates each device's multisig quality alongside its price, air-gap, and open-source status, so putting a strong mixed trio together is straightforward.

Now that you know how to weigh the choice, go compare the specifics. The hardware-wallet comparison lays the mainstream Bitcoin devices side by side — price, connection type, air-gap, open-source status, multisig strength, and who each one suits — so you can match the criteria above to real options. Every device there is rated against our selection standard — built for cold storage, built for spending, or below the bar — so start from the tier that matches your job.

Prices and features shift over time, so confirm current details on the maker's own site before you buy.