Good fit: Power users; passphrase-heavy workflows (full QWERTY); strong multisig + BIP-85.
Watch out: Feature depth can overwhelm a first-timer. Firmware is source-available, not OSI-licensed.
Good fit: Strict air-gap by design (QR only); pleasant UX; rechargeable battery.
Watch out: QR-only signing is a little more workflow friction for routine spending. (A larger "Passport Prime," ~$299+, is a separate, more advanced device.)
Good fit: The only mainstream device with native SLIP-39; colour touchscreen; mainstream UX.
Watch out: Multi-coin device. Multisig is adequate rather than best-in-class.
Good fit: Swiss, minimalist, fully open-source; an excellent multi-vendor multisig component.
Watch out: USB-connected rather than strict air-gap. Minimalist by design — few frills.
Good fit: Genuinely good on a budget; solid multisig; Unchained integration.
Watch out: No dedicated secure element (uses a "blind oracle" model). Some multisig quirks. (A premium metal-body "Jade Plus," ~$149, is also sold.)
Good fit: Non-technical, mobile-first holders; the 2026 version now has an on-device touchscreen to verify transactions; built-in 2-of-3 recovery model.
Watch out: Fingerprint-only unlock, and it still centers on its own app and 2-of-3 model rather than open multisig with other devices. The screened 2026 hardware is new — confirm current availability.
Ledger Nano family
$79–$399 Good fit: Wide ecosystem support; fine for a holder who already owns one and has read the caveats. (Range spans Nano S Plus to the touchscreen Flex and Stax.)
Watch out: Closed-source firmware; the 2023 Recover controversy and 2020 customer-data leak. Engage those before choosing it.