The best hardware wallets, ranked by the security that matters

The best hardware wallet for most people is one with both open-source firmware and a certified secure element, bought new and direct from the manufacturer — and on that combined standard the Trezor Safe 5 leads our ranking, with the air-gapped, open-source Keystone 3 Pro a close second. But "best" genuinely depends on your threat model: someone prioritising the widest coin support might reasonably put Ledger first, and someone who wants a fully sealed, air-gapped device might prefer ELLIPAL. This page shows the whole picture so you can decide.

Every device below is a mainstream, reputable, self-custody hardware wallet from an established maker. None of them can be judged in isolation from the one factor no gadget controls — your recovery phrase — so read the risk box above before you buy anything.

How we rank cold wallets

We rank on five security properties, in roughly this order of weight: (1) key isolation — is there a certified secure element that resists someone extracting the key from a device they physically hold; (2) transparency — is the firmware open-source and independently auditable; (3) attack surface — is signing air-gapped (QR or NFC) or does it require USB/Bluetooth; (4) coin support — will it actually hold what you own; and (5) price and value. We do not run a hardware security lab, so nothing here is a "we cracked it" claim — this is an architecture and documentation review, verified against each manufacturer's spec sheets and independent research, and dated September 2026.

One promise on independence: Trezor pays the highest affiliate commission in this set and still tops the list — because open-source-plus-secure-element is a real security advantage, not because of the payout. Ledger, which pays less, is ranked below it on the merits. If a commission ever conflicts with the security-correct answer, the security answer wins, every time. Scores are relative to this group, one decimal, and reflect a bias toward long-term, verifiable self-custody.

The six cold wallets at a glance

Prices are approximate US retail from each maker's own store, checked September 2026, and change often — confirm the current price direct before buying. "Open-source" refers to the device firmware unless noted.

Trezor Safe 5 — open-source with a secure element (9.2/10)

The Trezor Safe 5 is our top pick because it closes the historic gap in Trezor's line: it pairs fully open-source firmware with an EAL6+ secure element (an Infineon Optiga chip) that guards the PIN and secret, so both the "anyone can audit the code" and "a thief with the device can't easily extract the key" boxes are ticked. Trezor's maker, SatoshiLabs, shipped the very first hardware wallet in 2014, and the Trezor Suite app is open-source too. The Safe 5 adds a colour touchscreen and haptics; the cheaper Safe 3 (around $79) has the same secure element without the touchscreen.

The honest tradeoffs: it is not air-gapped — you connect over USB-C — and older Trezors without a secure element (the Model One and the discontinued Model T) were shown by researchers to be vulnerable to a physical key-extraction attack given the device and time, which a strong passphrase mitigates. That history is exactly why the secure element in the Safe line matters, and why we cover the secure-element-versus-open-source question in depth. Coin support is broad via Suite; if you hold a specific asset, check its supported-coins page first.

Keystone 3 Pro — air-gapped and open-source (9.0/10)

The Keystone 3 Pro is the best choice if you want the rare combination of open-source firmware and a fully air-gapped workflow. It signs transactions by scanning QR codes with a built-in camera and never uses USB or Bluetooth for signing — the USB port is for charging and firmware only — so there is no data path for malware to travel. It carries multiple EAL5+ secure elements and a fingerprint sensor, and pairs over QR with software like MetaMask for on-chain activity. If you value a genuine air gap without giving up code transparency, it is hard to beat.

Tradeoffs: the large touchscreen and QR workflow make it bulkier and a little slower than a plug-in stick, and the QR-only model means every companion app must support QR signing (most major ones do). At roughly $149 it is mid-priced for the group and, in our view, earns it.

Ledger Nano S Plus — the widest coin support (8.6/10)

The Ledger Nano S Plus is the most practical device if you hold a long tail of coins: Ledger advertises support for 5,500-plus assets through Ledger Live, more than anyone else here, and its certified secure element is genuinely strong against physical extraction. At around $79 it is well-priced, and the ecosystem is the most mature in the category. For sheer breadth and polish, many people will be happy with it.

Why it is not first: Ledger's operating system (BOLOS) is closed-source, so you cannot fully audit the firmware — you are trusting the company and its certifications. Two events also shape the trust picture, and we state them plainly rather than bury them.

In 2020 Ledger suffered a breach of its e-commerce and marketing database — around a million email addresses and about 272,000 detailed records (names, postal addresses, phone numbers) were exposed. This was a customer-data leak, not a breach of any device, private key or funds; no coins were taken through it. But it fuelled years of convincing phishing, extortion emails and even physical-threat scams against known owners — a lasting reminder to guard your personal data, and never to act on an email or letter that claims to be from a wallet maker.

Separately, Ledger's optional "Recover" seed-backup service (announced 2023, opt-in and off by default) showed that firmware could, with the user's consent, export an encrypted form of the seed to custodians — which unsettled people who read "the key never leaves the device" as absolute. It is a choice you turn on, not a default, but it is fair context. Our full Ledger vs Trezor comparison weighs closed-source certification against open-source auditability without the tribalism.

ELLIPAL Titan 2.0 — fully sealed and air-gapped (8.0/10)

The ELLIPAL Titan 2.0 is the pick for someone who wants a physically hardened, fully air-gapped device. It has no USB data, no Bluetooth, no NFC and no Wi-Fi — every transaction is passed by QR through a camera — and the case is a sealed metal unit with an anti-tamper mechanism that wipes the keys if someone tries to physically pry it open. It carries an EAL5+ secure element and supports thousands of coins through its mobile app. As a sealed, standalone appliance, it is reassuringly self-contained.

Tradeoffs: the firmware is closed-source, so you trust ELLIPAL's certifications rather than the community's eyes, and the app-plus-device workflow is more of a walled garden than Trezor's or Keystone's. At about $139 (often bundled with a steel backup plate) it is priced like a premium sealed device, which is what it is.

Tangem — the simplest cold storage (7.8/10)

Tangem is the easiest cold storage to actually use: it is a card, not a gadget, with an EAL6+ secure element and no battery, cable or screen. You tap it to your phone over NFC to sign, and the private key is generated on the card and never leaves it. By default there is no written seed phrase — the cards themselves are the backup, which is why you buy a set of two or three identical cards and keep them apart. For a beginner who finds seed phrases terrifying, that is a genuinely thoughtful design, and at roughly $70 for three cards it is cheap.

Tradeoffs to understand: with no screen of its own, you verify what you are signing on your phone, so you are trusting the phone's display — a weaker position than a device with an independent screen. The Tangem app is audited (by Kudelski Security) and increasingly open, but historically the stack has been more closed than Trezor's or Keystone's. And the seedless model changes your recovery story: if you lose all your cards with no seed exported, the wallet is gone — so treat the spare cards exactly as carefully as you would a seed phrase.

SafePal S1 — cheapest air-gapped option (7.5/10)

The SafePal S1 is the budget way into air-gapped cold storage. At around $50 it is the cheapest device here, yet it is fully air-gapped — QR-only, with no USB, Bluetooth, Wi-Fi or NFC — carries an EAL5+ secure element, and includes a self-destruct mechanism against physical tampering. Coin support through the SafePal app is very broad. For a small holding you want offline without spending much, it does the core job.

Tradeoffs: the firmware is closed-source, and SafePal is closely tied to the Binance ecosystem (Binance Labs was an early backer), which some self-custody purists would rather avoid on independence grounds. The build and screen feel their price. As the entry point to a genuine air gap, though, it punches above $50.

Secure element vs open-source: the tradeoff that decides your pick

The core disagreement in this category is simple. A certified secure element (Ledger's whole design, and now Trezor's Safe line, Tangem, ELLIPAL and SafePal) is a chip built to resist someone physically extracting the key — but the strongest secure elements ship with closed firmware you must take on trust. Fully open-source firmware (Trezor, Keystone) lets independent researchers read every line, which catches bugs and backdoors — but open code on a chip without a secure element does not stop a physical extraction attack. The Trezor Safe line and Keystone are compelling precisely because they try to have both. There is no universally correct answer; there is only the answer for your threat model, which we unpack here.

Buy direct — the rule that beats the brand

Whichever device you choose, buy it new and direct from the manufacturer, or from an official reseller the maker lists on its own website. Never buy a hardware wallet from a third-party marketplace listing, an auction, or anyone reselling a "sealed" unit — a tampered or pre-initialised device with a recovery phrase the seller already knows is a documented way people lose everything on their first deposit. We explain why buying direct matters so much, and once your device arrives, the safe setup guide walks you through verifying it is genuine before you trust it with a cent.

A note on the honest no-payout options: a well-maintained software wallet (MetaMask, Trust Wallet, Exodus) is fine for small, active balances and pays us nothing — we mention them because they are sometimes the right answer, not because there is a commission. Cold storage is for the holdings you would hate to lose to a remote hack.