What Is a Ledger Wallet? How Hardware Crypto Wallets Work

A Ledger wallet is a hardware cryptocurrency wallet made by Ledger, a French company that sells small physical devices for storing the private keys that control crypto assets. The coins themselves never sit on the device. They stay recorded on their blockchain. What the Ledger holds is the secret key that proves ownership and authorizes spending, and it keeps that key offline inside a dedicated chip. Because the key does not leave the device, a Ledger works as a cold storage wallet. Transactions can be prepared on a connected phone or computer, but they are signed on the hardware itself.

How a Ledger Hardware Wallet Works

Every cryptocurrency account is controlled by a private key, a very large number that only the owner should know. A public address is derived from that key, and anyone can send funds to it, but moving funds out requires a digital signature made with the private key. Whoever holds the key controls the money.

A Ledger device has three parts that protect the key:

• Secure Element chip. This is a tamper-resistant chip of the kind used in bank cards and passports. It generates and stores the private keys and performs the signing math internally. On the Nano Gen5, Ledger lists this chip as CC EAL6+ certified.
• Ledger OS. A proprietary operating system runs the device and isolates the apps for each blockchain from one another.
• Screen and buttons (or touchscreen). The device shows the transaction details on its own display, and nothing is signed until the user physically approves it there.

Access to the device is locked with a PIN set during setup. Repeated wrong PIN entries cause the device to wipe itself, so a stolen Ledger cannot be brute-forced indefinitely.

The companion software, the Ledger Wallet app (formerly Ledger Live), runs on a computer or phone. It reads balances from the blockchain, builds unsigned transactions, installs the per-coin apps on the device and offers buying, selling and management features. It never receives the private key, only the finished signature.

Worked Example: Sending Bitcoin From a Ledger

Hypothetical example for illustration. Suppose you want to send 0.05 BTC to a friend.

1. You open the Ledger Wallet app on your laptop, choose your Bitcoin account and paste your friend’s address with the amount.
2. The app builds an unsigned transaction and sends it to the Ledger over USB or Bluetooth.
3. The Ledger displays the destination address, the amount and the network fee on its own screen.
4. You compare the address on the device screen with the one your friend gave you. If they match, you approve on the device.
5. The Secure Element signs the transaction internally and returns only the signature to the app.
6. The app broadcasts the signed transaction to the Bitcoin network.

Step 4 is where the hardware earns its keep. If malware on the laptop swapped the address for an attacker’s, the laptop screen might show the right address while the device screen shows the wrong one. The device display is the one to trust, because the computer never had the power to sign.

Where Ledger Fits Among Crypto Wallet Types

Wallets are grouped by form and by control:

• Hardware wallets such as Ledger hold keys on dedicated physical devices. Software wallets store them in apps on a phone, computer or browser. Paper wallets are keys or recovery words written or printed on paper.
• Hot wallets keep the key on an internet-connected device, while cold wallets keep it away from one.
• Custodial wallets leave the keys with a third party, such as an exchange. With non-custodial wallets you hold them yourself.

A Ledger is a cold, non-custodial, multi-currency hardware wallet. Paper wallets can burn, fade or get lost, and software wallets put keys on devices that can be infected. Hardware wallets keep the convenience of an app while moving the key to a chip that general software cannot read.

Being non-custodial is a trade-off. Funds left on an exchange depend on that exchange’s solvency and security. Funds on a Ledger depend on you alone, so there is no support desk that can reset a lost recovery phrase.

The Recovery Phrase

During setup, a Ledger generates a 24-word recovery phrase (also called a seed phrase) and shows it once on the device screen. These words encode the master secret from which all the wallet’s private keys are derived, using the widely adopted BIP39 standard. That has two consequences:

• The phrase is the wallet. Anyone who obtains the 24 words can recreate every account on any compatible wallet without the device or the PIN.
• The device is replaceable. If a Ledger is lost, stolen or broken, entering the phrase on a new device restores access to the funds, because the funds were always on the blockchain.

Write the phrase down offline and never type it into a website, cloud note, photo or chat. Steel plates made for the purpose resist fire and water better than paper. Ledger devices also support an optional passphrase, sometimes called a 25th word, which creates a separate set of accounts that the 24 words alone cannot open. It protects against someone who finds the written phrase, but forgetting it means losing access to those accounts.

The Range of Ledger Devices

Ledger released its first hardware wallet, the Ledger Nano S, in 2016. It was later retired and replaced by the Nano S Plus. The lineup now has five models: Nano S Plus, Nano X, Stax, Flex and Nano Gen5. All use a Secure Element chip and the same recovery-phrase system, and differ in screen, connectivity and compatibility.

Ledger Nano S Plus

The Nano S Plus is the entry model, a compact USB-stick-shaped device with a USB-C connector and two physical buttons. Ledger describes it as supporting more than 15,000 digital assets. It connects by cable only and works with macOS, Windows and Android, but not with iOS devices or Chromebooks, which matters for anyone who manages crypto mainly from an iPhone.

Ledger Nano X

Introduced in 2019, the Nano X keeps the stick format but adds Bluetooth alongside USB-C, so it can pair with phones. It works with macOS, Windows, iOS 14 and later, and Android, supports NFTs and more than 15,000 tokens, and holds up to 100 coin apps at once. Some phones need extra accessories, such as Ledger’s On The Go kit, to connect by cable.

Ledger Stax

The Stax is a palm-sized device built around a curved 3.7-inch E Ink touchscreen, the largest display in the range. The lock screen can show a custom image, and owners can name the device. It adds wireless charging to Bluetooth and has the same computer and phone compatibility as the Nano X.

Ledger Flex

The Flex sits between the Nano models and the Stax, with a 2.84-inch touchscreen for swiping through accounts and displaying images or NFTs. Its compatibility matches the Nano X and Stax.

Ledger Nano Gen5

The Nano Gen5 uses a 2.8-inch E Ink touchscreen and connects through Bluetooth, NFC or USB-C. Ledger states that it supports more than 500 cryptocurrencies directly in the Ledger Wallet app, including Bitcoin, Ethereum, Solana and XRP, with thousands more coins, tokens and NFTs available through third-party wallets. It also ships with a Ledger Recovery Key, which Ledger presents as an additional way to back up and restore access.

In practice, the choice comes down to whether you want a cable-free phone connection (every model except the Nano S Plus has Bluetooth) and whether a larger touchscreen makes reviewing transactions easier.

Apps and Third-Party Wallets

The Ledger Wallet app is the default interface. Not every asset or feature is handled inside it, so the devices can also act as signing hardware for compatible third-party software wallets, such as MetaMask, Rainbow and Phantom.

In that setup, the software wallet shows balances and connects to websites, including DeFi applications, while the Ledger still holds the key and must approve each transaction on its screen.

Limitations and Risks

A Ledger narrows the attack surface, but it does not remove risk.

• Trust in the manufacturer. Ledger OS and the Secure Element firmware are proprietary, so owners rely on Ledger’s design, firmware updates and supply chain. Buy from Ledger or an authorized reseller, and refuse any device that arrives with a pre-filled recovery phrase.
• Software around the device. The desktop and mobile apps, and any third-party wallets used with the device, can contain bugs or be imitated by fake versions.
• Phishing. In 2020, a leak of Ledger’s customer database exposed buyers’ names, emails and in some cases postal addresses, followed by fraudulent emails and letters asking customers for their recovery phrase. No legitimate support process requires it.
• Blind approval. The on-device check only helps if you read it. Approving a transaction or smart-contract permission without checking the screen can drain an account as effectively as malware.
• User error. Losing both the device and the recovery phrase means permanent loss, and sending a token on the wrong network can strand it.
• Cost and convenience. A hardware wallet is a purchase, and every spend requires the device, which makes it less suited to frequent small payments than a hot wallet.

Ledger Wallet vs. Related Terms

• Ledger vs. a ledger. A ledger in crypto is a record of transactions, and a blockchain is one type of distributed ledger. Ledger devices are not ledgers. They hold keys to entries recorded on public ledgers.
• Device vs. app. The Ledger Wallet app displays balances and builds transactions, and the device signs them. Installing the app without a device gives you no cold storage.
• Cold wallet vs. offline device. A Ledger connects by cable, Bluetooth or NFC when in use, so it is not physically disconnected. It is “cold” because the private key never leaves the Secure Element.
• Hardware wallet vs. exchange account. An exchange balance is a claim on a custodian. Coins controlled by a Ledger are on-chain assets that you control directly.

BitcoinBTC$65,064EthereumETH$1,823SolanaSOL$71.71

Editorial credits