Ledger Nano X Review: Specs, Bluetooth Security and Ledger Recover

Verdict: The Ledger Nano X is Ledger’s Bluetooth-capable Nano, on general sale since 28 May 2019 and still listed in Ledger’s shop at $99 in November 2026. It stores keys on an ST33J2M0 secure element certified to CC EAL5+, holds up to 100 apps and pairs with phones over Bluetooth. Newer Ledger devices (Nano Gen5, Flex, Stax) add EAL6+ chips, E Ink touchscreens and NFC. Ledger Recover, the optional $9.99 a month ID-based backup, is the feature to understand before you buy.

This review covers who makes the Nano X, its specs next to the newer Ledger line-up, the security model including Bluetooth, how Ledger Recover works and why it was controversial, Ledger’s past incidents with dates, safe setup, and phishing warnings. Facts come from Ledger’s own shop, support and academy pages, checked in November 2026. Owners of the older model should read our Ledger Nano S support guide.

Who makes the Ledger Nano X and where should you buy it?

The Ledger Nano X is made by Ledger SAS, the company behind the Nano S, Nano S Plus, Nano Gen5, Flex and Stax. Ledger sells it through shop.ledger.com and authorised resellers, and the companion app, Ledger Wallet (formerly Ledger Live), is downloaded from Ledger’s own site for Windows, macOS, Linux, iOS and Android.

Ledger is in the middle of renaming: its developer documentation says the change from “Ledger Live” to “Ledger Wallet”, and from “wallet” to “signer” for the hardware, is still in progress, so you will see both names on official pages. Buy the device new and sealed from Ledger or a reseller Ledger lists, never second-hand or from a marketplace seller you cannot verify.

What are the Ledger Nano X specs and price in 2026?

As of November 2026 Ledger’s US shop lists the Nano X at $99. It has a 1.1-inch monochrome OLED screen at 128 x 64 pixels, two buttons, Bluetooth Low Energy 5.2 for iOS and Android, a USB-C port, a battery Ledger rates at about five hours of use, room for up to 100 apps, and a CC EAL5+ ST33J2M0 secure element. It measures 72 x 18.6 x 11.7 mm and weighs 35.8 g.

Prices are Ledger’s own listings on shop.ledger.com in November 2026 and vary by region and promotion. Through Ledger Wallet the Nano X manages 500+ assets directly, and Ledger says thousands more are reachable through third-party wallets, for a total it puts at 15,000+ coins and tokens.

Is the Ledger Nano X safe?

For keeping keys away from malware, yes. The Nano X signs transactions inside its secure element and shows the details on its own screen, so a compromised computer or phone cannot approve a payment without your button press. Ledger’s two best-known incidents, in 2020 and 2023, hit customer data and a software library rather than the secure element itself.

Two limits are worth knowing. First, the Nano X’s chip is rated EAL5+, one level below the EAL6+ chips in the Nano S Plus, Nano Gen5, Flex and Stax. Second, Ledger’s operating system is only partly open: Ledger Wallet is open source under an MIT licence and most device apps are public, but the low-level code that talks to the secure element stays private because Ledger’s agreement with STMicroelectronics forbids publishing it. Ledger says a third-party lab audits the OS before each release.

Is Bluetooth on the Nano X a security risk?

Ledger’s security model says Bluetooth on the Nano X carries only public data, such as addresses and unsigned transactions. Private keys and the recovery phrase never leave the secure element, pairing uses numeric comparison with an ECDH key exchange and AES encryption, and every signature still needs a physical button press. You can switch Bluetooth off and use the USB-C cable only.

Ledger’s January 2019 security post concedes one weaker case: older Android versions without numeric-comparison pairing could let a nearby attacker set up a rogue pairing, though the user would still have to approve each transaction on the device. If that bothers you, disable Bluetooth in the device settings.

How does Ledger Recover work and should you use it?

Ledger Recover is an optional subscription, provided by Coincover, that backs up your recovery phrase using your identity. The secure element encrypts the seed’s entropy and splits it into three fragments held by Coincover, Ledger and EscrowTech. To restore, you pass two online identity checks and two of the three fragments are sent to a Ledger device and recombined. Ledger lists it at $9.99 (EUR 9.99) a month.

• Opt-in only: Ledger says the service activates only with explicit consent on the device and your PIN. Without it, nothing leaves the device.
• Who can use it: eligibility depends on where your ID was issued: the US and Canada (passport, national ID or driving licence), the EU and UK (passport or national ID), and about two dozen further countries including Australia, Japan and Singapore (passport only). Check Ledger’s Recover page for the current list of compatible devices.
• Payments: subscriptions renew automatically and can be cancelled at any time. Ledger’s shop page lists a EUR 50 administration fee plus any balance to reactivate a suspended subscription.

When Ledger announced the service in May 2023, critics argued that sending encrypted seed fragments to third-party custodians, plus a government-ID requirement, undercut the point of a hardware wallet. CoinDesk reported on 16 May 2023 that Ledger denied it was a backdoor, stressed that it is optional and said it would open-source the related code. Ledger’s open-source page now lists the Recover entry points among its reviewable components. If you prefer full self-custody, skip Recover and keep a paper or metal backup as described in our seed phrase storage guide.

Has Ledger been hacked or had a data breach?

Ledger has had two notable security incidents, neither of which extracted keys from a device’s secure element. In June 2020 an attacker used an API key to reach its e-commerce and marketing database, exposing about one million email addresses and contact details of 9,500 customers. On 14 December 2023 a phished former employee’s access let attackers publish malicious versions of the Ledger Connect Kit library.

The 2020 breach, reported to Ledger on 14 July 2020, made Ledger customers lasting phishing targets: Ledger said payment data and crypto funds were safe and that it will never ask for your 24 words. In the December 2023 Connect Kit incident, Ledger says versions 1.1.5 to 1.1.7 tricked users of some Ethereum-based apps into signing draining transactions, a fix was deployed about 40 minutes after Ledger became aware, and CDN caching kept the bad file reachable for roughly five hours. Ledger recommends Clear Signing, where the device shows readable transaction details, as the defence.

How do you set up a Ledger Nano X safely?

Install Ledger Wallet from Ledger’s site, turn on the Nano X, choose a PIN on the device, then write down the 24-word recovery phrase shown on its screen, never on a computer or phone. Let Ledger Wallet run its genuine-device check, install only the apps you need, and send a small test amount before moving larger sums.

1. Check the source. A genuine Nano X comes new from Ledger or a listed reseller and generates its own 24 words on screen. Never use recovery words that someone else supplied to you, on paper or online.
2. Install Ledger Wallet from ledger.com links only. Search results for “Ledger Live” include fake pages hosted on free site builders.
3. Create a new wallet on the device and copy the 24 words in order. Ledger keeps no copy of them unless you choose Ledger Recover.
4. Verify every receive address on the Nano X screen before you share it, then follow our guide to moving crypto from an exchange to a wallet.
5. Connect apps carefully. You can pair the Nano X with software wallets such as MetaMask for Ethereum-based apps, but read every request on the device before you approve it.

How do you spot fake Ledger emails, apps and devices?

Treat any message that asks for your 24 words as a scam: Ledger states it will never ask for them. Real Ledger pages sit on ledger.com and its subdomains such as shop.ledger.com and support.ledger.com. Fake “Ledger Live” download pages, letters and emails claiming your device must be “synchronised” or “upgraded”, and second-hand devices sold with recovery words already supplied are the common traps.

The 2020 data leak means many Ledger buyers’ email and postal addresses are in criminal hands, so be suspicious of anything personalised. Check the domain letter by letter, open Ledger Wallet yourself rather than following a link, and confirm what you are signing on the device screen. If a site asks you to type the recovery phrase into a computer, close it.

How does the Nano X compare with Trezor and other Ledger models?

The Nano X is the lowest-priced Ledger with Bluetooth, at $99 in November 2026, but it has the older EAL5+ chip and a small screen. The $59 Trezor Safe 3 offers an EAL6+ chip and fully open-source firmware without wireless, while the $129 Trezor Safe 5 adds a colour touchscreen. Ledger’s Nano Gen5 and Flex add NFC and larger E Ink screens.

Our Trezor review and the Ledger vs Trezor vs Coldcard comparison go deeper on the alternatives, and our wallet guides hub explains software and hardware wallets from the start. A hardware wallet helps most when you hold long-term savings in coins such as Bitcoin rather than leaving them on an exchange.

Crypto assets are volatile, and this review is not financial advice.