What is a hardware wallet? What the chips do, what 8 devices cost, and where they fail
What is a hardware wallet?
A hardware wallet is a dedicated device that holds the private keys and signs transactions away from the computer. Eight current Ledger and Trezor models list at US$59 to US$399 on their makers' shops, read 14 October 2026; the failures on record came from firmware, suppliers and phishing.
Piece published Reviewed by CryptoGuardz Register Desk, editorial desk
A hardware wallet is a small dedicated device that keeps the private keys for a crypto wallet and signs transactions itself, so the keys never sit on the phone or computer used to send them. Eight current models from Ledger and Trezor list at US$59 to US$399 on the makers' own shops, read on 14 October 2026. The device protects keys from malware. It does not protect a seed phrase typed into a fake website.
Prices and specifications below come from the Ledger and Trezor product pages read on 14 October 2026. Incident details come from the companies' own disclosures, as recorded on the wallet register. Nothing here is investment advice.
What is a hardware wallet, in the technical sense?
A signing device. The Bitcoin developer guide puts it in one line: "Hardware wallets are devices dedicated to running a signing-only wallet." A wallet has three jobs: hand out addresses, sign transactions, and broadcast them. The hardware wallet does the signing. A companion app on the phone or computer, such as Ledger Wallet or Trezor Suite, does the rest.
The guide states the problem this solves. "The main disadvantage of full-service wallets is that they store the private keys on a device connected to the Internet." Trezor's own explainer draws the same line:
A hot wallet stores your private keys on a device that's connected to the internet.
So a payment to a casino or an exchange from a hardware wallet goes like this: the app builds the transaction, the device shows the address and amount on its own screen, the user approves with a button or touch, and the device returns a signature. The private key stays inside. Whether a hardware wallet is "cold" depends on how it is used; the trade-offs are on cold vs hot wallets.
What is a secure element?
A separate chip that holds the keys and is certified under the Common Criteria scheme, which Ledger's pages abbreviate as CC. The certification level is printed as EAL plus a number. Ledger's product pages name the chip and its level for each device. Trezor's pages give the level and, for the Safe 7, the chip name, TROPIC01, which Trezor calls an "Auditable Secure Element".
Ledger's oldest model in the current range runs the lower rating. The Nano X page lists "Secure Element Chip: ST33J2M0" and "Chip Certification: CC EAL5+". The Nano S Plus, Nano Gen5, Flex and Stax pages list the ST33K1M5 chip at CC EAL6+.
What does a hardware wallet cost?
From US$59 to US$399 for the eight models below, at the US prices in each shop's own product data on 14 October 2026. Prices change with promotions; read the shop before relying on any figure here.
| Device | Maker | US price | Chip rating | Bluetooth |
|---|---|---|---|---|
| Safe 3 | Trezor | $59 | EAL6+ | No |
| Nano S Plus | Ledger | $69 | EAL6+ | No |
| Nano X | Ledger | $99 | EAL5+ | Yes |
| Safe 5 | Trezor | $129 | EAL6+ | No |
| Nano Gen5 | Ledger | $179 | EAL6+ | Yes |
| Flex | Ledger | $249 | EAL6+ | Yes |
| Safe 7 | Trezor | $249 | EAL6+ | Yes |
| Stax | Ledger | $399 | EAL6+ | Yes |
Bluetooth status comes from the Trezor compare page, which lists it for the Safe 7 only, and from Ledger's pages, where the Nano S Plus page says the Nano X "comes with Bluetooth functionality" as the difference between the two. A head-to-head of the two makers is in Ledger vs Trezor.
Does a hardware wallet remove the need for a seed phrase?
No. Every model above creates a recovery phrase, and the phrase is the wallet. Trezor's explainer: "Make sure your backup is stored safely"; without it, "you won't be able to recover your assets." Lose the device and the phrase restores the funds on another one. Lose the phrase and break the device, and nothing restores them. How the words become keys is set out in what is a seed phrase.
Ledger also sells an optional paid backup, Ledger Recover, that stores an encrypted copy of the phrase with three companies. It is covered in the Ledger Nano X review.
How do hardware wallets fail?
Rarely through the chip. The failures on record came from four other places.
Firmware. In July 2026 Coinkite disclosed that a COLDCARD firmware bug weakened seed generation. Its advisory, as recorded on the register:
A COLDCARD firmware bug weakened seed generation. Attackers regenerated the corresponding private keys offline and stole funds; the devices themselves were not remotely accessed or taken over.
Updating the firmware does not repair a seed created before the fix. Blockstream disclosed a Jade firmware flaw on 16 December 2025, fixed in version 1.0.37, and reported "No confirmed loss of user funds".
Software around the device. On 14 December 2023 a malicious version of Ledger's Connect Kit, a JavaScript library that lets apps talk to Ledger devices, was published after "A former Ledger Employee fell victim to a sophisticated phishing attack." Ledger's report says about 5 hours passed from compromise to resolution. The device did what it was told: users who approved the drainer's transaction signed it.
Customer data. Ledger's July 2020 breach exposed more than 1 million email addresses, and in December 2020 "approximately 272,000 customer records including name, address and phone number" were posted publicly. Trezor counts 80,689 customers whose order data leaked from its shipping provider ShipMonk, disclosed on 13 August 2026 and revised upward on 4 September
- Leaked addresses feed phishing letters and fake support emails.
Phishing for the phrase. A web search for Trezor's setup page run on 14 October 2026 returned no result on trezor.io. The results sat on teachable.com, sites.google.com and wasmer.app subdomains under titles such as "Trezor.io/start". The real setup page is trezor.io/start. Ledger's own line, from its 2021 breach update: "Ledger will NEVER ask you for your 24 words."
What this does not show
Whether any secure element has been extracted in the field: no such case is on the register. Ledger's Connect Kit report gives no total amount lost and no compensation statement; both are not disclosed on the page read. No device was bought and tested by this desk.
Quick answers
What is a hardware wallet?
A device that stores a wallet's private keys and signs transactions on its own screen. The Bitcoin developer guide calls it a device "dedicated to running a signing-only wallet". See cold vs hot wallets.
How much does a hardware wallet cost?
US$59 to US$399 for the 8 Ledger and Trezor models in the table, at official shop prices on 14 October 2026. The Trezor Safe 3 lists at $59 and the Ledger Stax at $399.
Can a hardware wallet be hacked?
The incidents on record were a firmware bug in COLDCARD seed generation (July 2026), a poisoned Ledger software library (December 2023) and leaked customer data. Entries are on Ledger and Trezor.
Do I still need a seed phrase with a hardware wallet?
Yes. All 8 models create one, and it restores the wallet if the device is lost. Anyone asking for it is attempting theft; the routes after a theft are on the scam recovery page.
Sources
- Bitcoin developer guide, wallets, retrieved 14 October 2026
- Trezor, what is a hardware wallet, retrieved 14 October 2026
- Trezor, compare models, retrieved 14 October 2026
- Trezor Safe 3 product page, retrieved 14 October 2026
- Trezor Safe 5 product page, retrieved 14 October 2026
- Trezor Safe 7 product page, retrieved 14 October 2026
- Ledger Nano X product page, retrieved 14 October 2026
- Ledger Nano S Plus product page, retrieved 14 October 2026
- Ledger Nano Gen5 product page, retrieved 14 October 2026
- Ledger Flex product page, retrieved 14 October 2026
- Ledger Stax product page, retrieved 14 October 2026
- Ledger, security incident report on Connect Kit, 20 December 2023, retrieved 14 October 2026
- Ledger, update on the July 2020 data breach, 13 January 2021, retrieved 14 October 2026
- COLDCARD security status, July 2026 seed advisory, as recorded on the wallet register 2026-10-07
- Blockstream blog, Jade security disclosure, 16 December 2025, as recorded on the wallet register 2026-10-07
- Trezor blog, customer data exposed in shipping provider incident, as recorded on the wallet register 2026-10-07
- CryptoGuardz wallet register
About this piece
Compiled by the CryptoGuardz register team from the sources listed above. Research and drafting are AI-assisted and reviewed by a named editor before publication. Nothing here is a recommendation to gamble. If a figure or a reading is wrong, tell us and the correction is logged in public.