There is no best hardware wallet, and any page that gives you a single ranked winner is telling you more about its commission structure than about your situation. The devices below are all genuinely secure. They differ in what they are optimised for — and the right answer changes completely depending on whether you hold only Bitcoin, want to verify the firmware yourself, or care most about being able to carry it.
We do not make or sell hardware wallets or anything else. Some links earn a commission; it does not change what is written here. Prices were checked at each maker’s own store on 24 September 2026 and move around — confirm before buying.
The short answer
| If you are… | Buy | Roughly |
|---|---|---|
| Most people, first device | Trezor Safe 3 | $59 |
| On a budget, want air-gapped signing | Blockstream Jade | $67 on sale ($79 list) |
| Bitcoin only, security-maximalist | Coldcard | $219–$319 (marked down) |
| Wanting open source and simplicity | BitBox02 | ~$141 |
| Set on air-gapped, want a usable screen | Keystone 3 Pro | $149 |
| Holding many alt-coins, or mobile-first | Ledger | $59–$399 |
| Holding a few hundred dollars | Nothing yet | $0 |
Trezor Safe 3 — the sensible default
Fully open-source firmware, an EAL6+ secure element, and SLIP-39 Shamir backup at the same $59 as Ledger’s entry model, the Nano S Plus. Shamir alone justifies the pick for many people: it lets you split a backup so that any 2 of 3 shares restore the wallet and a single share reveals nothing — the correct version of an idea most people implement dangerously by hand.
Not for you if your main worry is a skilled attacker physically stealing the device. Trezor’s secure element handles the PIN and contributes entropy, but signing still happens on the main microcontroller — the part exposed to glitching attacks. The full comparison is here.
Blockstream Jade — the value pick
At about $67 on Blockstream’s own store (a sale price; the list price is $79) it is no longer the cheapest credible device — the Trezor Safe 3 and Ledger Nano S Plus both list at $59 — but it is still the cheapest here that can sign fully air-gapped. It is not cheap in the ways that matter: fully open source, colour screen, and a camera that enables genuinely air-gapped signing by QR code. You can operate it without ever connecting it to a computer. Blockstream added a simpler Bluetooth model, Jade Core ($99), in April 2026, and sells the Jade Plus from $149.
Not for you if you hold a wide range of alt-coins — support is narrower than Ledger’s — or if you want a large screen for comfortable address verification.
Coldcard — Bitcoin only, and the deepest security options
Bitcoin-only, with dual secure elements, fully air-gapped operation via microSD or NFC, published firmware and hardware schematics, and a long list of advanced features (duress PINs, decoy wallets, multisig tooling). The models on Coinkite’s own store are the Mk5 and the Q, at $219 and $319 on 24 September 2026, both shown as marked down from $269 and $369.
If you already own one, check how its seed was made. On 30 July 2026 Coinkite published a security advisory: a firmware bug weakened seed generation, most severely on the Mk2 and Mk3 (firmware 4.0.1 to 4.1.9), while Mk4, Mk5 and Q seeds made before the fix have about 72 bits of entropy instead of 128. Coinkite says the devices were not hacked, but attackers regenerated weak seeds offline and stole funds. Fixed firmware is Mk2/Mk3 4.2.0, Mk4/Mk5 5.6.0 (Edge 6.6.0X) and Q 1.5.0Q (Edge 6.6.0QX), or later on the same release track; the security status page lists 5.6.2 and 1.5.2Q as current. Updating does not repair an existing seed: unless yours was made with at least 50 fair, independent dice rolls that were never recorded or exposed (if unsure, migrate), create a new seed on the updated device, verify its backup and a receive address, send a small test, then move the rest. A strong BIP-39 passphrase lowers the immediate risk, but Coinkite still advises migrating. A new unit must be updated before you create a seed, and current firmware then requires your own entropy (key presses, dice or coin flips).
Not for you if you hold anything other than Bitcoin, or if you will not read the documentation. Coldcard’s power comes with sharp edges, and a misunderstood advanced feature is a way to lose funds that a simpler device would not have offered you. Recommending it to a beginner is a disservice.
BitBox02 — open source without the complexity
Swiss-built, open-source firmware, a secure chip protected by epoxy potting, and microSD backup that makes the initial setup unusually painless. It occupies a genuinely useful niche: the verifiability of Trezor with a more polished, more opinionated setup flow. On 24 September 2026 BitBox’s own shop, priced in US dollars, listed it at about $141, and the newer BitBox02 Nova, which adds a glass display and optional Bluetooth, at about $166.
Not for you if you want the widest coin support or the lowest price.
Keystone 3 Pro — air-gapped that you will actually use
Air-gapped devices usually make transaction review cramped and irritating, which quietly encourages people to stop checking. Keystone’s four-inch touchscreen fixes that, and it signs by QR code with no Bluetooth. Its USB-C port can be given data access (for firmware updates, for example), so turn on its Air-Gap Mode (Device Settings > Connection) if you want the cable out of the picture. It was $149 on Keystone’s own store on 24 September 2026.
Since the on-device screen is the real security feature, a device that makes verification comfortable is buying you something concrete, not just comfort.
Not for you if you want something pocketable, or you find QR-based workflows fiddly.
Ledger — broadest support, with caveats you should know
The widest alt-coin support, the most mature mobile experience, and the strongest resistance to physical extraction, because signing happens inside the secure element rather than beside it.
Not for you if you want to verify what the device does — the firmware is closed — or if the company’s history sits badly with you. Ledger Recover demonstrated in 2023 that the firmware can export seed material with on-device consent, contradicting years of stronger messaging. And the 2020 breach put roughly 272,000 customers’ names, phone numbers and home addresses into public circulation, which led to extortion letters and attempted home invasions. Both are covered properly in the head-to-head.
See Ledger models and current manufacturer prices (affiliate link).
Tangem — portable, and a genuinely different trade-off
A credit-card-shaped device with no screen, no battery and no cable. You tap it against your phone over NFC. It is IP68-rated and effectively indestructible in ordinary use, and the backup model is a set of paired cards rather than a written phrase.
Two trade-offs deserve to be stated plainly, because the convenience is real and so are these:
- No screen means no independent verification. You confirm transaction details on your phone — the same device that would be compromised in the attack a hardware wallet is supposed to stop. That is a meaningful reduction in the core protection.
- “Seedless” cuts both ways. Nothing written down means nothing to photograph or steal, which genuinely removes the most common cause of loss. It also means your backup is a physical card that cannot be reproduced, and you are tied to one vendor’s ecosystem.
On 9 July 2026 Ledger’s own security lab, Donjon, published a laser attack that resets a Tangem card’s access code. It needs the card in hand, lab equipment Donjon puts at about $250,000 and specialist skills, and it cannot be patched because the cards take no firmware updates; Tangem called the practical risk to everyday users virtually non-existent. If a card is lost or stolen, use one you still hold to move the funds to a new wallet, since Tangem says new cards cannot be added to an existing set.
Reasonable for smaller amounts, travel, or someone who would realistically never maintain a written backup. Less appropriate as the vault for serious holdings.
One note on sourcing: much of the comparison content ranking for this topic is published by the wallet vendors themselves. Tangem, Ledger and Coldcard all run comparison pages that place their own product favourably. That does not make the facts wrong, but read them as marketing.
What barely matters
- Number of coins supported, unless you hold obscure ones. Most people hold two or three assets.
- Bluetooth. Convenient; not the weak point in your setup.
- Screen size, beyond “large enough to read a full address without squinting”.
- Materials and finish. You are buying a key store, not jewellery.
Buy it safely, whichever you choose
- Direct from the manufacturer only. Never a marketplace listing, never used, never “factory sealed” from a third party. Supply-chain tampering is real.
- The device must generate the recovery phrase itself, on first setup. A phrase pre-printed in the box is always a scam.
- Minimise the personal data you hand over, and consider a delivery address that is not your home (Ledger offers pickup-point delivery). In 2026 both big vendors disclosed buyer-data leaks at outside firms: Ledger’s checkout provider Global-e (customers notified 5 January) and Trezor’s shipping provider ShipMonk (disclosed 13 August; 80,689 customers in total after a 4 September update added about 67,000 US customers from 2019–2021 orders) leaked names and emails and, for most, addresses and phone numbers. Neither touched devices or recovery phrases, but treat any unexpected letter, call or “replacement” device as a scam.
And the case for buying none of them
If you hold a few hundred dollars of crypto, spending $59 to defend against remote key theft is poor value, because that is not the risk most likely to cost you the money. Losing a bad backup, or being phished, is.
Do the free things first: a reputable software wallet, a phrase on metal in two buildings, and a tested restore. When your holdings comfortably exceed the price of a device, buy one — and by then you will already have the discipline that makes it worth having.
Sources checked
- Trezor Safe 3 price and specifications and Ledger models and prices
- Blockstream Jade price and Jade Core launch
- Coinkite’s Coldcard seed-generation advisory, current firmware status and Mk5 and Q prices
- BitBox02 and BitBox02 Nova prices and features
- Keystone 3 Pro price and specifications and Air-Gap Mode and USB updates
- Ledger Donjon’s Tangem laser attack, Tangem’s response and Tangem’s lost-card guidance
- Ledger’s Global-e order-data notice and Trezor’s ShipMonk notice
Get the SteelPhrase Self-Custody Brief
Email me SteelPhrase about twice a month: security changes, practical checklists, and carefully reviewed wallet guides. Unsubscribe anytime.