Hardware wallets, without invented prices

The screen on the device is the point

A hardware wallet keeps the private keys off the computer that builds the transaction. You confirm the address and the amount on the device itself, or you complete a card tap that the card has to perform. A compromised browser can still show you a lie. It cannot silently sign if the keys never left the device and you refuse the prompt. That is the whole product. A logo is not it.

Prices, current model names beyond what a profile has sourced, and certification claims are not quoted here. Read the maker's site before you buy, and buy from that site. A marketplace box can arrive already initialized, or with a printed phrase 'for convenience'. A printed phrase is someone else's keys. A sticker on the box is a sticker. The first boot should offer to create a wallet, not welcome you to one that already exists.

The products in this set

Ledger is the widely supported option, and its profile is the place for whatever this site has sourced about the device. Trezor is the option whose maker publishes open-source firmware, which matters if you want code a stranger can read, and does not by itself make a careless confirmation safe. Keystone moves transactions by QR code instead of a cable. Tangem is a card that talks to a phone over NFC and is marketed with a seedless backup, which is a different risk from a written seed: the cards are the backup, and losing every card leaves nothing to restore. COLDCARD is Bitcoin-only, so it will not hold the tokens this site's checker is built for. BitBox offers a Bitcoin-only edition alongside a multicoin device.

None of those sentences is a price or a claim that one device is unhackable. If a profile row is missing, the fact was not invented to fill the gap. Open the maker's page from the profile link and read the current line yourself. Two devices from the same maker are still one backup story if they share a phrase. A second device is a convenience. The paper, or the extra cards, is the survival.

Setup habits that matter more than the brand

Generate the words on the device. Write them in order. Do not photograph them. Confirm the backup on the device before you send a real amount. Then display the receive address on the device and compare it to the computer. That comparison is the step people skip, and it is the step that catches a swapped address. Send a small test from the exchange, on the network the device named, and only then send more.

Firmware updates come from the vendor's app. A website you did not bookmark, telling you the device is vulnerable and asking for the phrase, is a theft page. Unplug it. The phrase bypasses the PIN on a new device, so the phrase does not travel in the same bag as the hardware. A passphrase, the optional extra secret some devices add, opens a different wallet and cannot be reset if you forget it. Skip it until you have restored the plain wallet once.

A hardware wallet does not review a token. It will sign an approval of a drainer if you confirm the prompt. Read the spender and the amount. The token checker is how you look at a contract without signing. The device is how you keep the keys off the machine. You need both habits once you hold more than a toy balance.

What hardware does not change

The coins are on the chain, not in the device. Losing the device is fine if the backup is real. Losing the backup and the device is the end of that wallet. An exchange cannot reverse a send the device signed. A freeze on a stablecoin, if the issuer has that power, still applies to the address the device generated. You removed the exchange. You did not remove the issuer.

Air-gapped signing, QR or a card, removes the cable. It does not remove the need to read. A seedless card removes the paper phrase and puts the risk on the set of cards. Pick the backup you will actually keep, and practice the idea of a restore while the balance is still a test. A brand argument on a forum will not help on the day the device dies.

Questions

A second device from the same maker does not create a second backup if both were initialized from one phrase. Write that down in the note that does not contain the words. People buy a spare and store it next to the first, then lose the house.

Do I need hardware for a first purchase? Not for an amount you can lose. A hot wallet with a written phrase is the simpler start. Hardware is the step when losing the amount would matter. Buying the device and leaving the coins on the exchange does not use the device.

Is open-source firmware required? It is a real preference, and Trezor is in this set for that reason. A closed device can still keep keys offline and show you a screen. The screen habit matters in both cases. This page does not award a winner.

Can I buy it from a retailer? Prefer the maker. If you did not, treat a pre-written phrase or an already-initialized device as compromised, wipe it using the maker's own reset, and generate a new wallet while you watch. Do not fund the phrase that came in the box.

Profiles

• Ledger — People who will hold more than they can afford to lose and want a widely supported hardware device.
• Trezor — People who want a hardware wallet and prefer firmware they can inspect.
• Keystone — People who want a hardware wallet that never needs a cable to the computer that builds the transaction.
• Tangem — People who want hardware custody in a card and are willing to understand the backup model before they skip a seed phrase.
• Coldcard — Bitcoin-only holders who want a hardware wallet that does not try to support every chain.
• BitBox — People comparing hardware wallets who want a Swiss vendor alongside Ledger and Trezor.