We focus on factual accuracy, relevance, and objectivity in our editorial policy. Our content is crafted by some of the top crypto experts in the industry. Each piece goes through a detailed review by our experienced editors to ensure our content meets the highest standards. It allows us to provide real, detailed crypto reviews from our team of crypto experts who have years of first-hand experience dealing with crypto, finance, and emerging technology. Learn more about our crypto asset testing and review process .
The most secure way you can store your Bitcoin and other cryptocurrencies is on a hardware wallet – a small physical device that holds your private keys offline, also known as crypto cold wallets. In this post, we’ll explain exactly how these devices work and cover the best hardware wallets around. Hardware wallets are the method that offers the best cold storage for crypto, as it offers the protection of a paper wallet combined with intuitive user interfaces for a smoother user experience.
Tl;DR? Watch Our Video Guide Instead
Hardware Wallets Summary
Hardware wallets use a form of two-factor authentication (also known as 2FA). This means that in order to access your funds, you’ll need to prove your identity through something you have (the physical wallet) and something you know (the PIN code for the wallet).
If you’re serious about Bitcoin and cryptocurrency security in general, you need to get a crypto hardware wallet to find the best crypto cold storage wallet. Many users have multiple external wallets as well to avoid a single point of failure risk. Here are the leading models on the market:
That’s hardware wallets in a nutshell. For a full review of each of our picks for the top cold wallets in-depth explanations, keep on reading.
Bitcoin Wallets in a Nutshell
The term Bitcoin wallet is a bit misleading, as a Bitcoin wallet doesn’t really hold any Bitcoin. Technically speaking, a Bitcoin wallet is a piece of software that holds passwords, sometimes referred to in cryptographic terms as keys.
These keys give your wallet access to the Bitcoins allocated to it on the Bitcoin transaction ledger called the blockchain.
So, when you use any Bitcoin wallet, you’ll encounter two important terms.
The first is a Bitcoin address, also known as a public key. This is what you share with people who want to pay you in Bitcoin, kind of like an email address.
The second is a private key. The private key allows you to access and control the Bitcoin and other cryptocurrencies you own. For my email account analogy, you might think of your private key as the password to your email account.
Aside from holding your private key, the wallet also signs Bitcoin transactions on your behalf using your private key and broadcasts them to the Bitcoin network. Let me explain:
When you want to send Bitcoin to someone else, you need to prove ownership of those coins to the whole network so it will agree to change the ledger of transactions.
To achieve this, your Bitcoin hardware wallet takes your requested transaction, signs it on your behalf using your private key, and broadcasts this digital signature to the network.
In a nutshell, a digital signature is a way to prove you own a certain private key without needing to expose it. It’s done through the use of complex mathematical rules known as cryptography.
This whole process is kind of similar to you signing a check authorizing the transfer of money from your account.
Once a transaction is signed, the wallet then broadcasts it to the whole network, which validates its authenticity. Eventually, this transaction will be entered by Bitcoin miners onto the blockchain, and the transaction will be considered complete.
Hardware Wallets
As you probably know, stealing a piece of information from a computer isn’t that hard these days. If the computer running your Bitcoin hardware wallet is infected with malware, it may expose your private key to bad actors.
Hackers may be able to take control of your computer or see what’s displayed on your screen. Once your private key is exposed, your Bitcoin and other cryptocurrencies are no longer under your control. They could be easily transferred to anywhere the hacker chooses.
In order to avoid this situation, you have two options:
- You could make sure your computer is completely malware-free. While this may sound easy, most viruses are either disguised as legitimate software or have a way to avoid detection by antivirus software.
- Use a wallet that is “immune” to malware, so to speak, to keep your private key safe. This is exactly what hardware wallets are designed to do.
Simply put, hardware wallets are a form of physical crypto wallet; essentially, computers that have been stripped down of all logic except for a small screen, a button or two, and the simple action of storing keys and signing transactions.
Hardware wallets look like small USB devices, and they offer a minimalist approach to security physical crypto wallet This is based on the logic that the more complex a device is, the more opportunities hackers have to infiltrate it.
In the case of hardware wallets, the device is so “dumb” that it’s practically impossible to hack or infect it with anything. Hardware wallets have no data transmission in or out via wifi, NFC, Bluetooth, or mobile data, effectively removing any remote attack surfaces that hackers may exploit.
Due to that simple design, hardware wallets can’t connect to the internet or run complicated apps. They are just a form of storing your private key offline in cold wallets.
This approach is known as cold storage, unlike devices that connect to the internet, which are called “hot wallets.” Cold storage wallets are considered more secure, but less accessible than hot wallets that provide easier access to DeFi applications. This makes cold wallet storage the most secure crypto wallet option.
How Do Hardware Wallets Work?
Let’s say you want to send a Bitcoin transaction using a hardware wallet.
The first thing to know is that because a hardware wallet is such a simple device that can only sign transactions, it needs to use a more sophisticated computer for all other functions, such as preparing the transaction and broadcasting it to the network.
So, in order to use a hardware wallet, you’ll need to connect it to your personal computer and download a program that can communicate with it. I’ll call this program a “bridge,” and the bridge allows you to prepare your transaction for signing.
Hardware wallets only allow very specific types of data to pass through to them, such as cryptocurrency transactions. Once a hardware wallet receives a transaction from the bridge program, it signs it on the hardware wallet itself and then sends it back to the bridge program.
Your private key never leaves the hardware wallet. The only thing that gets transferred between your computer and the hardware wallet is the unsigned and signed transaction.
Because of its minimalistic and simple design, a hardware wallet can be used with any computer without fear of being hacked or infected – even a public library computer or your mom’s laptop 🙂
The only thing you’ll need to do to make sure your Bitcoin is safe is to make sure the transaction you’re approving on the hardware wallet’s screen matches the transaction your bridge program is showing on your personal computer. Even the best hard wallet for crypto needs to be double-checked!
IMPORTANT! Your Seed Phrase
Setting up a hardware wallet is fairly easy. The main thing to do is write down the set of words you’ll be given when first setting up the device. This group of words, also known as a seed phrase or mnemonic phrase, is a way to restore any private key your hardware wallet generates.
This also means that whoever might get a hold of these words would also be able to control your Bitcoin and other cryptocurrencies, so it’s important to keep your seed phrase written offline and kept in a safe place.
What is the Best Hardware Wallet?
Today, there are over a dozen companies that offer hardware wallets on the market, with the market leaders being Ellipal, Ledger, TREZOR, and KeepKey. Each company offers different models with different features – We’ll cover the most popular ones below in no particular order, as well as the best crypto hardware wallets and best cold storage wallets.
What is the Best Offline Crypto Wallet?
For beginner’s looking for the best crypto cold storage option, we’d recommend using one of the hardware wallets we’ve outlined in this guide, such as Ellipal, Ledger or Trezor.
For more advanced users, a paper wallet may be a more suitable option, especially if they plan not to touch their investment for the foreseeable future.
1. Cypherock Hardware Wallet
Pros: No backup seed phrase vulnerabilities with Shamir Secret Sharing, supports over 9,000 crypto assets, stores 4 wallet accounts in one place, EAL6+ Secure Element chip
Cons: Mobile app still in development, companion app has limited features
Established in 2018, Indian-based hardware wallet startup Cypherock raised $1 million to develop Cypherock X1, a crypto wallet that secures digital assets through Shamir Secret Sharing. Crypto keys are decentralized and cryptographically stored across the wallet’s 5 hardware parts. This is currently the only crypto cold wallet the company provides, but it’s packed with secure features, 24/7 support, and intuitive crypto management.
Cypherock X1 can be broken down into two main components: the X1 Vault and X1 Cards. The X1 Vault is a dual-chip device and primary hardware component of the Cypherock X1 system. It provides offline computation and verification and functions as a gateway for managing crypto holdings, executing transactions, and storing private keys across the X1 Cards. The X1 Vault comes in a 0.96” OLED display and can connect to a desktop device via USB-C. As an offline crypto wallet, this means Cypherrock X1 cannot be hacked in the same way as an online crypto wallet.
Cypherock’s X1 Cards are NFC-powered smartcards that contain the EAL 6+ Secure Element (SE) chips that safely store users’ crypto assets. These cards use end-to-end encryption when sending and receiving data and are built to last for at least 20 years with 500,00+ taps.
Cypherock X1, featuring one X1 Vault, four X1 Cards, and a hard case, costs $159. Each component of the package can be purchased separately. The hardware crypto wallet supports more than 9,000 crypto assets, including Bitcoin, Ethereum, and BNB Smart Chain. Overall, Cypherock provides the best cold crypto wallet suitable for crypto enthusiasts of all experience levels.
Check out what makes Cypherock one of our highest-rated wallets in our in-depth Cypherock Review.
Use promo code “coldwallet” to get 17% off the Cypherock X1.
2. Ellipal Hardware Wallets
Pros: Air-gapped, support for more than 10,000 tokens & NFTs, mobile app, user-friendly interface, large screen, tamper-proof
Cons: No desktop app, limited customer service
Ellipal is a hardware wallet company that aims to be completely isolated from the outside world. Founded in 2018 by David Tian and Tong Chen, Ellipal is a robust, self-custodial hardware wallet designed to maximize security and user convenience. Built from metal and fully air-gapped, it ensures that your crypto assets remain safe from both cyber and physical attacks.
It has no wired or wireless connectivity — no Bluetooth, WiFi, USB, or NFC — instead, it communicates through QR codes via a camera on the rear end. Their standard Titan 2.0 Cold Wallet costs $169, while their Titan Mini Cold Wallet is $99. These are our picks for the best cold wallet for crypto options.
Ellipal excels in security, ensuring your private keys never touch the internet. It boasts EAL 5+ certification, indicating top-tier security against penetration. The wallet’s anti-tamper and anti-disassembly measures further safeguard against physical breaches. There is even a self-destruct feature if tampered with.
The hardware wallet supports more than 10,000 coins and tokens across 40 blockchains, including major ones like Bitcoin, Ethereum, Solana, and more. NFT enthusiasts will appreciate its support for NFTs on Ethereum and Polygon, with connectivity to over 50 NFT marketplaces. The ELLIPAL wallet is great for users who want fantastic asset support and easy access to DApps and DeFi platforms.
You can read our full Ellipal Titan 2.0 review to learn more.
3. Ledger Hardware Wallets
Pros: Thousands of crypto assets supported, connection to DApps, mobile compatibility (Nano X only).
Cons: The Bluetooth user interface is a bit confusing (Nano X only). Ledger has had some security issues and faced significant reputational damage over controversies with Ledger Recover.
The company (Ledger) has been around for a long time and are an industry leader along with Trezor when it comes to hardware wallets. Despite recent PR disasters like the rollout of Ledger recovery and the security blunders such as a data breach and the Ledger Connect exploit (which was quickly patched) Ledger remains among the best hardware wallet manufacturers in the industry. The company reputation aside, it is difficult to find fault with the actual Ledger devices themselves.
Accessing a Ledger wallet is done through Ledger Live – a free desktop application that allows you to control all of your Ledger devices, send and receive cryptocurrencies, and check your balance whenever you want.
Ledger Nano X
The Ledger Nano X is Ledger’s flagship when it comes to hardware wallets. The device has an impressive capability to manage 100 crypto apps simultaneously.
The main downside from my own experience is that the Bluetooth user experience wasn’t as smooth as I expected it to be. This may be remedied by Ledger in the future through updates, but for now, it’s a thorn in the Nano X’s side.
The Nano X costs $149 without VAT (free shipping included).
Visit Ledger Read reviewLedger Nano S Plus
The Ledger Nano S Plus is the improved version of the old, trusty Nano S, sporting a similar style with upgraded hardware and software features. With an elegant, rounded design, larger screen, and larger memory, the Nano S Plus enables users to store more asset apps than its predecessor, along with a sleeker look.
Pro Tip: At around half the cost of the Ledger Nano X, the S Plus is our favorite Ledger wallet. They have the same storage capacity, the only difference is the Ledger Nano X Plus offers BlueTooth for mobile interfacing, a feature that most find unnecessary.
At a cost of $79, the Ledger Nano S Plus provides a top-notch experience for a very reasonable price.
Visit Ledger Read review4. TREZOR Hardware Wallets
Pros: Market veteran, open-source, great company reputation, industry-leading security and over 8,000 crypto assets supported.
Cons: Frequently resets when upgrading (make sure your recovery phrase is backed up!) Asset support is not as good as some competitors and online DeFi/DApp access support is limited.
TREZOR (meaning “vault” in Czech) was the first company to come up with the idea of a hardware wallet. The main advantage TREZOR has over its competition is its company reputation. One of the company’s founders is Marek “Slush” Palatinus, who also created the first mining pool for Bitcoin (founded in 2010).
On the downside, there is one annoying thing about TREZOR wallets – When you upgrade the wallet firmware, it frequently deletes the whole wallet. If you’re just starting out with crypto, this can definitely freak you out. As long as you have your backup seed phrase around, you can easily restore the wallet, but this is definitely something to be aware of.
Trezor Safe 3
The Trezor Safe 3 and Trezor Safe 5 (touchscreen) are the newest flagship hardware wallets from TREZOR. It is based upon the design of the highly-renowned Trezor Model One and Model T but with some significant upgrades to both the hardware and software.
The Safe 3 is compact, easy to use, and supports almost any major asset or Ethereum-based token you could think of. One of the most notable upgrades is the addition of the Secure Element Certified Chip EAL6+. This is the first TREZOR device to include a Secure Element chip. The Trezor Safe 5 is similar, with an added touchscreen.
The Safe wallets also support Shamir Backup for recovering your seed phrase. The Trezor Model T has Shamir Backup too, but the Model One does not.
The Trezor Safe 3 costs $79 directly from TREZOR, making it one of the most affordable hardware wallets on the market. It is also the same price at which its predecessor, the Trezor Model One, used to cost at retail.
Pro Tip: Want to safe some money? The Safe 3 offers the best value for money over the Safe 5 if you don’t care about a touchscreen for your crypto cold storage wallet.
You can learn more in our Trezor Safe 5 Review and Trezor Safe 3 Review.
Visit TREZOR Read reviewTrezor Model T
The Trezor Model T is basically a Trezor One wallet that has a large touch screen. Both wallets offer the same features, but the touch screen does make a difference.
When you restore your hardware wallet or even set it up for the first time, you are often requested to enter your seed phrase. If you do not have a suitable interface on your hardware wallet (i.e., a touch screen), you will need to type in your seed phrase on your computer.
If your computer is infected with malware, this makes your seed phrase vulnerable to keylogging or other forms of hacking. Having said that, even if someone managed to get the words to your seed phrase, they still won’t know what order to put them in since that is not displayed on your computer (it’s displayed on the hardware wallet).
The Trezor Model T eliminates this threat completely since all interaction is done on the hardware wallet’s touch screen, so you don’t need to be afraid of malware (these devices are malware-free by design). The Trezor Model T also supports some coins that the Trezor One does not (e.g., XRP, ADA, and XMR).
The Trezor Model T costs $219 when VAT is excluded.
Trezor Model One
The Trezor One is the original hardware wallet and is a great, low-cost option for storing cryptocurrencies. The Trezor One (formerly known just as “TREZOR”) is the oldest hardware wallet on the market and probably the most reputable one as well.
The Trezor One has a nice, simple design with a very easy-to-understand user interface, and it supports a wide array of cryptocurrencies, including Bitcoin, Bitcoin Cash, Tether (USDT), Ethereum, Ethereum Classic, Litecoin, Dogecoin, and Polygon. The only coins that are missing and have gained massive public attention are XRP and ADA.
The price of the Trezor One is currently $69, making it affordable and one of the cheaper hardware wallets on the market. This is a great hardware wallet, in my opinion, that is very easy to set up and use.
Visit TREZOR Read review5. Additional Hardware Wallets on the Market
Throughout the years, we’ve also explored some additional hardware wallets that didn’t make the top of the list, so I’d like to mention them here.
NGRAVE is a security-focused hardware wallet that is 100% air-gapped with its very own private key creation process. The device supports thousands of different assets, including Ethereum-based tokens such as ERC-20 tokens and NFTs. The wallet has a custom operating system and biometric security and functions entirely without Wi-FI, Bluetooth, NFC, or 4G. NGRAVE is the highest-rated cryptocurrency wallet ever created and is a seriously impressive piece of kit. The reason it did not make our top list is that it is quite expensive and lacks in asset support.
Bitfi is a hardware wallet that was owned by John McAfee, a controversial figure in the cryptocurrency space. The wallet originally claimed to be “unhackable.” However, after it was torn apart by security researchers and several security flaws were exposed, that claim was removed. The newer Bitfi wallets have addressed these security concerns.
CoolWallet is a credit card-like hardware wallet that you can carry around in your pocket. Our CoolWallet review was positive. However, the wallet hasn’t gained enough market share in order for me to consider it a stable product.
BitLox is another hardware wallet we have reviewed. However, it was in the early stages, and we couldn’t get it to work properly. We haven’t taken another look at the product since then (this was a few years ago), and the product may have become more user-friendly.
BitBox02 is a hardware wallet from the Swiss company Shift Crypto. The coolest thing about BitBox02 is its rapid backup process, which uses a MicroSD card instead of a mandatory seed phrase. It’s a handy one-piece design with a built-in USB-C connector and some of the best security features available. BitBox has a number of other cryptocurrency-related products as well. You can read our full BitBox02 review here.
There are also other hardware wallets that can be used by both beginners and experts, such as Cypherock X1, BC Vault, and GridPlux Lattice1.
Hardware Wallet Risks
Tampering
In some cases, a bad actor may tamper with your device while it’s en route to your home for the first time. To avoid this, all reputable hardware wallet manufacturers use a special holographic sticker to prove the wallet was never opened.
If you receive a wallet and this sticker isn’t intact, don’t use that wallet. While some wallets also run a self-tampering test when initializing, it’s better to stay on the safe side.
In order to minimize this risk even more, always buy a hardware wallet straight from the manufacturer’s website. If you want to buy from a reseller, make sure that they’re an authorized, trustworthy reseller by contacting the manufacturer first.
Preconfigured seed phrase
Your seed phrase should be generated at random by your wallet upon setup and is not sent to you with the device.
One unfortunate user bought a hardware wallet from a bad actor on Amazon and received a wallet with a card containing a preconfigured seed phrase. He was instructed to initiate the device using this existing seed phrase.
The user wasn’t very tech-savvy and did as they were instructed, only to find out that once they deposited coins into that hardware wallet, they were quickly removed by the hacker who had knowledge of the preconfigured seed.
How to Store Seed Phrases Securely
The seed phrase acts as a means of accessing all your stored digital tokens. Therefore, it is vital to properly secure your seed phrase and never save it online where it may be discovered by hackers or exposed due to malware or computer viruses. Even the best crypto cold wallet needs to have its seed phrase safely secured, otherwise someone could use this information to recover your wallet and your funds.
Users can secure their seed phrases with a top-quality storage device such as Cryptotag – which stores the seed phrase in its aerospace-grade titanium plates. Users can store up to 42 seed phrases on this water and heat-resistant device. The cheapest Cryptotag storage device costs only €129.
Evil Maid Attack
Your hardware wallet device may be stolen or physically accessed by unwanted individuals, also known as the evil maid attack.
Most, if not all, hardware wallets today include PIN protection. So, even if your device is stolen, it may take the thief a while before they can access your coins.
Once you notice your device is stolen, you should immediately use your seed phrase to recover your Bitcoin and send it to a new wallet with a different seed phrase. This will basically drain your stolen wallet of all of its funds and allow you to keep safe control over your Bitcoin and other cryptocurrencies.
The $5 Wrench Attack
This refers to a scenario where someone physically threatens to hurt you with a $5 wrench if you don’t hand over your hardware wallet and unlock it with your PIN code.
In order to protect from these kinds of physical attacks, certain wallets, such as Cypherock X1, allow you to add another layer of protection called a passphrase. This means you’ll be requested to add an additional passphrase after the PIN code.
However, you can set it up so that different passphrases will show only certain accounts on your wallet. So imagine having a dummy account in your wallet with only a small amount of coins and a real account with the majority of your funds. In short, these passphrases are used to unlock “hidden wallets” of your choosing.
If someone forces you to unlock your wallet, you can use the dummy passphrase, and it will seem that the wallet only holds a small amount of coins, not revealing your complete holdings.
Conclusion – Serious About Crypto? Get a Hardware Wallet
It doesn’t get any simpler than this headline. Top cold storage wallets are the way to go if you want secure crypto storage.
Yes, hardware wallets cost money, and no one likes spending money on things they can get for free. But the amount of security you get by using a hardware wallet is much more valuable than the $50 to $500 you’ll pay for purchasing the actual device.
In our opinion, any of the wallets from TREZOR or Ledger are a good choice, but my personal favourites are the Cypherock X1 and ELLIPAL. Also, make sure to always buy the wallet directly from the company or from an authorized reseller. There have been many cases of fraud reported by people who bought tampered hardware wallets on eBay and sometimes Amazon.
Finally, if you’d like to consult a great guide to the top 5 no KYC wallets, our expert advice has you covered:-
Frequently Asked Questions
Which is better – TREZOR or Ledger?
What is the best Ledger wallet?
How do I access my TREZOR wallets?
What happens if the wallet manufacturer goes out of business?
What is the Best Bitcoin wallet?
Hello my name is Martin I first heard about Bitcoin back in 2019 through a classmate who was deep into cryptocurrency trading. At the time, I didn’t know much about Bitcoin or how it worked, but my curiosity got the better of me. After some research, I decided to take the plunge and make a small investment. I didn’t expect much at first, but as time passed, I watched in amazement as my initial investment steadily grew, eventually turning into an impressive $300,000. I was thrilled, to say the least.
However, earlier this year, I experienced a moment of panic. After attending a lively college party, I realized that my phone was missing. I had no idea where I had left it, but between the chaos and excitement of the party, it must have gotten misplaced. Losing my phone was bad enough, but what really scared me was the fact that my two-factor authentication for my Bitcoin wallet was linked to that phone. Worse still, I hadn’t properly stored any backup codes, leaving me completely locked out of my wallet. The thought of losing all that money was terrifying.
At that moment, I didn’t know what to do. I was overwhelmed and desperate to regain access to my funds. Luckily, a close friend who had gone through a similar situation recommended MALICE CYBER RECOVERY to me. I wasn’t sure if they could help, but I was willing to try anything at that point. So, I reached out to them with the hope that they could somehow help me recover access to my wallet.
To my absolute relief, MALICE CYBER RECOVERY didn’t disappoint. Their team was professional and efficient, and they assured me that even though I didn’t have my phone or the backup codes, they could still recover my wallet. After just a few weeks of working with them, they managed to restore my access completely, and my $300,000 was safe and sound. I couldn’t believe how smoothly the whole process went.
If you’re a student like me or anyone else who has lost their phone during a night out or a party, don’t lose hope. MALICE CYBER RECOVERY has the expertise to help you recover your funds, even in what seems like a hopeless situation. I’m incredibly grateful for their service and would highly recommend them to anyone facing a similar crisis.reach out to MALICE CYBER RECOVERY VIA
EMAIL:malicecyyberrecovery @ contractor . net
WHATSAPP: +61410262541
There are a lot of untrue recommendations and impostors, its hard to tell who is legit. If you have been scammed by fake crypto investors, lost money to scammers, I refer you to contact (cryptospamhacker@gmail .com) they will surely help you out. Took me long to find them.