Best hardware wallet 2026: Trezor, Ledger, Coldcard and more compared

If you hold several coins and want the fewest ways to get it wrong, the Trezor Safe 5 is our default pick for 2026: open-source firmware, an EAL6+ secure element and a colour touchscreen for $169 at the time of writing. Bitcoin-only holders are better served by an air-gap capable signer such as the Coldcard Q or Jade Plus, set up with dice and a passphrase, and anything you could not afford to lose belongs in a multisig spread across two or three makers. The largest hardware-wallet loss of the year came from weak seed generation rather than a hacked device, so how you set a wallet up now matters as much as which one you buy.

What 2026 changed about choosing a wallet

On 30 July 2026 attackers started sweeping bitcoin out of wallets whose seeds had been created on Coldcard devices. Coinkite's advisory is clear: the devices were not hacked or remotely accessed. A firmware bug weakened seed generation, and attackers regenerated the private keys offline. Mk2 and Mk3 seeds made on firmware 4.0.1 to 4.1.9 (from March 2021) were hit hardest, at as little as 40 bits according to TRM Labs. Coinkite estimates Mk4, Mk5 and Q seeds created before the fix carry about 72 bits instead of the intended 128.

TRM Labs, citing Galaxy Research, put losses near 1,816 BTC (about $116 million) from more than 5,200 addresses; a later Galaxy figure reported by Cointelegraph was 1,778 BTC. Treat both as preliminary. The lessons apply to every brand:

• A firmware update fixes future seeds. It does not repair a seed that already exists.
• Your own entropy is insurance. Coinkite does not consider seeds that mixed in at least 50 private dice rolls at risk, and a strong BIP-39 passphrase added a separate barrier.
• Several independent randomness sources fail more gracefully than one. BitBox combines five, two of which (entropy from your computer and a hash of your device password) never come from the device itself.
• Keys from different makers in a multisig do not share a single point of failure.

One more disclosure is worth knowing. In June, Trezor confirmed that Ledger's Donjon lab had extracted a subset of secrets from the TROPIC01 chip in the Safe 7, using laser fault injection on a desoldered, decapsulated chip. Trezor says keys and backups are not stored on that chip and the PIN stays protected by the other two layers, though firmware cannot patch the flaw.

The 11 wallets compared

Prices are ours at the time of writing. Specs come from each maker's own product and documentation pages, checked in October 2026. We split the list by how each device talks to your phone or computer, because that is the first fork in the road.

USB and Bluetooth signers

Air-gap capable signers

All eleven support a BIP-39 passphrase, and multisig is mostly a software question: Sparrow, for example, supports multisig with "all common hardware wallets". What differs is how bearable a long passphrase is to type (the Coldcard Q's keyboard and the big touchscreens win) and how much the device checks a multisig setup itself. BitBox, Coldcard, Jade and Passport Prime document multisig handling, and Coldcard adds policy-enforced co-signing.

Open firmware, closed firmware and Ledger Recover

Every hardware wallet asks you to trust its maker's firmware. The question is whether outsiders can check it. Trezor, BitBox, Blockstream, Keystone and Foundation publish their firmware as open source, and BitBox publishes reproducible builds so anyone can confirm the binary matches the code. Coldcard's firmware has been public since 2018, with reproducible builds since 2021, but its licence adds the Commons Clause, so reviewers often call it source-available rather than open source. Ledger's secure-element operating system is closed; parts have been published since 2023, under Ledger's own licence.

That became concrete in May 2023, when Ledger announced Recover, an optional paid service that backs up your seed in encrypted fragments held by third parties. In a now-deleted post quoted by CoinDesk, Ledger's support account wrote that "technically speaking it is and always has been possible to write firmware that facilitates key extraction." A Ledger spokesperson told CoinDesk the company cannot and will not extract keys, and that any action involving them must be approved on the device. There is no public evidence Ledger has ever taken anyone's seed. The episode showed that the safeguards around an export path live in code outsiders cannot fully read.

Open code is no guarantee either: the Coldcard bug sat in publicly readable firmware from 2021 to 2026. Openness means someone can find a flaw, not that someone has. Our view: Ledger's hardware is well engineered, and Ledger Wallet supports 500-plus assets directly, with thousands more through third-party wallets. If you need that breadth, a Ledger is a reasonable choice; leave Recover off. If you would rather verify than trust, buy from the open side of the table.

Air-gapped signing versus USB and Bluetooth

An air-gapped wallet moves transactions by QR code or memory card, so it never opens a data connection to an internet-connected machine. That shrinks the attack surface, and any scanner can read the QR data if you want to check it. The cost is friction: more steps per transaction.

The labels need care. The Keystone 3 Pro has no Bluetooth or Wi-Fi at all. The Coldcard Q signs over QR or microSD, runs on three AAA batteries, and lets you permanently disable USB data and NFC by scratching off a circuit-board trace. The Jade Plus can run fully air-gapped with its camera and an SD card, but also has Bluetooth, which you can switch off. Passport Prime scans QR codes too, but by default pairs with its Envoy app over QuantumLink, encrypted Bluetooth on a separate chip. Foundation's FAQ says Bluetooth and NFC can be disabled, and that the default backup puts one of three Shamir shares in your phone's iCloud Keychain or Android backup; you can keep all three Keycards yourself instead.

Bluetooth is not automatically a weakness: the Safe 7 encrypts its link with an open-source protocol, and every device here makes you confirm on its own screen. It does add a radio to the attack surface. If you sign a few times a year, we see little reason to pay for that; if you sign weekly from a phone, it is a fair trade.

What a secure element does and does not do

A secure element is a tamper-resistant chip that guards secrets from someone holding your device: it limits PIN guesses and resists probing. Coldcard pairs two from different vendors. The Safe 7 stacks the auditable TROPIC01 on an EAL6+ chip and an STM32U5, so an attacker must beat more than one part. The BitBox02 Nova runs open firmware on its main processor and uses its secure chip to harden the device password. The Jade Plus deliberately has none: its "virtual secure element" relies on a blind oracle server that must cooperate before the PIN works, and you can run your own.

None of this protects a weak seed, a recovery phrase typed into a phishing site, or a malicious transaction you approve. The 2026 Coldcard losses happened on devices with two secure elements.

Our picks for four kinds of buyer

Bitcoin-only maximalist: Coldcard Q

The Coldcard Q ($289) is still the most capable Bitcoin-only signer we sell: a keyboard for long passphrases, a QR scanner, two microSD slots, duress and brick PINs, and spending-policy co-signing. Current standard firmware (5.6.3 for Mk4 and Mk5, 1.5.3Q for the Q, per Coinkite's security status page) requires 65 key presses with unpredictable timing, 50 dice rolls or 128 coin flips for every new seed, mixed with device entropy, and Coinkite publishes a script to verify the dice mix offline. Update before creating a seed, roll real dice, add a passphrase. If the incident cost Coinkite your trust, the Jade Plus or a Bitcoin-only BitBox02 Nova are open-source alternatives.

Multi-coin beginner: Trezor Safe 5

The Safe 5 ($169) gets the basics right: open-source firmware, an EAL6+ secure element, PIN and passphrase entry on the device, a 1.54-inch colour touchscreen and Trezor Suite on desktop. One catch: Trezor lists no swap, send, setup or device management on iOS for this model. If your main device is an iPhone, step up to the Trezor Safe 7 ($249), which adds Bluetooth, a 2.5-inch screen and the three-chip design. If you need a chain Trezor does not support, the Ledger Flex ($249) is the closed-firmware alternative; decline Recover.

Air-gapped and advanced: a three-maker multisig

For money you could not replace, any single device is a single point of failure. Our pick is a 2-of-3 Bitcoin multisig from three makers that all sign by QR: Coldcard Q ($289), Blockstream Jade Plus ($149) and Keystone 3 Pro ($149) on its Bitcoin-only firmware, coordinated in a wallet such as Sparrow. That is $587 of hardware, three separate codebases and three approaches to secure chips, so no single bug empties the wallet. Generate each seed on its own device, back each up separately, and keep the wallet descriptor with every backup, because recovery needs it. If you prefer one premium device, Foundation Passport Prime ($349) is open source and audited by Keylabs; switch off Bluetooth and the cloud-stored share to make it behave like a classic air-gapped signer.

Budget: Keystone 3 Pro or Jade Plus

At $149 each, the Keystone 3 Pro is the budget pick for multi-coin holders (air-gapped by default, 4-inch touchscreen, fingerprint sensor) and the Jade Plus is the budget pick for Bitcoin. One honest note: our minimum order is $399 in products, so a single $149 wallet will not check out on its own here. Two of them make a natural pair for a primary wallet and a backup signer, and the three-maker multisig above ($587) clears the minimum on its own.

How to receive a hardware wallet safely

Most hardware-wallet thefts are set up before the first transaction. Work through this the day the box arrives:

1. Check the tamper evidence. Trezor's guide shows a holographic seal over the Safe 5's USB-C port that leaves a "VOID" residue when peeled; Coinkite tells Coldcard buyers to inspect the tamper-evident bag first. If a seal is torn, missing or re-stuck, stop and contact the manufacturer before powering on.
2. Refuse any pre-filled seed. Backup cards must be blank; Trezor says not to use a device whose cards already have words on them. A wallet that arrives with a recovery phrase is a theft in progress.
3. Generate the seed on the device. Never import words someone else gave you. Coldcard, Jade and BitBox all document dice-based seed creation; for a large balance, use it.
4. Verify the firmware. Trezor devices leave the factory with no firmware installed, and a new one that already has firmware should not be used. Coinkite tells Coldcard owners to stop at the main menu, install the current release and verify the signed download before choosing a seed.
5. Test a recovery before funding. Record the words and wallet fingerprint, reset the device, restore from your backup and confirm the fingerprint and first receive address match. Then send a small amount in and spend it back out.
6. Move the backup to metal. Paper burns and soaks. Stamp or engrave the words, and store any passphrase in a different place from them.
7. Never share the words. No manufacturer, support agent or store needs your recovery phrase or passphrase.

That covers us too. Our wallets ship factory-sealed, and we never see or ask for seed phrases; anyone claiming to be us who does is attempting theft. Where you buy also affects privacy: in August 2026 Trezor disclosed that a breach at one of its shipping providers exposed customers' names and addresses, and its advice included using an email not tied to your identity and paying in crypto. We offer guest checkout with optional email, take crypto only, and ship in an insured, unbranded box (see shipping).

What we'd buy

• First wallet, several coins: Trezor Safe 5 ($169), or the Safe 7 ($249) if you live on an iPhone.
• Bitcoin only, one device: Coldcard Q ($289) on current firmware, with 50 dice rolls and a passphrase.
• Savings you cannot replace: Coldcard Q, Jade Plus and Keystone 3 Pro as a 2-of-3 multisig ($587 together).
• Tight budget: Keystone 3 Pro or Jade Plus ($149 each), paired with a second signer.
• Whatever you choose: blank backup cards, seed made on the device, recovery tested, words on metal.

Every wallet above is in our self-custody collection. Prices were correct at the time of writing and can change.