Choosing a hardware wallet

What actually matters

• Supply chain: where you buy matters more than features. Buy from the maker's own store, typed by hand, not from resellers, even authorized ones.
• Firmware track record: how the vendor discloses and fixes bugs.
• A trustworthy screen to verify addresses and amounts.
• Fit for your plan: if you will build multisig later, plan on devices from different vendors.

Our verdicts (as of October 15, 2026)

Products not listed (for example Passport, Keystone, SeedSigner, Krux, Bitkey) were not reviewed in this edition. That is not a judgment either way. Full details and sources: Security Status.

Watch · Our verdicts (as of October 15, 2026)

Why buying direct matters right now

In October 2026 Ledger confirmed that criminals fitted cellular implants into genuine devices, so the implant could capture the seed during setup. Galaxy Research found the devices were sold through CryptoBilis, which Ledger's own site listed as an authorized reseller (Galaxy Research). Ledger said its secure element, device OS and servers were not compromised (Ledger), and asked sellers across Asia to halt sales while it investigated (BleepingComputer). The lesson applies to every brand: buy from the maker, not a reseller, even an authorized one.

Every brand: Buy only from the maker's own official store. Even listed or authorized resellers have been compromised. In October 2026, implanted Ledger devices that captured recovery phrases during setup were sold through CryptoBilis, a reseller Ledger's own site listed as authorized for Indonesia, Malaysia and the Philippines (Galaxy Research). Never restore an existing seed onto a device you didn't buy direct from the maker. Treat any device that arrives already set up, or with a printed or pre-filled seed, as compromised. Don't use it.

Buying steps

1. Shortlist by use case: beginners, BitBox02 or Trezor Safe; QR air-gapped, Jade; future multisig, two or three different vendors.
2. Check the vendor's security page on the day you buy, and compare with our Security Status. If there is a new unresolved advisory, wait.
3. Order from the maker's own official store (type the URL yourself; phishing sites buy search ads). Not from resellers, even authorized ones.
4. Protect shipping privacy: consider a mail-forwarding address and a dedicated email, because customer lists have leaked before.
5. On arrival, check seals. Reject any device that comes pre-initialized or with seed words already printed, or that asks you to restore from words in the box. Never restore an existing seed onto a device you didn't buy direct from the maker.

Watch · Buying steps

Common mistakes

• Buying second-hand to save money.
• Trusting a recommendation that is a year old.
• Buying three identical devices for multisig.
• Clicking a search ad to the "official store".