Security advisory (updated 3 November 2026): a firmware flaw in some Coldcard models, disclosed in July 2026, produced seeds with far less randomness than intended. Coinkite has released fixed firmware for every affected model, but updating does not repair a seed created on affected firmware. If you created a seed on a Coldcard, read who is affected and exactly what to do, or use the two-minute check. All current advisories: security advisories.
Hardware Wallet Comparison Chart 2026: Every Major Device Ranked
Choosing a hardware wallet in 2026 means navigating a market that has matured significantly over the past few years. There are now over a dozen serious contenders from seven manufacturers — Trezor, Ledger, Coinkite (Coldcard), Blockstream, Foundation, Keystone, and Shift Crypto (BitBox). Each makes different tradeoffs between security architecture, usability, coin support, and price.
This comparison covers twelve wallets across all relevant categories. Whether you hold only bitcoin or a broader portfolio, store modest savings or significant wealth, want air-gapped operation or prefer plug-and-play USB — there is a device here that matches your requirements. If you are entirely new to hardware wallets, start with the Hardware Wallet Buying Guide for foundational concepts before diving into the comparison table below.
Affiliate disclosure: the BitBox02 and Keystone 3 Pro links on this page are affiliate links (we may earn a commission, paid in BTC). No other link on this page is. The BitBox02 has been our Best for Beginners pick, and the Keystone 3 Pro our pick for air-gapped altcoin signing, since this chart was published in January 2026, months before we joined either affiliate program.
Full Comparison Table
Prices are what each manufacturer’s own store listed on 3 November 2026, in US dollars unless marked otherwise.
| Wallet | Price | Coins | Connectivity | Open Source | Secure Element | Air-Gap | Screen | Battery |
|---|---|---|---|---|---|---|---|---|
| Trezor Safe 3 | $59 | Bitcoin + altcoins | USB-C | FW + HW design (secure chip closed) | Optiga Trust M (EAL6+) | No | Mono OLED | No |
| Trezor Safe 5 | $129 | Bitcoin + altcoins | USB-C | FW + HW design (secure chip closed) | Optiga Trust M (EAL6+) | No | Color touchscreen | No |
| Ledger Nano S Plus | $69 | 500+ in Ledger Wallet; thousands via other wallets | USB-C | Partial (app layer) | CC EAL6+ | No | Mono OLED | No |
| Ledger Nano X | $99 | 500+ in Ledger Wallet; thousands via other wallets | USB-C, Bluetooth | Partial (app layer) | CC EAL5+ | No | Mono OLED | Yes |
| Ledger Flex | $249 | 500+ in Ledger Wallet; thousands via other wallets | USB-C, Bluetooth, NFC | Partial (app layer) | CC EAL6+ | No | E-ink touchscreen | Yes |
| Coldcard Mk5 | $269 list / $219 sale | Bitcoin only | USB-C, NFC, microSD | Source-available (FW) | Dual (ATECC608 + DS28C36B) | Yes | 1.54" (Gorilla Glass) | No (USB-C power) |
| Coldcard Q | $369 list / $319 sale | Bitcoin only | USB-C, NFC, 2× microSD, camera (QR) | Source-available (FW) | Dual (ATECC608 + DS28C36B) | Yes | Larger color LCD | Yes (3× AAA batteries) |
| Blockstream Jade | $67 | Bitcoin + Liquid | USB-C, Bluetooth, camera | Full (FW + HW design) | Virtual (blind oracle) | Yes (QR via camera) | Color LCD | Yes |
| Blockstream Jade Plus | $149 plastic / $169 metal | Bitcoin + Liquid | USB-C, Bluetooth, camera | Full (FW + HW design) | Virtual (blind oracle) | Yes (QR via camera) | Upgraded color LCD | Yes |
| Keystone 3 Pro | $149 (pre-order) | Bitcoin + altcoins | Camera (QR), microSD, USB-C (data only if approved) | Firmware (open source) | Three chips (ATECC608B, DS28S60, MAX32520) | Yes (QR) | 4" color touchscreen | Yes |
| Foundation Passport Core | Discontinued (successor: Passport Prime, €388.95) | Bitcoin only | Camera (QR), microSD | Full (FW + HW design) | ATECC608B | Yes | Color IPS | Yes (removable) |
| BitBox02 Bitcoin-only | €149 incl. VAT (EU store) | Bitcoin only | USB-C | Firmware (Apache 2.0) | ATECC608B | No | Mono OLED | No |
Newer models, not yet ranked (updated November 2026)
These four are on sale but we haven’t tested them, so they sit outside the ranking and the figures below. The details are from the makers’ own pages, checked on 7 November 2026.
| Wallet | Price | Coins | Connectivity | Open Source | Secure Element | Air-Gap | Screen |
|---|---|---|---|---|---|---|---|
| Trezor Safe 7 | $249 | Bitcoin + altcoins (Bitcoin-only edition available) | USB-C, Bluetooth; Qi2 wireless charging | FW + HW design (OPTIGA chip closed; TROPIC01 auditable) | Optiga Trust M (EAL6+) + TROPIC01 | No | 2.5" color touchscreen |
| Ledger Nano Gen5 | $179 | Bitcoin + altcoins | USB-C, Bluetooth, NFC | Partial (app layer) | CC EAL6+ (ST33K1M5) | No | 2.8" E-ink touchscreen |
| BitBox02 Nova | €175 (EU store) | Bitcoin-only or Multi edition | USB-C, Bluetooth (for iPhone and iPad) | Firmware (open source) | Optiga Trust M V3 (EAL6+) | No | Mono OLED, glass top |
| Blockstream Jade Core | $99 | Bitcoin + Liquid | USB-C, Bluetooth (no camera) | Firmware (open source) | Virtual (blind oracle) | No | 1.9" color LCD |
In short: the Safe 7 and the Nano Gen5 bring Bluetooth and larger touchscreens to Trezor’s and Ledger’s ranges; on the Nano Gen5, NFC is for Ledger’s Recovery Key card. The BitBox02 Nova adds Bluetooth so the BitBox works with an iPhone or iPad. The Jade Core is a cheaper Jade without the camera, so it can’t sign by QR code. Trezor calls the Safe 7 the first hardware wallet to use post-quantum signatures (SLH-DSA-128) to check its own firmware and boot process; that protects the device’s updates, not your coins, which Bitcoin’s own signatures still protect. TROPIC01, its second secure element, is one Trezor presents as independently auditable.
Category Winners
Best Budget: Blockstream Jade ($67)
At $67, the original Jade costs a little more than the Trezor Safe 3 and less than everything else on this list, and it is the cheapest device here that can sign air-gapped. You get a fully open-source device with a camera for air-gapped QR-code signing, Bluetooth connectivity, and a color screen. The “virtual secure element” design — where the device uses Blockstream’s blind oracle server to decrypt the seed — is unconventional and not without trade-offs. If the oracle server goes offline permanently, you need your seed phrase to recover (which you should have backed up anyway). But for the price, no other device offers air-gapped signing capability, open-source firmware, and multi-connectivity options. If you want the upgraded build quality and larger screen of the Jade Plus, it costs $149 in plastic or $169 in metal.
Best Bitcoin-Only: Coldcard Mk5 ($269 list / $219 sale)
Coinkite replaced the Mk4 with the Mk5 in March 2026. The Mk5 runs the same firmware line (5.6.3 for both as of November 2026), with a 1.54" Gorilla Glass screen and an improved keypad. You still get dual secure elements from two vendors, air-gapped operation via microSD, NFC for tapping a phone, and firmware that will never support altcoins. The device runs on a philosophy that attack surface reduction matters — fewer features means fewer vulnerabilities.
July 2026 showed the limit of trusting any single device, though. A firmware bug weakened seeds generated on several Coldcard models, the Mk4, Mk5 and Q included, until fixed firmware shipped (see the advisory at the top). Update before you create a seed (current firmware makes you add your own randomness first), and for savings use the Coldcard as one key of a 2-of-3 multisig with two other manufacturers.
The Mk5’s numeric keypad is functional but not luxurious; if you want a more comfortable input experience, the Coldcard Q adds a full QWERTY keyboard, a QR camera and a larger color screen for $100 more. Both models support advanced features like seed XOR, temporary seeds, and extensive multisig coordination.
Best Premium: under review
Our pick here was the Foundation Passport Core. Foundation no longer sells it; it now sells the Passport Prime (€388.95, November 2026), which we have not reviewed. This category stays open until we have. If you already own a Passport Core, it is still the device we described in January: a machined aluminum chassis, a removable battery, an IPS color screen, a camera for QR-code scanning, open-source firmware and hardware designs, and native pairing with Foundation’s Envoy app. For an analysis of open-source hardware principles, see Open Source Hardware Wallets: 2026 Analysis.
Best Open Source: Trezor Safe 5 ($129)
Trezor pioneered the open-source hardware wallet and publishes both its firmware and its hardware designs. The Safe 5 has a color touchscreen with haptic feedback, an EAL6+ secure element (addressing years of criticism about lacking one), and support for a broad range of cryptocurrencies. Trezor also sells the newer Safe 7 ($249), which sits above it in the range; it’s in the newer-models table above, outside the ranking until we test it. Because the firmware and the hardware design are public, independent security researchers can audit both; the secure chip’s own design is closed, as with nearly every secure element. If open-source auditability is your top priority and you also hold altcoins, the Safe 5 is the strongest choice.
Best for Beginners: BitBox02 Bitcoin-only[#aff] (€149 incl. VAT, EU store)
The BitBox02 makes the fewest demands on new users. Plug it in via USB-C, open the BitBoxApp on your computer, and follow the guided setup. The firmware is open source, the device includes an ATECC608B secure element, and the minimalist design means there are fewer things to configure or misunderstand. The Bitcoin-only edition runs firmware with no altcoin code at all, so it can’t sign altcoin transactions. Swiss engineering, clean software, and a smooth onboarding experience make it the easiest recommendation for someone buying their first hardware wallet. Our free course suggests the Trezor Safe 5 ($129) for beginners; it’s an equally good first device if you prefer a color touchscreen. If you use a BitBox02, keep its firmware up to date. Version 9.26.5 (17 August 2026) brought “security improvements”, according to BitBox’s release notes; if your device runs anything older, update it in the BitBoxApp. Details in our BitBox02 advisory.
Security Architecture Comparison
Not all security architectures are equal, and understanding the differences helps you evaluate what you are actually trusting when you use each device.
Secure Element Approaches
The secure element debate has been central to hardware wallet security for years. Here are the distinct approaches:
Dedicated certified secure elements (Ledger): These use bank-grade chips certified to Common Criteria EAL5+ (Nano X) or EAL6+ (Nano S Plus and Flex). The secure element handles key storage and signing operations in a tamper-resistant environment: Ledger’s own operating system runs its apps inside the chip. The trade-off: that operating system is closed-source, so it cannot be fully audited.
Companion secure elements (Trezor Safe 3 and Safe 5, Coldcard, BitBox02, Passport): These devices use a general-purpose microcontroller for main operations and a secure chip as a secondary security layer: an Infineon OPTIGA Trust M (EAL6+) on the Trezors, an ATECC608B or similar on the others (the Coldcard Mk5 and Q add a second secure element from another vendor). The secure element stores secrets or provides attestation, but the main MCU handles signing. The firmware on the MCU is public and auditable; the secure chips’ own code is not.
Virtual secure element (Blockstream Jade): Jade takes a completely different approach. The device has no hardware secure element. Instead, it uses a “blind oracle” protocol where an encrypted secret is stored on the device and decrypted using a PIN-derived key in combination with Blockstream’s server. This means the server cannot learn your keys (it never sees them in the clear), and the device alone cannot decrypt them without the correct PIN. The trade-off: each normal unlock needs the oracle, which the companion app on your phone or computer reaches for the Jade. To avoid depending on Blockstream’s server, you can run your own oracle, or unlock with your recovery phrase directly, for example by scanning it as a SeedQR.
For a deeper technical analysis of secure element vulnerabilities, read Side-Channel Attack Risks in Hardware Security.
Firmware Verification
How do you know the firmware running on your device is legitimate? Each manufacturer handles this differently:
- Trezor: Fully open-source firmware. You can compile from source and compare the binary hash. The bootloader verifies firmware signatures on boot.
- Ledger: The secure element verifies firmware integrity. The firmware for the secure element is not open source. Ledger has introduced Ledger Recover as an optional feature, which has sparked debate about the trust model.
- Coldcard: Source-available firmware: public to read and build, under the MIT licence with the “Commons Clause”, which forbids selling it (Coinkite calls it open source). You can verify the firmware hash displayed on the device against published hashes. The dual secure elements provide boot-time attestation.
- Blockstream Jade: Fully open-source firmware and hardware. Reproducible builds allow independent verification.
- Foundation Passport: Open-source firmware and hardware. Firmware updates are loaded via microSD, allowing fully air-gapped updates.
- BitBox02: Open-source firmware. The device uses dual-chip architecture with secure boot.
- Keystone: Open-source firmware. Updates load from a microSD card, or over USB-C once you approve data access on the device.
For more on firmware update security, see Firmware Updates and Security Best Practices.
Connectivity Comparison
Connectivity is not just about convenience — it directly impacts your security model. Every communication channel between your signing device and your internet-connected computer or phone is a potential attack surface.
USB (all except the Passport Core)
USB is the most common and most straightforward connection method. The device connects directly to your computer, and transaction data is transmitted over the USB protocol. This is simple and fast, but it means your signing device is physically connected to a potentially compromised machine. USB connections also carry theoretical risks from malicious USB payloads, though all reputable hardware wallets implement USB communication at the application level with limited protocol exposure.
Bluetooth (Ledger Nano X, Ledger Flex, Jade, Jade Plus)
Bluetooth enables wireless signing from a mobile device. This is convenient for on-the-go transactions but adds wireless attack surface. Ledger and Blockstream both encrypt the Bluetooth communication channel, and the device still requires physical confirmation of every transaction. The practical risk is low, but security purists avoid Bluetooth on principle. If you use Bluetooth, keep your device’s firmware updated and pair only with your own phone.
QR Codes / Camera (Jade, Jade Plus, Keystone, Coldcard Q, Passport Core)
QR-code-based communication via camera is the gold standard for air-gapped operation. The signing device and the coordinator software exchange transaction data through on-screen QR codes — no electrical or wireless connection whatsoever. On the Keystone, Bitcoin transactions normally move through QR codes; its USB-C port only charges the device until you approve data access on screen, as you do for a firmware update over USB or to sign with one of the few wallets, mostly for other coins, that connect to it by USB. Passport and Jade use cameras to scan QR codes displayed on a phone or computer screen. The trade-off is speed: scanning multiple QR codes for a large or complex transaction can take a few seconds longer than USB.
NFC (Coldcard Mk5, Coldcard Q, Ledger Flex)
Near-field communication allows tap-based data transfer between the signing device and a phone. On the Ledger Flex, NFC is for Ledger’s Recovery Key card and for use as a security key, not for signing payments. Coldcard uses NFC for exporting PSBTs (partially signed Bitcoin transactions) and for sharing wallet configuration files. The NFC radio can be permanently disabled in Coldcard’s settings if you prefer to restrict communication to microSD only. NFC range is very short (a few centimeters), which limits remote attack possibilities.
MicroSD (Coldcard Mk5, Coldcard Q, Passport Core)
The most paranoid air-gap option. Transaction data is saved to a microSD card on the computer, physically moved to the signing device, signed, and then moved back. There is zero wireless or wired connectivity between the signing device and any networked machine. The downside is workflow friction — but for cold storage that you access infrequently, it is the strongest isolation model available.
Multisig Compatibility
If you plan to use multisig — and you should consider it for significant holdings — verify that your chosen devices work together. Not all wallets play nicely in multi-vendor multisig setups.
The most broadly compatible devices for multisig coordination are Coldcard, Passport, Keystone, and BitBox02, all of which support standard descriptor-based multisig and work well with coordinator software like Sparrow Wallet, Electrum, or Nunchuk. Trezor and Ledger also support multisig but may require additional setup steps in some coordinator apps.
Using devices from multiple manufacturers in a single multisig quorum is a best practice — it eliminates single-vendor risk. If a critical vulnerability is found in one manufacturer’s firmware, your other keys are unaffected. For a detailed analysis, see Three Keys From the Same Vendor Are Not Multisig.
For long-term savings, consider a 2-of-3 multisig with devices from three different manufacturers. A passphrase and your own dice rolls are optional extras that need care: back up a passphrase as carefully as the seed, and if you use dice, follow our dice rolls guide, because careless rolls make a seed weaker. Some devices mix your rolls with their own randomness; others, such as the BitBox02, use your rolls instead of it. Keep a copy of the wallet’s descriptor, the line of text that records all three public keys and the 2-of-3 rule, with each seed backup: with one key lost, two seeds alone can’t find your coins. Our 2-of-3 multisig setup guide walks through the whole setup, and Three Keys From the Same Vendor Are Not Multisig explains why the manufacturers have to differ.
For guidance on setting up multisig from scratch, read Multi-Sig Wallet Configurations.
Which Wallet Should You Buy?
Decision frameworks help more than blanket recommendations:
You hold only bitcoin and want maximum security: a Coldcard Mk5, or the Q if you type long passphrases. Both are Bitcoin-only and air-gapped, and their firmware code is public (source-available). Install current firmware before you create a seed; it makes you add your own randomness first. We used to list the Passport here as well; Foundation has discontinued the Core, and we have not reviewed its successor, the Passport Prime. For the most security, make the Coldcard one key of a 2-of-3 multisig (see below).
You hold bitcoin and altcoins: Trezor Safe 5 for open source. Ledger Flex for the widest coin support and premium hardware. Keystone 3 Pro[#aff] for air-gapped altcoin signing. Keystone lists the 3 Pro on pre-order (expected to ship in 4–6 weeks, as of 3 Nov 2026).
You are on a tight budget: Blockstream Jade at $67 is hard to beat. It does more than most devices twice its price.
You want the simplest setup experience: BitBox02 Bitcoin-only. Plug in, follow the app, done.
You are building a multisig setup: Mix vendors. Common combinations are Coldcard + Trezor + BitBox02, or Coldcard + Trezor + Jade. Diversity matters more than any single device choice. Read Singlesig to Multisig Bitcoin Migration for the full migration process.
You worry about supply chain attacks: Buy new from the maker’s own store, or from a reseller the maker lists only if it doesn’t deliver to you: in October 2026 Ledger confirmed a hidden implant in a device sold by CryptoBilis, an authorized reseller (our advisory). Avoid marketplaces and second-hand devices. Then favor devices where you can verify firmware reproducibility. Trezor, Jade, and BitBox02 currently offer the most robust reproducible build processes. For a technical look at firmware-level threats, see our guide to the Dark Skippy attack.
Frequently Asked Questions
Do I need a secure element in my hardware wallet?
A secure element adds physical tamper resistance, making it harder for an attacker with physical access to extract your private keys through power analysis, electromagnetic probing, or chip decapping. However, a secure element is not strictly necessary for security. The original Trezor One operated for years without one, relying on strong firmware security and user-held seed phrase backups. The real question is your threat model: if you worry about sophisticated physical attacks on your device, a secure element matters. If your primary concern is remote software attacks, the firmware’s quality and auditability matter more. For a thorough analysis of physical attack vectors, see Side-Channel Attack Risks.
Is Bluetooth on a hardware wallet a security risk?
Bluetooth adds attack surface — that is undeniable. However, the practical risk is low when implemented correctly. Ledger and Blockstream both encrypt the Bluetooth channel, and the hardware wallet still requires you to confirm every transaction on the device itself, with its buttons or, on the Ledger Flex, its touchscreen. An attacker intercepting Bluetooth traffic would see encrypted data and could not approve transactions without physical access to the device. The real risk with Bluetooth is not interception but rather that Bluetooth firmware itself could contain vulnerabilities. If this concerns you, choose a device without Bluetooth or disable Bluetooth in device settings.
Should I buy a Bitcoin-only hardware wallet or one that supports altcoins?
If you only hold bitcoin, a Bitcoin-only device is strictly superior from a security perspective. Every additional coin’s codebase adds potential attack surface. Coldcard, the Passport Core and the BitBox02 Bitcoin-only edition run firmware with no altcoin code at all, so it can’t process altcoin transactions. If you hold altcoins alongside bitcoin, you need a multi-coin device like Trezor, Ledger, or Keystone, or you can use a dedicated Bitcoin-only device for your bitcoin and a separate device for altcoins.
How important is air-gapped operation?
Air-gapping means your signing device never has a direct electrical or wireless connection to any networked computer. The signing device and the software wallet exchange transaction data via QR codes or microSD cards. This eliminates an entire class of attacks where malware on your computer could attempt to exploit the USB connection to the hardware wallet. For cold storage that you access infrequently, air-gapped operation is a strong security upgrade. For daily spending, the inconvenience may not be worthwhile. Most users benefit from a middle ground: use an air-gapped device for cold storage and a USB-connected device for routine transactions.
Can I use multiple hardware wallets together in a multisig setup?
Yes, and it is one of the most powerful security configurations available to individuals. A 2-of-3 multisig using three different hardware wallets from three different manufacturers means an attacker must compromise two separate devices with two different security architectures stored in two different locations. No single device failure, theft, or manufacturer vulnerability can result in loss of funds. Common multi-vendor combinations include Coldcard + Trezor + BitBox02, or Coldcard + Trezor + Jade. Dice rolls and a passphrase are optional extras; if you use them, follow our dice rolls guide and back up the passphrase as carefully as each seed. Read Multisig Recovery Protocols to understand the recovery process before committing to a multisig setup.
