Ledger vs Trezor vs Coldcard (2026): Which Hardware Wallet Fits You?

Verdict: Ledger suits people who hold many different coins and want to sign from a phone over Bluetooth. Trezor suits people who want fully open-source firmware at a lower price. Coldcard suits Bitcoin-only users who want an air-gapped, reproducible-firmware vault. Pick Ledger for the widest asset coverage, Trezor for transparency and value, and Coldcard for long-term Bitcoin cold storage.

Prices above are US-dollar list prices as of October 2026 and change often; Ledger in particular runs frequent promotions, so its store may show a lower figure. Ledger, Trezor and Coldcard are the three hardware wallets most people weigh up before buying. Ledger is a Paris company whose devices run a proprietary operating system on a certified secure element. Trezor, from Prague-based SatoshiLabs, launched its first Model One in 2013 and has kept its firmware open source since. Coldcard, made by Canada-based Coinkite, is a deliberately Bitcoin-only signer aimed at holders who want to keep their keys fully offline.

Which models are current in 2026?

As of October 2026, Ledger sells the Nano X ($99), Flex ($249) and Stax ($399), plus the budget Nano S Plus ($59). Trezor sells the Safe 3 ($59) and Safe 5 ($129), with a larger Safe 7 sitting above them. Coldcard’s current line is the Mk5 ($219) and Q ($319); the Mk4 that most older guides describe is the previous generation.

Ledger’s original Nano S has been discontinued, and its owners are steered toward the newer touchscreen and Bluetooth models. Our Ledger Nano S guide explains the upgrade path and why an unsupported device should not stay in service. On the Trezor side, the older Model One and Model T no longer appear in Trezor’s current store navigation, which now lists the Safe 3, Safe 5 and Safe 7, each also available in a Bitcoin-only firmware variant.

Coldcard renamed and refreshed its line: the Mk4 was replaced by the Mk5, which keeps the same Bitcoin-only, air-gap philosophy and adds a bigger screen and better NFC. The Q is the full-keyboard model with a QR scanner and a 3.2 inch LCD. Coinkite’s documentation includes a dedicated Mk5 versus Mk4 comparison for people upgrading from an older device.

The budget tier splits into the wired Ledger Nano S Plus and Trezor Safe 3; the mid tier is the Nano X and Safe 5; the premium tier is the Flex, Stax and Coldcard Q. Coldcard’s two models differ less in security and more in input, with the Q adding a keyboard and QR scanner for faster air-gapped workflows.

How do Ledger, Trezor and Coldcard protect your keys?

All three keep private keys inside a dedicated chip so the keys never touch an internet-connected computer. Ledger uses an ST33 secure element, certified Common Criteria EAL5+ on the Nano X and EAL6+ on the Flex and Stax, running its closed-source Ledger OS. Trezor uses an EAL6+ certified secure element with open-source firmware. Coldcard splits the secret across two secure elements from different vendors.

Ledger concentrates trust in one chip. The Nano X uses an ST33J2M0 secure element, while the Flex and Stax use the ST33K1M5 at EAL6+. Keys are generated and signing happens inside this chip, and Ledger OS runs third-party apps in isolation from one another so one faulty app cannot reach another’s keys.

Trezor splits the work between a general-purpose microcontroller and its EAL6+ certified secure element. Because the firmware is open source, outside researchers can read it, and Trezor has shipped fixes after public security disclosures. You enter the PIN and any passphrase on the device itself rather than on the host computer.

Coldcard stores keys across two secure elements from different vendors, which means an attacker would need to defeat two independent chips. Coinkite’s specification names them as Microchip’s ATECC608 and Maxim’s DS28C36B, and says the master secret is split across the main processor and both elements to reduce dependence on any one chip. Its firmware is open source and reproducible, and the device defaults to a locked-down state: USB, NFC, QR and the virtual disk are all off until you enable them.

A passphrase, sometimes called a 25th word, adds a second secret on top of your recovery phrase. All three brands support it, and Trezor and Coldcard let you enter it on the device itself. Losing the passphrase means losing access to the hidden wallet it protects, even if you still hold the recovery phrase.

Which hardware wallet is open source?

Trezor and Coldcard publish their firmware as open source; Coldcard’s firmware is also reproducible, so you can rebuild it and check that the result matches the release you downloaded. Ledger’s device firmware is closed source, although its Ledger Live app and parts of its tooling are open. Ledger pledged in May 2023 to open more of its code after the Recover backlash.

Trezor has published its firmware openly since its early days and ships it on the Safe 3 and Safe 5. Coldcard goes one step further with reproducible builds, meaning a careful user can compile the source themselves and confirm the binary they install is what it claims to be. Open code can be audited for backdoors, which is why transparency-focused buyers rate this highly.

Ledger’s firmware is not published. Ledger Live, the companion desktop and mobile app, is open source, but the code that runs on the secure element is closed. After the May 2023 Ledger Recover controversy, Ledger said it would accelerate open-sourcing parts of its stack, including the Recover protocol, but the core device firmware remains closed.

Verifying open firmware yourself is optional, but it is the practical payoff of open source: with Trezor you can read the published code and follow its audit trail, and with Coldcard you can rebuild the firmware and compare the hash to the official release before flashing it.

Which hardware wallet supports the most coins?

Ledger supports the most assets, listing thousands across its app, with its FAQ citing 15,000+ coins and tokens and around 500+ manageable directly in the Ledger app. Trezor supports 1,000+ coins and tokens, including XRP, Dogecoin and Ethereum. Coldcard is Bitcoin-only by design, which some users treat as a smaller attack surface.

Ledger’s supported asset list spans Bitcoin, Ethereum and its tokens, Solana, Tron and many long-tail assets, with the rest reachable through third-party wallets such as MetaMask and Phantom. That breadth makes it the natural choice for people who hold Ethereum tokens or several chains at once.

Trezor’s supported coin list includes XRP (across one or two networks), Dogecoin, Ethereum, Cardano, Litecoin, Monero and many others. Some assets only work through third-party wallet apps rather than Trezor Suite, which is worth checking before you buy. See our XRP and Dogecoin explainers for the networks themselves.

Coldcard supports Bitcoin and nothing else. Its designers argue a single-coin wallet has less code to attack and fewer interfaces to misconfigure. If you only hold Bitcoin this is a feature, not a gap; our Bitcoin guide covers supply, halvings and fees.

What does Ledger Recover change?

Ledger Recover is an optional $9.99-a-month subscription announced on 16 May 2023. It splits a pre-BIP39 copy of your private key into three encrypted fragments held by Coincover, Ledger and EscrowTech, then reassembles them on your device after identity checks when you subscribe and again at restore time. The backlash came from the idea that fragments leaving the device undercut a hardware wallet’s core promise.

Recover takes the entropy behind your recovery phrase, encrypts it and divides it into three fragments. Each custodian holds one fragment in a hardware security module, and rebuilding the key requires two of the three to return their fragment to your device, where it is decrypted only after you verify your identity with two independent companies. Ledger stresses the service is optional and off by default, and that private keys never leave the device in normal use; the Recover page notes coverage varies by the country that issued your identity document. Device access varies by model: Recover works on the Nano X, Flex and Stax through the desktop and mobile app, runs on the Nano S Plus through the desktop app only, and is not available on the discontinued Nano S. Do not confuse Recover with the physical Ledger Recovery Key, a PIN-protected NFC backup card that ships with the Stax, Flex and Nano Gen5, and is not included with the Nano X or Nano S Plus by default, which use the standard recovery sheet instead.

The controversy: many users believed a hardware wallet’s firmware could never export key material. When Ledger staff posted, then deleted, a message that firmware “facilitates key extraction”, and users resurfaced an older statement that “a firmware update cannot extract the private keys”, trust cracked. Security researchers and rival wallet makers argued that shipping encrypted fragments to three custodians changes the threat model and adds identity-theft and subpoena risk. Ledger delayed the launch, apologised and promised to open-source the Recover protocol, as reported by CoinDesk.

Do Ledger, Trezor and Coldcard charge ongoing fees?

None of the three charges a required usage fee. You pay a one-time device price and, when you move coins, the network fee of whichever blockchain you use. Ledger Recover is the only optional subscription, at $9.99 a month. Worked example: a $99 Ledger Nano X held for five years costs about $20 a year before any network fees.

All three brands charge a single hardware price and nothing ongoing, so the main running cost is the network fee when you send coins. Bitcoin fees rise and fall with network demand; our Bitcoin guide explains how they are set and why they spike when blocks are full.

Worked example: on an illustrative $1,000 Bitcoin purchase, a 0.5% exchange fee is $5 and a network withdrawal fee might be a few dollars on a quiet day, with the hardware wallet itself adding nothing. On the hardware side, a $99 Ledger Nano X kept for five years works out to about $20 a year, a $59 Trezor Safe 3 to about $12 a year, and a $219 Coldcard Mk5 to about $44 a year, all before network fees.

The only subscription in the category is Ledger Recover at $9.99 a month, roughly $120 a year, and it is strictly optional. Buy the hardware as a one-off from the vendor’s store, and compare the cost of actually buying coins on our exchange hub before you commit to any bundle you did not ask for.

Which is easier to use on a phone?

Ledger is the strongest mobile option: the Nano X, Flex and Stax pair with the Ledger app over Bluetooth and work on iOS and Android, so you can check balances and approve transactions from your phone. Trezor’s Safe 3 and Safe 5 are wired USB-C devices, and Trezor notes there is no swap, send, setup or device management on iOS. Coldcard has no Bluetooth or companion app; it signs offline, and a phone is used only as a QR scanner on the Q.

The screens also shape how you use each device. Ledger’s Nano X has a 1.1 inch monochrome OLED, while the Flex uses a 2.8 inch E Ink touchscreen and the Stax a 3.7 inch curved E Ink screen, both easier for reading a full address before you approve. Trezor’s Safe 3 has a 0.96 inch OLED and two buttons, while the Safe 5 adds a 1.54 inch colour touchscreen. Coldcard’s Mk5 uses an OLED and numeric keypad, and the Q uses a 3.2 inch LCD with a full keyboard.

If you sign regularly from a phone, Ledger’s Bluetooth line is the pragmatic choice. If you prefer a wired device and do not need mobile approvals, the Trezor Safe 3 or Safe 5 is cheaper and simpler. If you want the signing device fully offline and are happy to move a microSD card or scan a QR, Coldcard is the fit.

Which hardware wallet has the better security record?

There is no widely reported case of a remote attack that extracted private keys from a current Ledger, Trezor or Coldcard device. Ledger’s 2020 incident was an e-commerce data breach that exposed customer emails, not funds; Trezor reported a third-party support portal incident in January 2024. Physical-access research has probed Trezor and Ledger chips over the years, and the vendors shipped fixes.

Ledger’s July 2020 breach hit its e-commerce and marketing database, exposing customer emails and order details but no funds or keys; coverage at the time put the exposed records near 10,000 customers. The damage was phishing: stolen contact lists let scammers pose as Ledger support, which is why the company now warns repeatedly about fake recovery calls.

Trezor reported a third-party support portal incident in January 2024 and said user funds were not affected. The physical-access story is longer: in November 2018, Ledger’s security team (the Donjon) disclosed ways to extract data from a Trezor given physical access, and Trezor fixed them in firmware releases in early 2019. There is no widely reported remote key extraction from any current Ledger, Trezor or Coldcard model.

How do you sign a Bitcoin transaction air-gapped on Coldcard?

Coldcard’s Mk5 and Q can sign Bitcoin without any cable or Bluetooth by moving a partially signed Bitcoin transaction (PSBT, BIP-174) on a microSD card between the wallet and a computer running Electrum or another Bitcoin wallet. The flow is: build an unsigned transaction in Electrum, export it to microSD, sign it on the Coldcard, then broadcast the signed file from the computer.

You need a Coldcard, a microSD card and a watch-only wallet such as Electrum, which supports PSBT files. The steps are:

1. Set up the Coldcard and export its public key (xpub) to Electrum so Electrum becomes a watch-only wallet that can see, but not spend, your funds.
2. In Electrum, build an unsigned transaction and export it as a PSBT file to the microSD card.
3. Insert the microSD into the Coldcard; it loads the PSBT and shows the destination address, amount and fee for you to confirm on screen.
4. Sign on the Coldcard; it writes the signed PSBT back to the microSD card.
5. Move the card back to the computer and broadcast the signed transaction from Electrum.

The signing device never touches a network, so there is no USB or Bluetooth channel to attack. Coldcard’s Q can replace the microSD hop with its built-in QR scanner for the same flow, and the transaction stays in the open PSBT format defined by BIP-174.

Are hardware wallets safe to buy from resellers?

Buy only from the vendor’s official site, because a second-hand or marketplace device can be tampered with to steal funds. Ledger, Trezor and Coinkite all sell from their own stores. If a price looks too good, or a device arrives with a pre-printed recovery phrase, treat it as a phishing or tampering risk and stop.

Official channels are shop.ledger.com for Ledger, trezor.io for Trezor and store.coinkite.com for Coldcard. A discounted device from a marketplace can be opened, its firmware swapped or its seed pre-set, so the first person to deposit loses everything. If a “new” device arrives with a recovery phrase already written down, it is a scam.

Never type your 12, 20 or 24-word recovery phrase into a website, an app or a message, and never photograph it. The wallet will only ever ask for it during an on-device recovery you start yourself. For background on how scammers harvest keys, see our faucets and scams page and our broader wallet hub.

Crypto assets are volatile, and this comparison is about fees, features, safety and availability, not financial advice.