How to choose a hardware wallet

There is no best hardware wallet for everyone: the cold wallet that suits one person can be the wrong one for another, so this page does not rank brands. It sets out seven criteria and names the wallets that fit each one; one table compares all 26 wallets we feature (each has a datasheet) on six of them, according to the makers’ own documentation, and coin support has its own matrix.

No maker pays to appear on this page or to change what it says about a device. We have not used these devices hands-on; how the data is collected is on the methodology page. All 54 wallets we track are in the wallet database, which can be filtered by several of these criteria.

What is the best cold wallet for crypto? Start with this table

Each value and status comes from our dataset, with a link to the maker page behind it where one exists; a column heading with a link opens the sheet that compares every wallet on that feature.

Prices are snapshots from each maker’s own pages on 14 October 2026. Ledger, Trezor, Blockstream and ELLIPAL listed them in US dollars on the pages cited in our dataset, and Block and NGRAVE in euros; the other makers’ stores showed them in dollars. Prices change.

How much does a hardware wallet cost?

In the Ledger and Trezor ranges, higher-priced models add larger screens, batteries or wireless links, though not every step up adds all three. Four of the five Ledger models list the same ST33K1M5 secure element, and all three Trezor Safe models list an EAL6+ certified chip, with the Safe 7 adding a TROPIC01.

• Under $100: Tangem Wallet at $54.90 for two cards or $69.90 for three; Trezor Safe 3 at $59; Arculus Cold Storage Wallet at $59.76; Ledger Nano S Plus at $69; SafePal X1 at $69.99; SafePal S1 Pro at $89.99; Ledger Nano X at $99.
• $100 to $200: Trezor Safe 5 ($129); Keystone 3 Pro ($149); Blockstream Jade Plus ($149 to $169); Tangem Ring ($160 with two cards); ELLIPAL Titan 2.0 ($169); Ledger Nano Gen5 ($179).
• Over $200: COLDCARD Mk5 ($219, marked down from $269); Ledger Flex and Trezor Safe 7 ($249 each); OneKey Pro ($278); COLDCARD Q ($319, marked down from $369); Foundation Passport Prime ($349); Ledger Stax ($399).
• Listed in euros: Block Bitkey at €230 and NGRAVE ZERO at €398.

The table has no price snapshot for the BitBox02 Nova Multi or KeepKey (their datasheets say what the makers’ shops showed), and the Trezor Model One and Model T are discontinued. Model-to-model detail: Safe 3 vs Safe 5, Safe 5 vs Safe 7, Nano X vs Nano S Plus, Nano Gen5 vs Nano X, Flex vs Stax.

Which cold wallet supports my coins?

Our coin support matrix records Bitcoin, Ethereum, Solana and XRP for every featured wallet; for any other coin, check the maker’s own list.

• Bitcoin only: Block Bitkey, Blockstream Jade Plus (Bitcoin and Liquid), COLDCARD Mk5 and COLDCARD Q. COLDCARD has no companion app, so its Bitcoin support shows as Third-party.
• Bitcoin in the maker’s app, Ethereum and Solana through other wallets: the Foundation Passport Prime handles Bitcoin in Foundation’s Envoy app, and Ethereum and Solana through Rabby and Phantom with optional Legacy Mode apps (beta, KeyOS 1.4 or later); XRP is not documented.
• Bitcoin and Ethereum, not Solana or XRP: BitBox02 Nova Multi and Trezor Model One.
• All four in the maker’s own app: the other 19, the Arculus card, ELLIPAL Titan 2.0, KeepKey, Keystone 3 Pro, NGRAVE ZERO, OneKey Pro, SafePal S1 Pro and X1, Tangem Wallet and Ring, Ledger Nano S Plus, Nano X, Nano Gen5, Flex and Stax, and Trezor Model T, Safe 3, Safe 5 and Safe 7.

Makers count assets differently, so their totals are not comparable: Ledger lists 500+ coins in Ledger Wallet and thousands more through third-party wallets; Trezor, thousands of coins and tokens for the Safe models and 14 native assets plus thousands through integrations for the Model T; OneKey, 30,000+; Arculus, 10,000+ tokens on 50+ blockchains; ELLIPAL, 10,000+ tokens across 45+ blockchains; SafePal, 200+ blockchains; Tangem, thousands for the Ring; KeepKey, 11+ native chains and all EVM chains; NGRAVE, 15 coins plus all Ethereum and MultiversX tokens; BitBox, bitcoin, Ethereum and ERC-20 tokens, Cardano, Litecoin and 1,500+ further tokens. The pages we checked give no count for the Tangem Wallet, Keystone 3 Pro or Trezor Model One.

Should you choose a Bitcoin-only hardware wallet?

Makers offer Bitcoin-only use in three forms: a device that runs only Bitcoin, a separate Bitcoin-only edition of a multi-coin device, or Bitcoin-only firmware or a mode on a multi-coin device. The Bitcoin-only edition column above shows the option recorded for each wallet, sometimes only as Yes (the datasheet has the detail).

• Runs only Bitcoin: Block Bitkey, Blockstream Jade Plus, COLDCARD Mk5 and COLDCARD Q.
• A Bitcoin-only edition or firmware: BitBox sells a separate BitBox02 Nova Bitcoin-only edition alongside the Nova Multi; Bitcoin-only firmware is recorded for the Keystone 3 Pro and the Trezor Model One and Model T, and firmware or a mode for the OneKey Pro; the Trezor Safe 3, Safe 5 and Safe 7 are recorded as Yes.
• None recorded: Arculus, ELLIPAL, the Ledger models, NGRAVE, SafePal and Tangem. The Passport Prime runs a Bitcoin app on a broader device, with no separate Bitcoin-only edition verified. KeepKey publishes Bitcoin-only firmware as source code, but we did not confirm a user release.

The Bitcoin sheet covers Bitcoin support wallet by wallet, and the multisig sheet names the multisig software for each. The Bitkey is itself a 2-of-3 multisig (hardware, app and Bitkey server keys); 18 more record multisig support: every Trezor, Ledger and COLDCARD model, the BitBox02 Nova Multi, Jade Plus, Passport Prime, KeepKey, Keystone 3 Pro and OneKey Pro. Arculus (which can join a Safe multisig through WalletConnect) and Tangem record No; ELLIPAL, NGRAVE and SafePal, Not documented. See COLDCARD vs Trezor.

Does open-source firmware matter?

Open-source firmware is published under a licence that lets anyone inspect, change and share the code; we have not checked that published code matches the firmware installed on devices. The open-source sheet records the status for every wallet with a datasheet, with the repository or statement behind it. Ledger’s CEO has described open source as a transparency feature rather than a security feature in itself (May 2023); how much a maker can publish also depends on its chips.

The Open-source firmware column above uses that sheet’s statuses. Yes: Jade Plus, KeepKey, OneKey Pro and all five Trezor models. Thirteen wallets land on Partial, for different reasons:

• Part of the code stays closed. Ledger says its operating system and software are 95% open source and/or available; the rest, on all five models, is low-level secure element code covered by its agreement with STMicroelectronics. SafePal says only parts of the S1 Pro and X1 code are published; the X1 product page says “Fully open-sourced”, but we could not confirm the whole firmware is out.
• A licence with conditions. COLDCARD code for the Mk5 and Q is published under the MIT licence plus the Commons Clause, which makes it source-available rather than unrestricted open source.
• One component cannot be published in full. The Keystone 3 Pro repository ships one chip library precompiled, although Keystone calls its firmware fully open source; the BitBox02 Nova’s Bluetooth chip firmware builds on a vendor SDK that cannot be redistributed; the Bitkey firmware leaves out a proprietary fingerprint-matching library; and the Passport Prime firmware includes a Microchip library under a licence limited to Microchip products.

No: ELLIPAL says the Titan 2.0 firmware is closed, and Tangem describes the firmware of the Wallet and Ring as closed-source but evaluated by accredited experts, with its app and SDK open source. Not documented: we found no firmware source statement from Arculus, and NGRAVE says the ZERO firmware “will be gradually open sourced” except the secure element and its OS, but we found no published firmware.

A related design difference: the Jade Plus uses what Blockstream calls a virtual secure element instead of a physical secure chip; KeepKey and the Trezor Model One and Model T have none, and Block names no secure element part for the Bitkey; the other 21 list one or more secure element chips.

Do you need an air-gapped cold wallet?

NIST defines an air gap as an interface where two systems are not physically connected and data moves only manually, under human control. The nine wallets below can pass transactions by QR code or memory card instead of a cable or radio, according to their makers.

• Signing by QR only: ELLIPAL Titan 2.0 and SafePal S1 Pro list no other link, and NGRAVE ZERO keeps USB-C for charging and firmware updates.
• QR code or memory card beside USB-C: Keystone 3 Pro (sold as an air-gapped QR signer); COLDCARD Q (QR scanner, two microSD slots and NFC; it can run on three AAA batteries); COLDCARD Mk5 (microSD and NFC; with no internal battery, it takes power over USB-C).
• QR alongside wireless links: Blockstream Jade Plus (QR camera and SD card, plus USB-C and Bluetooth); OneKey Pro (QR signing alongside USB-C, Bluetooth and NFC); Foundation Passport Prime (QR camera, USB-C, Bluetooth and NFC backups; Foundation lists QR codes among its three signing methods).

The other 17 list no QR camera and connect by cable, Bluetooth or NFC (the Arculus card, the Tangem Wallet and Ring and the Bitkey use NFC); the Connectivity column lists every link each maker names. The Bluetooth sheet records a Bluetooth radio, with the maker’s statement, for the BitBox02 Nova Multi, Jade Plus, Passport Prime, Ledger Nano X, Nano Gen5, Flex and Stax, OneKey Pro, SafePal X1 and Trezor Safe 7, and Not documented for the Bitkey and Keystone 3 Pro. More in our air-gapped hardware wallets guide.

Which backup method suits you?

• BIP39 recovery phrase: 12, 15, 18, 21 or 24 words as defined in BIP39, with an optional passphrase. A BIP39 phrase can restore on other compatible wallets, though asset and derivation-path support still has to match. Yes in the BIP39 column for 17 wallets: Arculus, Jade Plus, both COLDCARDs, ELLIPAL Titan 2.0, KeepKey, Keystone 3 Pro, the five Ledger models, OneKey Pro, both SafePals, and the Trezor Model One and Model T.
• BIP39 as an option beside another default (Partial): the Trezor Safe 3, Safe 5 and Safe 7 default to a 20-word SLIP39 share; the BitBox02 Nova Multi to a microSD card; the Tangem Wallet and Ring to backup cards with no written phrase; the NGRAVE ZERO to its Perfect Key format; the Passport Prime to Magic Backups on NFC Keycards and Envoy. Each maker documents a way to create, show or import a BIP39 phrase as well.
• No phrase: the Bitkey recovers through three multisig keys and has no recovery phrase to write down.
• SLIP39 shares: SLIP-0039 splits a secret into shares so that a set number of them is needed to recover it. A 20-word SLIP39 share restores only on SLIP39-compatible wallets, so check the recovery side before relying on it. Six wallets record Yes: the Trezor Model T, Safe 3, Safe 5 and Safe 7, the Keystone 3 Pro and the OneKey Pro.
• Other share formats: the COLDCARD Mk5 and Q support Codex32 Shamir sharing, a different format from SLIP39; the Passport Prime’s Magic Backups split the backup 2-of-3 across NFC Keycards and Envoy, which is not SLIP39 either.
• Paid recovery service: Ledger Recover, an optional subscription that, per Ledger, sends encrypted key fragments to three companies; see Is Ledger safe?.

The BIP39 and SLIP-39 columns in the table above show what each maker documents; SLIP-39 is Not documented for 11 wallets, all five Ledger models among them. The passphrase sheet records a passphrase for 24 of the 26 (Not documented for the Arculus and Bitkey; for the two Tangem devices, importing a seed with one), and the table in our seed phrase guide shows them side by side.

How big a screen do you need?

On wallets with a screen, the device screen is where you confirm the address and amount before signing. Sizes run from the 0.96-inch OLEDs of the Trezor Safe 3 and Model One to the 4-inch touchscreens of the Keystone 3 Pro, ELLIPAL Titan 2.0 and NGRAVE ZERO.

• No screen: the Tangem Wallet, Tangem Ring and Arculus card; the phone app supplies the interface.
• Small screens: Trezor Safe 3 (buttons) and Model One (two buttons); Ledger Nano S Plus and Nano X (1.1-inch OLED, non-touch); SafePal S1 Pro (1.3-inch colour, buttons) and X1 (1.8-inch, with a numeric keypad and D-pad). The BitBox02 Nova Multi pairs a small OLED with capacitive touch sensors; KeepKey lists a 256 x 64 OLED without a size.
• Touchscreens: Trezor Model T and Safe 5 (1.54-inch colour) and Safe 7 (2.5-inch colour); Ledger Nano Gen5, Flex and Stax (E Ink, 2.8 to 3.7 inches); OneKey Pro and Passport Prime (3.5-inch); Keystone 3 Pro, ELLIPAL Titan 2.0 and NGRAVE ZERO (4-inch); Bitkey (OLED, no size in our data).
• Keyboard: COLDCARD Q pairs a 3.2-inch LCD with a full QWERTY keyboard.

The Jade Plus lists a 1.9-inch display and the COLDCARD Mk5 a 1.54-inch monochrome LCD; their datasheets cover how each takes input.

What else should you check before buying?

• Incident history. Of the 26 datasheets, 23 list dated security events and, where documented, the maker’s response, such as Coinkite’s 2026 seed-generation advisory for the COLDCARD Mk5 and Q, Blockstream’s December 2025 Jade firmware fix and Ledger Donjon’s 2026 laser attack research on Tangem cards. Our dataset has no events recorded for the ELLIPAL Titan 2.0, Keystone 3 Pro or NGRAVE ZERO. See also Ledger vs Trezor and Tangem vs Ledger.
• Companion software. COLDCARD requires no proprietary companion app, so owners pick compatible coordinator software. Jade Plus works with the Blockstream app, Sparrow, Electrum and HWI; Passport Prime with Envoy and compatible third-party software; NGRAVE ZERO with NGRAVE LIQUID, Rabby and MetaMask; Keystone 3 Pro with Keystone Nexus, and MetaMask among compatible wallets. The rest list the maker’s own app.
• Where you buy. Ledger, for example, recommends buying from itself or authorised resellers and running its Genuine Check with the official app.

New to this? Start with what a cold wallet is, cold vs hot wallets and self-custody.

What we could not verify

• Values the table marks Not stated or No snapshot, such as a price for the BitBox02 Nova Multi on its own.
• Full coin counts for the Tangem Wallet, Keystone 3 Pro and Trezor Model One (the coin matrix covers Bitcoin, Ethereum, Solana and XRP).
• How the Jade Plus handles Liquid assets.
• SLIP39 support where the table says Not documented. A “No” can be inferred from the recovery formats a maker lists rather than stated outright; the SLIP-39 sheet gives the reason for each.
• Whether the Bitkey and Keystone 3 Pro have a Bluetooth radio: the makers’ pages we found do not settle it.
• Whether OneKey publishes every firmware component.