Hardware Wallets Compared: Which One Fits Your Bitcoin?

Short answer: In a hardware wallet comparison, all the well-known devices are secure enough for your savings, as long as you set them up properly. They differ in how they work, in price and in philosophy. For bitcoin holders, five points matter: bitcoin-only firmware, open source code, a secure element, a screen to check on and a standard backup of 12 or 24 words.

Which device? The question many people get stuck on

You want to move your bitcoin off the exchange and you're looking at a dozen devices, each with reviews, discount codes and fans who swear only theirs is safe. So you wait a little longer. And the coins stay on the exchange.

Yet the choice is simpler than the advertising suggests. Every device in this comparison keeps your key offline and has you confirm each payment on the device. The more important work comes afterwards: back up the seed properly, test the recovery, write an emergency plan.

Why a hardware wallet is the standard for savings in the first place, and when an app or multisig suits you better, is explained in the complete custody guide. This article is about the devices themselves.

What a hardware wallet does, in one sentence

It creates your private key, keeps it to itself and only signs payments once you have confirmed the amount and address on its own screen.

Your computer or phone only prepares the payment. Even if malware is running there, it cannot send anything without you pressing the button on the device. And if you lose the device, your bitcoin are not gone: with the seed phrase you restore them on a new device.

The criteria in this hardware wallet comparison

Reviews often compare colours, screen sizes and the number of supported coins. For someone who holds bitcoin for years, other things matter.

1. Bitcoin-only

Bitcoin-only firmware contains only the code for bitcoin. Less code means fewer sources of bugs and fewer updates to install. Trezor, BitBox and Coldcard offer such firmware; Jade was built for bitcoin only from the start (plus Liquid, a bitcoin sidechain).

2. Open source code

If the code is public, independent experts can check what the device does with your key. A manufacturer with closed firmware asks you to trust it. For bitcoin, which works without trust in third parties, that is a contradiction.

3. Secure element

A secure element is a chip that protects secrets even against attacks in a lab, such as reading them out with voltage spikes. This matters if your device is stolen. In 2020, researchers showed that the seed could be extracted in a few minutes from older devices without such a chip, once they were physically in someone else's hands.

That is why most current devices have a secure element. Jade takes a different route: part of the key is stored encrypted on a server (the "blind oracle"), which you can also run yourself. A strong passphrase adds protection on any device.

4. Screen and confirmation

You check the receiving address and every payment on the device's screen, not on the computer. The larger and clearer the screen, the easier it is to compare a long address. A touchscreen is convenient, but two buttons are enough.

5. Connection: USB, Bluetooth or air gap

• USB cable: simple, directly to a computer or Android phone.
• Bluetooth: convenient with an iPhone, but an additional wireless interface.
• Air gap: the device never touches a computer. Payments travel back and forth by microSD card or QR code. This is the strictest separation, but a bit more cumbersome.

6. Backup standard

Most devices use BIP39: 12 or 24 English words that any compatible wallet understands. If the manufacturer goes bust, you open your bitcoin with another device.

Trezor additionally offers a backup in several parts following SLIP39 ("multi-share backup"). That is handy for spreading the backup around, but far fewer wallets support it. BitBox can store the backup on a microSD card if you want, in addition to the words.

Hardware wallets compared: the table

Manufacturer prices for the bitcoin-only edition where one exists. As of Nov 13, 2026. Manufacturers with no euro or franc price in their own shop are shown in US dollars.

Trezor (Czech Republic)

Trezor brought the first hardware wallet to market in 2014. The devices are open source, the Safe series has a secure element, and every model comes in a bitcoin-only edition. The Trezor Suite app is clear and made for beginners.

The Safe 3 is the cheapest full-featured bitcoin-only device in this comparison. The Safe 5 adds a touchscreen that makes checking addresses easier. The Safe 7 has a battery and Bluetooth, so it also works with an iPhone.

BitBox (Switzerland)

The BitBox02 is developed by Shift Crypto in Zurich; the Nova is its latest edition. It connects via USB-C and is operated with the BitBox app, which guides you through setup and backup especially simply. Firmware and app are open source.

One special feature is the backup on a microSD card. You can also display the 24 words at any time and write them down, which we recommend for long-term backup. The classic BitBox02 is still available; the shop lists it at €149.

Coldcard (Canada)

Coldcard is the tool for holders who want maximum control. The devices do bitcoin only and can be run entirely without a cable, via microSD card or, on the Q model, via QR code. Two secure elements from different manufacturers protect the key.

In exchange, the operation is less guided. You need separate wallet software on your computer, such as Sparrow, and should get comfortable with terms like PSBT. The source code is viewable but not under a fully free licence.

Blockstream Jade (USA)

Jade is affordable, open source and built for bitcoin. The Plus model has a camera and signs payments via QR code, including with wallet apps on your phone. Instead of a secure element, Jade uses a blind oracle: your PIN unlocks the key only together with a server that itself learns nothing about your key.

By default this server is run by Blockstream. Advanced users can run it themselves, or use the device without a stored key and scan the seed in by QR code each time.

Foundation Passport (USA)

Passport Prime is the most expensive device in this comparison, with a large touchscreen, camera and battery. It works exclusively via QR code and is open source. Besides bitcoin, it serves as a two-factor device and security key for online accounts; it does not support other coins.

Ledger (France)

Ledger is widespread worldwide, but supports hundreds of coins and has no bitcoin-only edition. The firmware on the secure element is not public.

In 2023, Ledger introduced its "Ledger Recover" service, which on request sends encrypted parts of the seed to service providers. The service is optional, but it shows that the firmware can in principle export the seed. Many bitcoin holders concluded from this that they should choose an open source device. In 2020, names and delivery addresses of more than 270’000 Ledger customers from its web shop were also published, leading to extortion attempts and phishing.

Which hardware wallet fits you?

Instead of one "best" wallet, there is the one that fits your everyday life. These rules of thumb help you narrow it down:

With multisig you deliberately mix manufacturers, for example a Trezor, a BitBox and a Coldcard. If one device has an undiscovered bug, the other two are not affected. How that works is shown in the article Multisig wallet: more security through several keys.

What a hardware wallet costs relative to what it protects

A €249 device looks expensive, a €59 one suspiciously cheap. Neither is, once you compare it with what it protects.

The device price is a one-off expense. If you add another €50 to €100 for a metal plate for the seed, custody of 0.1 BTC still stays below 4%. With every further purchase, the share shrinks.

What your holdings are worth in euros, francs and sats you can convert here:

Buying and unboxing safely

The most dangerous moment in a hardware wallet's life is before it reaches you. Scammers sell tampered devices through marketplaces and include pre-filled seed phrases.

1. Buy only from the manufacturer or an official reseller. No marketplace, no used device, no "bargain".
2. Think about the delivery address. A parcel from a wallet manufacturer reveals that there are bitcoin here. A parcel locker or work address can be more discreet.
3. Check authenticity. Trezor and BitBox check in their app whether the device is genuine when you first connect it. With Coldcard you compare the number on the sealed bag.
4. Create the seed yourself. A genuine device generates the words during setup. If a card with ready-made words is included, the device is a trap.
5. Software only from the official site. Fake wallet apps are a common scam. More warning signs are in the article How to spot bitcoin scams.

The setup itself, from first switching on through the recovery test to your first withdrawal from the exchange, is described in the guide Setting up a bitcoin wallet.

Lifespan, updates and when the manufacturer disappears

A hardware wallet lasts many years. You install firmware updates via the manufacturer's app, ideally not on day one but after a few weeks, once other users have reported any problems. Before every update you should know where your seed is.

If the device breaks or the manufacturer no longer exists, your bitcoin are not affected. With the BIP39 seed you restore them on another manufacturer's device or in a software wallet. That is why the backup standard matters so much.

No device alone protects against future threats such as quantum computers; for that, bitcoin itself needs an upgrade. How big that danger is, is assessed in the article Quantum computers and bitcoin.