Hardware wallets8 comparedSelf-custody · MiCA-exempt
Best Hardware Wallets 2026 — Decision-Driven Comparison
Hardware wallets keep cryptocurrency private keys on a dedicated device, usually behind a secure element chip, away from your phone or computer. They are the standard way to hold meaningful crypto long-term. ChainChoice covers 8 of the credible options by use case: first wallet, mid-range holdings, large holdings, Bitcoin-only, mobile-first, air-gapped paranoia. Every list here follows the published hardware wallet ranking; the use-case notes are editorial and do not change it.
Audit receipt#cc-HW-WALLET-HUB-e7e8b418 Methodology §3affiliate economics did not influence this ranking
Direct answer
Which hardware wallet should I buy in 2026?
For first hardware wallet buyers under €10k holdings, Trezor Safe 3 or Ledger Nano S Plus pair a certified secure element you can look up with smooth onboarding, under $70. For €10k+ holdings, BitBox02 Nova (EAL6+ chip, Bluetooth), Trezor (rebuildable firmware), or BitBox02 (seven years without a fund loss, €149) become more attractive. For €100k+ holdings, run multisig combining BitBox + Keystone + COLDCARD (firmware 5.6.0 or later) to remove single-vendor failure. Hardware wallets are MiCA-exempt because they don't perform crypto-asset service provider activities.
Best by use case
The right hardware wallet depends on your holdings size, threat model, and asset mix. Decision logic below maps each profile to the strongest options in our catalog.
First hardware wallet (≤€10k holdings)
Options to consider, in published order: Trezor Safe 3 · Ledger Nano S Plus
For first buyers, the Trezor Safe 3 and the Ledger Nano S Plus pair a certified secure element you can look up with smooth onboarding, both under $70. The Trezor's firmware can also be rebuilt by anyone; the Ledger's operating system cannot.
€10k–€100k holdings, single-signature
Options to consider, in published order: BitBox02 Nova · Trezor Safe 3 · BitBox02 · Keystone 3 Pro
At this holding size, auditability and jurisdictional risk start to matter. Trezor and both BitBox models run firmware independent reviewers have rebuilt; both BitBox models check that each Bitcoin signature leaks nothing, the BitBox02 Nova adds a certified chip and Bluetooth, and Keystone adds full air-gap. All four are credible single-signature stores.
€100k+ holdings, multisig recommended
Options to consider, in published order: BitBox02 · Keystone 3 Pro · COLDCARD Mk5
For serious holdings, multisig with diverse hardware-wallet vendors (e.g., COLDCARD + Keystone + BitBox) removes single-vendor failure modes. Each runs firmware independent reviewers have rebuilt. Use a COLDCARD only on firmware 5.6.0 or later, with a seed made after it (July 2026 weak-seed advisory).
Bitcoin-only maximalist
Options to consider, in published order: BitBox02 · COLDCARD Mk5
COLDCARD (Bitcoin-only) and the BitBox02 Bitcoin-only edition strip away altcoin attack surface. COLDCARD has the deepest advanced features (on firmware 5.6.0 or later, after the July 2026 weak-seed advisory); BitBox02 is the easier of the two.
Mobile-first usage
Options to consider, in published order: BitBox02 Nova · Ledger Nano X · Tangem Wallet (2.0)
The BitBox02 Nova's and the Ledger Nano X's Bluetooth and Tangem's NFC card all work with phones. Tangem needs no charging, but a July 2026 laser attack on its chip is unpatched; the Nova and the Nano X add a real screen for verification.
Air-gapped paranoia
Options to consider, in published order: Keystone 3 Pro · COLDCARD Mk5
For signing that never touches a network or USB cable, COLDCARD (microSD, and QR on the Q) and Keystone (QR and microSD in Air-Gap Mode) are the established air-gapped options; COLDCARD on firmware 5.6.0 or later.
The 8 hardware wallets we cover
BitBox02 Nova
#1 · score 81
BitBox (formerly Shift Crypto) · Switzerland · €175
Buyers who want a certified chip, firmware anyone can check, and key creation and signing they can verify, with Bluetooth for phones.
Secure element: OPTIGA Trust M V3 (BSI-certified EAL6+, valid to March 2027)
Strengths: Certified secure element you can look up (EAL6+) · Firmware rebuilt and matched by independent reviewers · Key creation you can check (dice and an on-device final word) and anti-klepto signing with the BitBoxApp · Signed firmware installable with open-source tools, no maker server
Considerations: First shipped in 2025, so it has a short record in buyers' hands · Two secure-chip configuration issues disclosed in October 2025 (fixed in firmware 9.25.0; no funds reported lost) · Priced in euros only: €175 including 19% VAT
Trezor Safe 3 / Safe 5 / Safe 7
#2 · score 80
SatoshiLabs · Czech Republic · $59–$249
Buyers who want a certified chip and firmware anyone can check. EU-based vendor.
Secure element: OPTIGA Trust M (V3) on the Safe 3 and Safe 5 (BSI-certified EAL6+, valid to March 2027)
Strengths: Firmware rebuilt and matched by independent reviewers · Certified secure element you can look up (EAL6+) · Trezor Suite spot-checks how the device makes keys, on test wallets it then discards, before your wallet is made · Independent wallets (Sparrow, Electrum) sign with it directly · Shamir backup (SLIP-39) by default on the Safe 3
Considerations: The Safe 3 first shipped in November 2023, so its clean record counts three years · Older Model One and Model T had no secure element (the Safe series adds one) · No Bluetooth except on the Safe 7
BitBox02
#3 · score 76
BitBox (formerly Shift Crypto) · Switzerland · €149
Privacy-focused users who want firmware anyone can check. Bitcoin-only edition available.
Secure element: ATECC608B secure chip with no listed certificate (the EAL6+ OPTIGA is in the BitBox02 Nova)
Strengths: Firmware rebuilt and matched by independent reviewers · Bitcoin-only edition reduces attack surface · Signed firmware installable with open-source tools, no maker server · Seven years without a device-level fund loss
Considerations: Its secure chip holds no listed certificate · Bootloader and memory-corruption flaws disclosed in 2026 (fixed in 9.26.x; no funds reported lost) · Smaller community than Ledger or Trezor
Keystone 3 Pro
#5 · score 70
Keystone HK · Hong Kong · $149
Air-gapped users: QR and microSD signing in Air-Gap Mode, with a large screen.
Secure element: Three named parts (ATECC608B, DS28S60, MAX32520), none with a listed certificate
Strengths: Air-gapped QR and microSD signing · Firmware rebuilt and matched by independent reviewers · Independent wallets (Sparrow, MetaMask, Rabby) sign with it · Large screen for verification
Considerations: None of its secure-element parts holds a listed certificate · Hong Kong jurisdiction may be a concern for some users · Slower UX than connected wallets
COLDCARD Mk5 / Q
#11 · score 66
Coinkite Inc · Canada · $219–$319
Bitcoin holders who want microSD signing and advanced features, on firmware 5.6.0 or later.
Secure element: Two named parts (ATECC608 and DS28C36B), neither with a listed certificate
Strengths: Bitcoin-only firmware · Air-gapped via microSD (and QR on the Q) · Firmware rebuilt and matched by independent reviewers · Advanced power-user features (PSBT, duress PINs)
Considerations: 30 July 2026: Coinkite reported that firmware before 5.6.0 generated weak seeds on Mk4, Mk5 and Q, and that attackers stole funds from weak seeds; update, then move any seed made before 5.6.0 · Bitcoin-only is limiting if you hold other assets · Steep learning curve
Ledger Nano S Plus / Flex / Stax
#12 · score 63
Ledger SAS · France · $69 and up
Buyers who want the widest asset support and a polished app. Bluetooth on the Flex and Stax.
Secure element: ST33K1M5 on the Nano S Plus (Common Criteria EAL6+, certificate listed to 2030)
Strengths: Certified secure element you can look up (EAL6+) · 15,000+ coins and tokens · Mature Ledger Wallet app (formerly Ledger Live) · Strong third-party integration
Considerations: Closed operating system: no one outside Ledger can rebuild what signs · Installing a signing app needs Ledger's live servers · 2020 customer-database leak (personal data, not funds)
Ledger Nano X
#13 · score 63
Ledger SAS · France · $99
Phone users who want Ledger's app over Bluetooth with a screen on the device.
Secure element: ST33J2M0 (Common Criteria EAL5+, one level below the Nano S Plus's EAL6+)
Strengths: Secure element you can look up (EAL5+) · Bluetooth LE for phones and USB-C for desktop · On sale since 2019 with no device-level fund loss on record · 15,000+ coins and tokens
Considerations: Closed operating system: no one outside Ledger can rebuild what signs · Installing a signing app needs Ledger's live servers, and Ledger offers no sideloading on the Nano X · 2020 customer-database leak (personal data, not funds)
Tangem Wallet (2.0)
#23 · score 42
Tangem AG · Switzerland · $59.90–$69.90
Mobile-first users who want a card with NFC and no battery, aware of the unpatched 2026 attack on its chip.
Secure element: Samsung S3D232A (Common Criteria EAL6+), with an unpatched July 2026 laser attack
Strengths: NFC tap interaction (no cable needed) · No charging required · Seed phrase optional (a standard BIP-39 backup is offered at setup)
Considerations: July 2026: Ledger Donjon reset the card password with a laser fault and signed transactions; every card in circulation is affected and cannot be patched · Card firmware is closed by design · Requires a phone (no screen on the card)
Hardware wallet FAQs
What is a hardware wallet?
A hardware wallet is a dedicated physical device that keeps cryptocurrency private keys away from the user's phone or computer, usually behind a secure element chip. Transaction signing happens inside the device, so the private keys never touch the connected machine even when sending crypto. Hardware wallets are the gold standard for storing meaningful crypto holdings long-term.
Are hardware wallets MiCA-licensed?
No — hardware wallets do not require MiCA authorisation. MiCA applies to crypto-asset service providers (CASPs) — entities that custody, trade, or facilitate crypto-asset services for clients. Hardware wallet manufacturers like Trezor, BitBox, Keystone, Coldcard, Ledger, and Tangem sell non-custodial products where the user retains exclusive control of their private keys. See /mica/check/ledger and /mica/check/trezor for the detailed rationale.
Ledger vs Trezor — which is better?
The Ledger Nano S Plus and the Trezor Safe 3 both use a certified secure element you can look up (EAL6+; the Ledger Nano X's is EAL5+). Trezor's firmware has been rebuilt and matched by independent reviewers, and open-source tools install it; Ledger's operating system is closed, and installing a signing app needs Ledger's servers. Ledger has broader asset support (15,000+) and a stronger third-party app ecosystem. For auditability, Trezor; for asset breadth and app polish, Ledger.
Should I get a Bitcoin-only hardware wallet?
If you only hold Bitcoin, a Bitcoin-only wallet (BitBox02 Bitcoin Edition, Coldcard) eliminates the attack surface of supporting altcoin protocols entirely. The firmware is simpler, the audit surface is smaller, and the codebase changes less frequently. For multi-asset users, the trade-off is that you also lose convenient access to other holdings.
What about multisig with hardware wallets?
Multisig means requiring multiple hardware-wallet signatures (e.g., 2-of-3) to authorise a transaction. The strongest setups combine hardware wallets from different vendors (e.g., BitBox + Keystone + Coldcard) so a single-vendor compromise cannot drain the funds. Multisig adds operational complexity but dramatically reduces single-point-of-failure risk for large holdings.
Can a hardware wallet be hacked?
Yes, and the record names how. In July 2026 Ledger Donjon reset a Tangem card's password with a laser and signed transactions, an attack Tangem cannot patch; the same month Coinkite reported that older COLDCARD firmware generated weak seeds that attackers drained (fixed in 5.6.0). A certified secure element raises the cost of a physical attack, and firmware anyone can rebuild lets others check what signs. The most common vectors are still (1) social engineering (phishing, fake recovery prompts), (2) supply-chain attacks (buy direct from the maker) and (3) a compromised seed phrase.
How do I back up a hardware wallet?
Most hardware wallets use BIP-39 seed phrases of 12 or 24 words, sometimes with an optional passphrase; Trezor defaults to a SLIP-39 Shamir backup, and some card wallets (Tangem, CoolWallet Go) can skip the phrase, in which case losing the cards loses the wallet. Write the seed on the manufacturer-supplied card, verify all 24 words, store in a fire-and-water-resistant location separate from the device. For high-value holdings, use a metal seed-storage product (Cryptosteel, Billfodl, SeedPlate) and consider Shamir Secret Sharing (Trezor Safe 3+) or BIP-85 to derive child seeds.