How they work
A hardware wallet is a small, dedicated device that generates and stores your private keys offline. Your computer or phone prepares a transaction, the device shows you the details on its own screen, and only after you approve it physically does it sign. The keys themselves never leave the device.
So even if your computer is full of malware, an attacker can’t move your bitcoin without the device in hand, and without you confirming on its screen.
What matters when choosing
Today’s devices compared
Prices are approximate as of October 2026: $ under $100 · $$ $100–200 · $$$ $200–400 · $$$$ $400+.
| Device | Bitcoin-only option | Open source | Air-gapped | Secure element | Price |
|---|---|---|---|---|---|
| Trezor Safe 5 / Safe 7 | Yes | Yes | No (USB) | Yes | $$ / $$$ |
| BitBox02 Nova | Yes | Yes | No (USB) | Yes | $$ |
| Blockstream Jade / Jade Plus | Bitcoin & Liquid | Yes | Yes (QR) | No (“virtual” SE) | $ / $$ |
| Foundation Passport Prime | Yes | Yes | Yes (QR) | Yes | $$$$ |
| Keystone 3 Pro | Yes (BTC build) | Yes | Yes (QR/microSD) | Yes | $$ |
| Coldcard Mk5 / Q | Yes | Source viewable | Yes (microSD/QR) | Yes (two) | $$$ |
| Bitkey | Yes | Partly | No (phone link) | Yes | $$$ |
| Ledger (Nano / Flex / Stax) | No | No (closed SE) | No | Yes | $–$$$$ |
| SeedSigner (DIY) | Yes | Yes | Yes (stateless) | No | $ |
The devices
The original hardware wallet maker. Polished, beginner-friendly, with a colour touchscreen and secure element. Safe 7 adds a larger screen and a second chip.
Visit Trezor →Minimal and elegant, with excellent software and a clean backup flow using a microSD card. A great first device.
Visit BitBox →Affordable, camera-equipped and fully air-gappable. Uses a “virtual secure element” (keys split with a remote oracle and your PIN) rather than a chip.
Visit Jade →Foundation’s premium, beautifully designed bitcoin-only device with a large touchscreen and QR signing. (The older Passport “Core” is discontinued.)
Visit Foundation →Big screen, fully air-gapped, with a bitcoin-only firmware build and strong multisig support in Sparrow.
Visit Keystone →Long a favourite of advanced users. In July 2026 a firmware randomness bug left some seeds generated on the device predictable, and attackers drained thousands of wallets. Fixed firmware is out; see the warning below before using one.
Visit Coldcard →From Block (Jack Dorsey’s company). Splits control between your phone, the device and Block’s server, so losing any one doesn’t lose your bitcoin. Very beginner-friendly.
Visit Bitkey →Hugely popular and easy to use, but supports thousands of tokens and its secure-element firmware is closed. Its 2023 “Ledger Recover” feature unsettled many bitcoiners.
Visit Ledger →Build your own signer from a Raspberry Pi Zero and a camera. It forgets everything when powered off, making it perfect as one key in a multisig.
Visit SeedSigner →Some links above are affiliate links. BeSovereign may earn a small commission at no extra cost to you.
Using a Coldcard? If your seed was generated on a Coldcard running firmware from roughly 2021 until the July 2026 fixes (Mk4/Mk5 before 5.6.0, Q before 1.5.0Q, Mk2/Mk3 4.0.1–4.1.9, or Edge before 6.6.0X), Coinkite advises updating the firmware, creating a brand-new seed and moving your funds. Updating alone does not fix an old seed. Seeds created with 50+ fair dice rolls were not considered at risk. Check Coinkite’s official advisory for the details.
Which one for you?
Building a multisig? Mix brands, e.g. a Trezor, a Jade and a BitBox. A bug in one manufacturer’s code (like the 2026 Coldcard flaw) then can’t empty your wallet on its own. See Multisig & custody.
Setting one up safely
- Buy direct from the makerNever second-hand, never from marketplace resellers. Check the packaging is intact.
- Download software only from the official siteBookmark it. Fake wallet apps are a top scam.
- Update the firmwareDo this before creating your wallet.
- Generate a new seed on the deviceNever use words that came in the box. Optionally add dice rolls for extra randomness.
- Write down and back up the wordsOn paper first, then steel. Store them safely.
- Set a strong PINAnd consider a passphrase.
- Test a recovery with a small amountThen deposit your savings. Always verify receive addresses on the device’s own screen.
BeSovereign guides are for education only and are not financial, legal or tax advice. Products and prices change, so always check the official source before buying or moving funds.