Best Cold Wallets: 8 Models, Prices and Security Compared

The eight models below address different needs. This is a comparison of manufacturer documentation, compatibility, backup methods and support policies; it is not a hands-on benchmark or an independent security certification. Sources and reference prices checked: 13 September 2026. Assess the device, the transaction approval process and your recovery plan together before choosing a hardware wallet.

Best cold wallets: models, prices and practical differences

Prices are USD references, not guaranteed delivered totals in your country. Select a model name to read its strengths and limitations. The table does not assign unmeasured safety scores.

Scroll sideways to read every column. Keyboard: focus the table and use the arrow keys.

Price sources: Ledger figures come from its model comparison. Trezor figures are the published USD price data on the Safe 3, Safe 5 and Safe 7 product pages. Tangem and the SafePal store state that taxes and duties are excluded. A current price could not be verified from the BitBox store, so none is estimated here. Region, promotions, package contents and checkout charges can change your total.

Which hardware wallet fits your needs?

• Occasional transfers from a computer or Android: compare Nano S Plus and Safe 3. Decide whether scrolling through an address on a small screen feels manageable before paying for more features.
• Sending from an iPhone: examine current app support for Nano Gen5, Safe 7 and Nova. Tangem uses NFC cards, while SafePal S1 offers a QR workflow. An available iOS app does not mean every device can sign transactions through it.
• Reading and approving on a larger screen: compare Safe 5, Safe 7 and Nano Gen5. Screen size can improve usability, but it does not turn an unsafe transaction into a safe one.
• Holding Bitcoin only: consider a restricted edition such as BitBox02 Nova Bitcoin-only. If you might add altcoins, a multi-asset edition gives you a different scope.
• Preferring backup cards to recovery words: review Tangem's seedless setup and the consequences of losing every card. Card recovery still needs planning and secure storage.

There is no universal portfolio value at which buying hardware becomes mandatory. Include the device cost, how often you transact and whether you can safeguard and verify a backup. Small everyday transactions and long-term holdings serve different purposes; our hot wallet guide explains that distinction.

What each model offers, and where it falls short

Ledger Nano S Plus: affordable if you do not need an iPhone

Nano S Plus suits wired use from a computer or Android phone. Its current product specifications list an ST33K1M5 chip with CC EAL6+ certification. Describing it as using the same EAL5+ chip as Nano X is therefore inaccurate. You can check addresses on the small OLED, although navigating long information with buttons requires attention.

Best fit: someone who does not need a battery or Bluetooth and mainly transfers purchases into storage. A USB-C socket does not make this model compatible with an iPhone. The current companion app is called Ledger Wallet; older material may refer to Ledger Live.

Trezor Safe 3: button controls for straightforward storage

Safe 3 combines a small display, physical buttons and USB-C. Trezor lists open-source firmware and an EAL6+ Secure Element. Publicly inspectable code can support scrutiny; it does not establish that no vulnerability exists. If a larger screen is not a priority, compare its workflow before moving up to Safe 5.

Trezor's compatibility comparison distinguishes the limited iOS functions of Safe 3 and Safe 5 from Safe 7's sending capability. Check your operating system, device and intended asset together. Viewing a balance on a phone is a different requirement from approving a transfer through that phone.

Trezor Safe 5: a touchscreen instead of physical buttons

Safe 5 has a 1.54-inch colour touchscreen with haptic feedback. A clear reason to pay more than for Safe 3 is the way you interact with the device. It may suit users who prefer entering a PIN and reviewing transactions through touch controls; the higher price is not a measurement of protection against every threat.

There is no Bluetooth. Its iOS experience is not equivalent to Safe 7, although this may not matter if you intend to use a computer for signing.

Ledger Nano Gen5: mobile access and a larger approval screen

Nano Gen5 adds a touch-sensitive E Ink display and mobile connectivity to the Nano range. Its 2.8-inch screen can make address and transaction information easier to inspect. Features such as Clear Signing depend on supported applications and transactions; do not assume every smart-contract call will be fully explained.

The included Ledger Recovery Key is a physical backup option. It is distinct from the Ledger Recover service provided with Coincover. Nano X remains another Bluetooth option: Ledger's comparison lists a USD 99 reference, but its smaller display does not offer the same interface as Gen5.

Trezor Safe 7: Bluetooth and iPhone signing

Safe 7 offers a larger touchscreen, Bluetooth and a dual Secure Element design. Mobile signing and screen preferences are practical reasons to compare it with Safe 3 and Safe 5. Someone making infrequent desktop transfers may not need the extra features.

Read security disclosures in context. Trezor's 2026 TROPIC01 explanation concerns a physical attack against one chip. The company states that the other Safe 7 protection layers mean this was not a compromise of wallet funds. That is the manufacturer's assessment, not the result of an independent device test conducted for this article.

Tangem: convenient cards with a screen trade-off

Tangem uses cards with a compatible NFC phone. The reference price is USD 69.90 for three cards or USD 59.90 for two. Its setup options include seedless operation and optional recovery words; not every Tangem wallet has the same recovery arrangement.

The trade-off: a card may be convenient to carry without charging another device, but it has no display for independently checking what the phone shows. Before choosing a seedless setup, understand the backup-card and access-code recovery conditions. Keeping every card in one bag defeats the purpose of protection against losing that bag.

SafePal S1: an entry-level QR signing option

SafePal S1 uses a camera and screen for QR signing. Its USD 49.99 reference excludes tax and duties. It is an option if repeatedly scanning codes with a phone suits your workflow. The current store lists EAL6+; an older review may describe an earlier hardware specification.

Air-gapped signing describes a communication design, such as exchanging signing data through QR rather than USB or Bluetooth. QR codes still carry data. The design does not guarantee protection against approving a malicious transaction or losing a backup. SafePal's current recovery-phrase explanation describes 12- or 24-word BIP39 backups generated by its hardware.

BitBox02 Nova Bitcoin-only: a deliberately restricted scope

BitBox02 Nova has an OLED display, USB-C and Bluetooth with iOS support. Do not assume the original BitBox02 offers identical phone compatibility. The Bitcoin-only edition cannot later be converted into a multi-asset firmware edition to add ETH or XRP.

That restriction can suit a dedicated Bitcoin holding strategy, but it is a poor fit if you expect the same purchase to handle altcoins. Its microSD backup also needs careful physical protection; it is not an ordinary document to copy to your computer or cloud account.

Ledger versus Trezor, and what happened to older devices

Our Ledger versus Trezor comparison discusses the broader choice. Use the current model documents linked here for purchase-specific details: a brand name alone does not define the connection, display or backup method.

Trezor states that its own e-shop sales of Model One and Model T ended on 8 January 2026, while critical security updates are planned until at least 2036. End of sale is not immediate end of support. Existing owners should follow update notices; new buyers should compare remaining stock with the current Safe range.

What does cold storage protect, and what can still go wrong?

Crypto assets are recorded on a blockchain rather than inside the device. A wallet manages the private keys used to authorize spending. Hardware is intended to isolate those keys from ordinary phone or computer software. Cold storage also describes how an account is used: routinely connecting a long-term holding account to unfamiliar dApps adds transaction risk. The distinction between hardware and cold storage matters.

A chip certificate, open-source firmware, a display and a connection method answer different questions. An EAL rating applies to the evaluated component and scope; it is not a guarantee that an entire wallet cannot lose funds. Ledger's explanation of the Secure Element helps distinguish physical key protection from transaction review. Check the recipient, amount and available transaction details on the device's own screen.

Hardware does not automatically fix leaked recovery words, a fake support site, a wrong network or a harmful contract permission you approve. Separate long-term storage from experimental dApp activity, and understand whether your accounts share the same key backup. Our guides to phishing and crypto asset security cover the wider account and operational risks.

If unauthorized transactions have already occurred, buying a device does not by itself secure the old account. Our guide to a compromised MetaMask wallet covers incident assessment and fake recovery offers. Importing a potentially compromised account's words into new hardware does not make those keys secret again.

Lost device, lost backup: recovery depends on your setup

Losing a device is not automatically the same as losing access. A suitable backup, together with any additional passphrase, may restore the wallet on compatible hardware. Backup format, network and account derivation support matter; do not assume every product accepts every other product's recovery method.

• Recovery words: a seed phrase is different from a device PIN. Current Trezor Safe setups include 20-word SLIP39 backups, which differ from 12/24-word BIP39. Follow the manufacturer's backup-format guidance. A multi-share backup is a defined recovery scheme, not a word list cut into pieces by hand.
• Tangem cards: if all cards from a seedless setup are lost and no recovery phrase exists, the manufacturer cannot restore access. Learn the access-code requirements and store backups separately.
• BitBox microSD: the official setup guide says the backup is not encrypted with your device password. Keep it away from computers and phones and in a secure location separate from the device. This device-created offline backup is different from putting a seed photograph in cloud storage.

Do not photograph recovery words, send them in a message or enter them into a support form. A forgotten extra passphrase can also prevent recovery. Before moving substantial holdings, learn the manufacturer's backup-check function; do not reset your only working device before you know the backup is usable. If the backup is missing but the device still works, plan a verified new backup or migration using the relevant official guide instead of assuming the funds are already gone.

Hardware wallet prices: calculate the delivered cost

Total purchase cost = device + shipping + applicable taxes/duties + payment/currency costs + optional backup accessories. A metal backup or second device may not be included. A USD reference does not establish the amount payable in the UK, India, Pakistan, Nigeria or any other destination. Compare checkout totals, seller status, warranty, returns and delivery availability for your actual country.

A marketplace listing is not proof that the seller is authorized. Verify the seller through the manufacturer's own channels. Do not adopt a preconfigured PIN or recovery phrase supplied by a seller. Create your own setup through the authentic manufacturer software and follow its device-verification instructions.

A sealed box alone is insufficient. Ledger Donjon's genuineness explanation describes why seals can be copied and why device checks have a defined scope. A verified sales channel, model-specific authenticity checks, official software and your own initialization work together. A second-hand bargain needs more scrutiny than a price comparison can provide.

Can the same cold wallet hold Bitcoin, Ethereum and XRP?

Multi-asset models may support several networks, but an advertised coin count does not confirm your intended transfer. Check asset + network + device model + application. Native BTC on Bitcoin and wrapped BTC on another network are different custody cases. A Bitcoin-only edition is not suitable for ETH, XRP or XLM.

For example, Trezor's XRP documentation names Safe 3 and Safe 5 with Trezor Suite support. Ledger's asset directory distinguishes native application support from third-party wallets. An asset listing does not imply that every network, staking action or NFT feature is supported equally.

Connecting hardware to a supported interface such as MetaMask is different from importing the hardware wallet's recovery phrase into that software. The connection lets supported transactions be signed on hardware; entering the words into an online app exposes the same keys to software. Use our wallet creation guide alongside the current instructions for your exact model.

Moving crypto from an exchange, and turning it back into cash

Ledger Wallet, Trezor Suite, Tangem and SafePal apps manage their respective wallet workflows. They are not interchangeable with a bank-funded trading account. Compare crypto apps for buying Bitcoin for mobile purchase needs, and cryptocurrency exchanges for platform-level custody and trading conditions.

1. Prepare the receiving wallet. Select the right asset and network. On a device with a display, verify the receiving address there rather than trusting copied clipboard text alone.
2. Review the exchange withdrawal screen. Check the network, minimum amount, withdrawal fee and any applicable waiting period. For accounts in Turkey, our Turkish withdrawal-rules guide provides context; those country-specific rules are not a universal international schedule.
3. Start with a small test transfer. Allow for minimums and fees. Confirm receipt in the correct account, and recheck the address and network for every later transfer.
4. When selling for cash: send to a deposit address at a service accepting that exact asset and network, then sell and withdraw fiat under its conditions. Include a required XRP destination tag when the receiving exchange asks for one.

Hardware does not remove transaction costs. Network fees, exchange withdrawal charges, trading commissions and execution price differences are separate. Use our crypto exchange fee comparison to examine the purchase and exit route, not just the initial trading fee.