Ledger review: the best-selling hardware wallet, baggage included

• Ledger is the biggest name in hardware wallets, and the devices earn it: certified secure chips, the widest coin support in the category, and the slickest phone apps. No one has ever been shown to have taken coins from a Ledger remotely.
• The range runs from the Nano S Plus at $59 to the $399 Stax, with the new Nano Gen5 ($179) adding a touchscreen, iPhone support and a physical backup card. The $59 device signs exactly as safely as the $399 one.
• The baggage is the company, not the hardware: a 2020 leak spilled hundreds of thousands of customers’ names and home addresses, and a 2023 product launch showed the recovery phrase can leave the device with your consent, something owners had been told was impossible.

Ledger, founded in Paris in 2014, sells more hardware wallets than anyone else, and its pitch is the opposite of Trezor’s. Where Trezor’s answer to “why trust us?” is open source, code anyone can read, Ledger’s is certified silicon: the same family of tamper-resistant secure chips used in passports and bank cards, plus an in-house attack lab, the Donjon, that is genuinely respected for breaking other people’s products and publishing how. Both approaches work. Which one you find reassuring says as much about you as about them.

Everything below was checked against Ledger’s own shop and documentation in September 2026. This page is monetised: buy through a gold link here and Ledger pays us a commission, at no extra cost to you. The history section below should be evidence enough that the commission does not buy silence; the full arrangement is in our affiliate disclosure.

What you get

Five current devices, all running the same operating system and managed through the same app, which Ledger has recently renamed from Ledger Live to Ledger Wallet. All of them hold keys for thousands of coins and tokens, with around 500 managed natively in the app and the long tail through third-party wallets. Every device forces you to confirm each transaction on its own screen, which is the entire point of the category.

The Gen5, Flex and Stax ship with a Ledger Recovery Key in the box: a physical card that backs up access to your wallet over NFC with a tap and a PIN, as a supplement to the recovery words rather than a replacement. The Gen5 is the interesting one for most buyers, bringing the touchscreen experience and full iPhone support down to $179, in colours, with badges designed by Susan Kare, the artist behind the original Macintosh icons. Whether a security device should have collectible badges is a question we leave to you.

Which one to buy

The Nano S Plus at $59 is the sensible default and our budget pick alongside Trezor’s Safe 3: same chips, same confirmations, no battery to age and no radio to argue about. Its two real limits are no iPhone support and a small screen that makes address-checking a squint. Skip the Nano X: it is the oldest design here, carries an older certification than its siblings, and the Gen5 does everything it does better. Buy the Gen5 if you run your life from a phone, and the Flex or Stax only if you want a bigger screen or simply like nice objects; you are paying for glass, not cryptography.

Is your crypto safe?

On the device itself, the record is excellent. Keys are generated and held inside a certified secure element, transactions are signed on the device and confirmed on its screen, and in over a decade nobody has publicly demonstrated stealing coins from a Ledger without physical possession of it. The Donjon lab attacks Ledger’s own products as well as rivals’, and its existence is a real security asset rather than marketing: labs like it are how flaws get found before criminals find them.

The philosophical trade-off is transparency. Parts of Ledger’s firmware, particularly what runs on the secure element, are closed, so you are trusting certification bodies and Ledger’s own processes rather than public code review. For most people that trust is reasonable; if it nags at you, that instinct is what Trezor exists for. As with any hardware wallet, none of this protects coins still sitting on an exchange, and whoever holds your recovery words holds your money, with no FSCS behind any of it. Our self-custody guide covers the discipline that has to come with the device.

The history you should know

In July 2020, attackers took Ledger’s marketing and e-commerce database. No keys and no coins were touched, but names, home addresses, phone numbers and emails of hundreds of thousands of customers were stolen and later dumped publicly. Owners of a device that advertises the holding of serious money had their home addresses published, and the phishing that followed has never really stopped. It remains the worst customer-data incident in the industry, and it is why we tell readers to treat every email and text mentioning Ledger as hostile until proven otherwise. Ledger will never contact you asking for your recovery words; nobody legitimate ever will.

In May 2023 came Ledger Recover, an optional subscription that splits an encrypted version of your recovery phrase between three custodians so you can restore access if you lose everything. The service is opt-in and nobody is forced near it. The uproar was about what it revealed: firmware, with your PIN and consent, can move the seed off the secure element, after years of owners believing that was physically impossible. Ledger handled the launch badly, paused it, and responded by opening more of its code to inspection. The device did not get less secure that week; the marketing got more honest.

In December 2023, a phished former employee’s access was used to poison a piece of Ledger software that third-party crypto sites embed, redirecting about $600,000 from users of those sites in a few hours. It did not touch coins held on Ledger devices, and Ledger committed to making victims whole. Three incidents, one pattern: the hardware keeps its promises, and the company around it has had to learn its lessons in public.

Who it’s for, and who it isn’t

Ledger suits anyone who wants the widest coin support in the category, iPhone users (Gen5, Flex or Stax), and people who value polish: the apps are the best in the business and the hardware feels like consumer electronics rather than an engineering project. It is also the natural choice if certified silicon reassures you more than readable source code.

It is the wrong pick for open-source purists, for anyone who wants their security vendor to hold as little personal data as possible, and for people who will resent the Ledger Wallet app steering them towards buying, swapping and earning services from partner firms; the device never requires any of them, but the app does keep offering. Weigh it against its main rival properly in Trezor vs Ledger.

Common questions

Hasn’t Ledger been hacked?

The company, yes; the devices, no. The 2020 breach took customer contact details and the 2023 supply-chain attack poisoned software used by third-party websites. Neither extracted keys from anyone’s hardware wallet. The distinction matters, and so does the discomfort: a security company leaked its customers’ home addresses, and you are entitled to hold that against it.

Is Ledger Recover a backdoor?

No. It is an opt-in paid service that cannot activate without your PIN and explicit consent on the device. What it proved is that the seed’s confinement was policy rather than physics, which changed how much trust you must place in Ledger’s firmware process. If that is a dealbreaker, buy a wallet whose code you can read instead.

Ledger or Trezor?

Ledger for coin coverage, mobile experience and hardware polish; Trezor for open source, a cleaner data record and the best built-in backup scheme. Both are a huge upgrade on an exchange account. The head-to-head settles it feature by feature.

Do I need to pay $179 or more?

Only for comfort and iPhone support. The $59 Nano S Plus confirms transactions with the same security as the Stax. Buy up for the screen and the Bluetooth, never out of fear that the cheap one is weaker.

Checked against Ledger’s shop and documentation in September 2026. This review is updated on a schedule and when something material changes. Ledger pays us a commission on purchases through the gold links above, which never changes what we write, in line with our affiliate disclosure and editorial policy.