Best Hardware Wallets

Best hardware wallets by use case

The seven devices split into two groups: multi-asset signers and Bitcoin-focused ones. Within each, the deciding marks are usually how you sign (cable, Bluetooth, QR or microSD) and what you can inspect.

• Many blockchains, signed without a cable: Keystone 3 Pro. It is the only device with 10 for both air-gap and asset coverage. It signs through QR codes and lists 5,500+ assets on 30+ blockchains by its own count. Its sources disagree on which three secure element chips it uses; the Keystone 3 Pro review sets out the conflict.
• A certified chip and rebuildable firmware at the lowest price: Trezor Safe 5. At $109 it is the cheapest device rated (price 9). It names an OPTIGA Trust M chip certified to Common Criteria EAL6+ (secure element 9), and its GPL-3.0 firmware has a documented reproducible build (open source 10). It signs only over USB-C (air-gap 5), and the product page says sending and setup are not available on iOS. See the Trezor Safe 5 review.
• Bitcoin only, with every cable-free route: Coldcard Q. It pairs two secure elements from different vendors with a QR scanner, two microSD slots and AAA battery power (secure element 10, air-gap 10). Its $369 list price is the highest in the category (price 4).
• Bitcoin only, at a lower Coldcard price: Coldcard Mk5. It has the same two chips and firmware as the Q, but signs air-gapped by microSD only, with no camera (air-gap 8). It lists at $269.
• Bitcoin plus Ethereum, EVM networks or Cardano, with fully inspectable firmware: BitBox02. The Multi edition covers a defined network list (coverage 7), and its Apache-2.0 firmware is reproducible with published board files (open source 10). It signs over USB-C only.
• Bitcoin and Liquid, with no closed chip in the key path: Blockstream Jade Plus. It signs over QR (air-gap 10) and has no secure element at all. A blind oracle server, which you can self-host, protects the PIN instead (secure element 5). See the Jade Plus review.
• A named EAL6+ chip, broad assets and a backup card in the box: Ledger Nano Gen5. It scores 9 for both its STMicroelectronics ST33K1M5 chip and its asset support, and ships with a Ledger Recovery Key card. Part of its firmware is closed and it cannot sign air-gapped (5 on both).

How the ranking works

Each device is marked from 0 to 10 on five equally weighted criteria:

• Price & value: the list price at the vendor's own store, not a sale price, banded across the category, with credit for a backup accessory in the box. The Ledger Nano Gen5's Recovery Key card, for example, lifts it from 6 to 7 in the $160 to $200 band.
• Secure element: whether a dedicated chip is present, whether its model and Common Criteria level are named, and whether more than one independent chip is used. A named single chip with an EAL6+ certificate earns 9. Two- or three-chip designs earn 10. A device with no chip is described as such and marked on its alternative design.
• Open source: a 10 needs published firmware, a documented reproducible build and published hardware design files. Vendor claims count only where the repository is linked.
• Air-gap & verification: how a transaction reaches the device and whether it can be signed with no connection to a computer. Connected-only signing over USB or Bluetooth scores 5.
• Asset coverage: the assets and networks the vendor states it supports. Bitcoin-only devices score lower by definition; all three in this ranking get 4.

The overall score is the plain average of the five marks, rounded to one decimal. For the Keystone 3 Pro, 8 + 10 + 10 + 10 + 10 = 48, and 48 divided by 5 gives 9.6. Ties are listed alphabetically: BitBox02 comes before Coldcard Mk5 at 7.4, and Blockstream Jade Plus before Ledger Nano Gen5 at 7.0. The basis is desk research of vendor stores, product pages, help centers and GitHub repositories, checked on 1 November 2026. We did not handle or test any device. Marks are re-checked when a vendor changes a price, a document or a repository, and each change is logged with its source in the device's review. The full rules are on the ratings methodology page.

Device	Price	Secure element	Open source	Air-gap	Assets	Overall
Keystone 3 Pro	8	10	10	10	10	9.6
Trezor Safe 5	9	9	10	5	9	8.4
Coldcard Q	4	10	10	10	4	7.6
BitBox02	8	7	10	5	7	7.4
Coldcard Mk5	5	10	10	8	4	7.4
Blockstream Jade Plus	6	5	10	10	4	7.0
Ledger Nano Gen5	7	9	5	5	9	7.0

What changed in this update

The November 2026 rescoring moved five of the seven devices. Three rose on new disclosures, although one of them also lost two air-gap points, and both Coldcards fell on higher list prices. No device was withdrawn.

• Trezor Safe 5 rose to 8.4, from 8.2. Trezor now names its chip and certification (secure element 8 to 9), and its repositories document a reproducible build and Safe 5 schematics (open source 8 to 10). Air-gap fell from 7 to 5: the July mark appears to have credited the microSD slot, and no Trezor page documents signing through it.
• Ledger Nano Gen5 rose to 7.0, from 6.6. An Academy explainer updated on 20 October 2026 sets out which code layers are public (open source 3 to 5). The previous review also wrongly said Ledger designs its chips in-house; the ST33K1M5 is made by STMicroelectronics.
• BitBox02 rose to 7.4, from 7.2, after its firmware README linked PCB schematics and a bill of materials (open source 9 to 10).
• Coldcard Mk5 fell to 7.4, from 7.8. Coinkite's store now lists it at $269, up from the $189 used in July (price 7 to 5).
• Coldcard Q fell to 7.6, from 7.8. Its list price is now $369, up from $289 (price 5 to 4).
• Keystone 3 Pro and Jade Plus are unchanged, at 9.6 and 7.0. Their prices, designs and asset lists matched the July check.

Is a Bitcoin-only hardware wallet a weakness?

Only if you hold other assets. The rubric gives Bitcoin-only devices 4 for coverage by definition, which is why both Coldcards and Jade Plus sit below the multi-asset leaders despite top marks for open code and cable-free signing. Coinkite presents the narrow scope as a deliberate way to keep the attack surface small. If bitcoin is all you hold, the coverage mark costs you nothing in practice. In that case compare the other four criteria directly: the Coldcard Q and Jade Plus both score 10 for air-gap and open source, and they differ on chips (10 against 5) and price (4 against 6).

What the scores do not cover

• Incident history. No criterion scores it. On 30 July 2026 Coinkite disclosed a firmware bug that weakened seed generation on Coldcard devices, and its security status page says attackers later regenerated affected keys and stole funds. Updating firmware does not repair an affected seed. Coinkite says such seeds must be replaced and the funds moved; the Coldcard Mk5 review lists the fixed releases. Ledger's 2020 customer-data leaks and the December 2023 Connect Kit attack are likewise outside the score.
• Physical attacks beyond the stated design. Certification levels are scored as published. Blockstream itself says the Jade's microcontroller is not hardened silicon, and Keystone publishes no certification level for its chips.
• Companion software and in-app services. The wallet app builds each transaction. Swaps, purchases and subscription recovery services such as Ledger Recover are run separately and not scored.
• Build quality, battery, screen and delivery. We did not handle any device. The Keystone 3 Pro was on pre-order on 1 November 2026, and the BitBox02 shop price could not be rechecked that day (the site refused automated access).

For what a secure element, a PIN and a backup each protect against, see our guide to hardware wallet security.

How to choose a hardware wallet

1. Start with the assets you hold. A Bitcoin-only device cannot sign for Ethereum or Solana, and the BitBox02 edition is fixed at purchase.
2. Decide how you want to sign. If you never want the device connected to a computer, look for QR or microSD signing; four of the seven devices offer it.
3. Choose between a closed certified chip and fully inspectable code, or a device that offers both. Only the Trezor Safe 5 combines a named EAL6+ chip with a 10 for open source.
4. Check the software wallet you plan to pair it with. Our software wallet ratings score hardware pairing from the wallet's side.
5. Buy from the vendor's own store, and check the current list price there; both Coldcard list prices rose between July and November 2026.
6. Write the recovery phrase on paper or metal before funding the device, and never type it into a computer or phone. Our seed phrase guide covers the options.