Overview
Ledger is the most recognisable name in hardware wallets, and by a distance the market leader by units shipped — over 7 million devices as of 2026. The Paris-headquartered company builds four hardware wallets: the entry-level Nano S Plus ($79), the Bluetooth-enabled Nano X ($149), the higher-end Flex ($249) with a curved E-Ink display, and the flagship Stax ($399) featuring a wraparound touchscreen designed by Tony Fadell (of iPod fame). All share the same core security architecture — a bank-grade Secure Element chip, CC EAL5+ certified — combined with Ledger’s proprietary BOLOS operating system.
The reason to use Ledger comes down to three things: coin coverage is unmatched (5,500+ assets across 100+ networks, including native support for chains many competitors miss); the app ecosystem is more polished than any rival, with Ledger Live now integrating swaps, staking, buy/sell, and NFT display in one interface; and the retail experience — clear onboarding, active support, well-produced educational content — is genuinely accessible to non-technical users. If your parents want a hardware wallet, this is the one they’ll actually set up correctly.
The security architecture
Ledger’s defining choice is the Secure Element chip. Unlike open-source alternatives that use general-purpose microcontrollers, the SE is a tamper-resistant chip originally developed for banking cards and passports. It’s designed to resist physical attacks including power-glitching, side-channel analysis, and invasive probing. Certification is CC EAL5+ (Common Criteria Evaluation Assurance Level 5+), which is a genuine industry benchmark — not marketing language.
The trade-off is that the SE firmware is closed source. Ledger publishes their OS and application code, but the low-level SE firmware — the code that manages the actual key material — is proprietary. This is unavoidable: the chip manufacturer (STMicroelectronics) requires NDAs, and Ledger cannot open-source what it doesn’t own. For open-source purists, this is a dealbreaker. For everyone else, the security trade is defensible.
The controversies
Ledger has had two significant reputation events. First, in 2020, an e-commerce database was breached, exposing customer names, addresses, and email addresses (though no crypto or seed phrases). Affected customers reported ongoing phishing attempts for years afterward. Ledger’s response — acknowledging the breach, updating security practices — was adequate but the damage to trust lingered.
Second, in May 2023, Ledger announced Ledger Recover — an opt-in service that would allow customers to encrypt fragments of their seed phrase and store them across three custody providers, retrievable via ID verification. The community reaction was severe, driven by the (correct) observation that if a firmware update could enable Recover, the device’s marketing claim that “the seed never leaves the device” was technically no longer true. Ledger has since made Recover firmware fully optional, requires explicit user opt-in, and published detailed transparency documentation. The controversy has subsided but hasn’t been forgotten.
Where Ledger wins
For most users — including anyone new to hardware wallets, anyone with a diverse portfolio spanning altcoins and NFTs, and anyone who values a smooth companion app — Ledger is the right pick. The Nano S Plus at $79 is arguably the best-value hardware wallet on the market. The Stax and Flex serve a different niche: users who want a premium tactile object and can justify the price.
Where Ledger loses
If you value strict open-source firmware, choose Trezor or BitBox02 instead. If you’re a Bitcoin-only holder, the Trezor Safe 3 or BitBox02 Bitcoin-only edition are better philosophical fits (Ledger supports Bitcoin but treats it as one asset among 5,500). If the 2023 Recover controversy still troubles you, that’s a legitimate reason to look elsewhere — no one at Ledger will convince you otherwise.
The verdict
Ledger scores 4.6/5. It’s the default recommendation for a reason: broad coin support, polished apps, defensible security, and pricing that includes a genuinely good entry-level option. The Secure Element is a real security benefit. The Recover controversy hurt trust but didn’t compromise security. For the majority of readers, this is the hardware wallet to buy.
If you want the counter-argument (open-source firmware matters more than certified chips), Trezor’s review is next.