Ledger vs trezor which hardware wallet keeps crypto safer

05 September 2026

Hardware wallets store private keys offline. Two brands dominate the market: Ledger and Trezor. They take different approaches to security. The choice between them depends on what you trust and what you fear.

Ledger uses a secure element chip. This is a proprietary microcontroller designed to resist physical tampering. It stores the seed phrase in hardware that tries to destroy itself if attacked. Trezor uses a standard microcontroller running fully open-source firmware. Trezor's code can be inspected by anyone. Ledger's secure element code cannot.

The Ledger Recover controversy changed the trust calculation. In May 2023, Ledger announced a paid service that would let users back up their seed phrase by splitting it into encrypted fragments and sending them to three custodians. The critical detail: Ledger's firmware would need to be able to extract the seed phrase from the secure element and transmit it. Critics argued this proved a backdoor capability existed all along. Ledger later clarified that Recover required explicit user consent, and that the firmware enabling it was optional. But the architectural point stood: the secure element could be made to output the seed. Many users concluded that Trezor's open-source architecture gives stronger guarantees against this kind of feature.

Physical security differs between the two. Trezor devices have been demonstrated as vulnerable to physical attacks that extract the seed from the chip using voltage glitching or side-channel analysis. These attacks require specialized equipment and physical possession of the device. Ledger's secure element makes such extraction harder. No publicly documented attack has broken the secure element in a Ledger device to yield the seed. Trezor mitigates its physical vulnerability by requiring the user to set a passphrase - a 25th word - which is never stored on the device. Physical theft of a Trezor without the passphrase reveals only the seed, not the passphrase.

Supply chain risk looks different for each. Ledger manufactures its devices in France and ships them sealed. The secure element is programmed before sealing; tampering with the supply chain would require breaking the secure element at scale. Trezor devices are manufactured in the Czech Republic. Because Trezor's firmware is open source and the hardware schematics are public, an attacker could in theory modify a device in transit. Trezor uses a tamper-evident seal and recommends users verify firmware integrity via the bootloader. No supply chain compromise has been publicly confirmed for either brand.

Firmware updates follow different models. Ledger signs its firmware releases. Users must trust that the signed update does what Ledger says. Trezor's firmware updates are signed too, but anyone can compile the source code and verify the published binary matches. Trezor requires a user-initiated action to install firmware. Ledger Live automatically checks for updates.

For the buyer choosing between them: If you believe a closed secure element is safer than open-source firmware that has known physical attacks, you pick Ledger. If you believe open-source code inspection is worth more than tamper resistance against state-level attackers, you pick Trezor. If you worry about future firmware features that could extract your seed, Trezor gives clearer guarantees. If you worry about someone stealing your device and extracting the seed physically, Ledger gives stronger protection.

Neither is broken in general use. Neither has suffered a breach of cold storage at scale. The trade-off is between different failure modes. Know which one you fear more.

Back to regulation