Home › Guides › Hardware wallets compared

Trezor vs BitBox vs Ledger

Three well known hardware wallet makers, compared on what matters for keeping Bitcoin safe: how the device protects your keys, how open the code is, how you back up, and who each one suits.

Affiliate disclosure: SHATOSHI has, or is applying for, paid affiliate relationships with Trezor, BitBox and Ledger. If you use a link on this page we may earn a commission, at no extra cost to you. It never changes what we write, and we cover the weak points of every maker. Read our full disclosure.

The short answer

• Want the most open, checkable design and a Bitcoin-only option? Look at Trezor or BitBox.
• Want the simplest Bitcoin-only device with a tidy app and a microSD backup? BitBox is hard to beat.
• Hold lots of different coins and want Bluetooth and a phone-first experience? Ledger covers the most assets, with a closed-source trade-off.

All three are far safer than leaving Bitcoin on an exchange. The biggest risk is rarely the device. It is how you look after your recovery words.

At a glance

Current ranges, November 2026: Trezor Safe 3, Safe 5 and Safe 7; BitBox02 and BitBox02 Nova; Ledger Nano S Plus, Nano X, Nano Gen5, Flex and Stax. Model ranges change. Check the maker's own site for the current line-up before you choose.

Security model: how each protects your keys

Every hardware wallet keeps your private keys off your computer and phone. Your computer only ever sees unsigned and signed transactions. The differences are in what happens if someone steals the device and attacks the chips.

• Trezor's older Model One and Model T relied on a general-purpose chip, and physical attacks on them have been shown in labs. The current Safe range adds a secure element, two on Safe 7, that guards the PIN and makes those lab attacks far harder. A strong passphrase closes the gap on any model.
• BitBox uses two chips: a main chip running open firmware, and a secure element that holds a secret needed to unlock the keys. An attacker needs to beat both. It also supports an "anti-klepto" check, which stops a tampered device hiding your key in the signatures it makes.
• Ledger keeps keys inside a certified secure element, which resists physical attacks well. The catch is that its operating system is closed source, and in 2023 Ledger's optional cloud recovery service showed that firmware can, if you opt in, export an encrypted copy of your recovery words. Many Bitcoiners see that as a trust trade-off.

Ledger also suffered a customer data leak in 2020 (names, emails and postal addresses from its shop database, not keys). Owners still get scam letters and emails today. Be extra wary of any message about "upgrading" or "verifying" your device, whichever brand you own.

Open source and verifiability

Open source means independent experts can read the code that guards your keys. Trezor and BitBox publish their firmware, and both support reproducible builds, so people can check that the firmware on the device matches the published code. Ledger publishes its apps and the Bitcoin app code, but not the secure element operating system, so you have to trust the company more.

Bitcoin-only options

Less code means fewer places for bugs to hide. Trezor offers optional Bitcoin-only firmware. BitBox sells a Bitcoin-only edition of its device. Ledger has no Bitcoin-only firmware; you install the Bitcoin app alongside any others.

Backups and recovery

• Trezor: standard 12, 20 or 24 recovery words. Newer models support multi-share backup, which splits your backup into shares, for example any 2 of 3, so one lost or found share is not a disaster.
• BitBox: recovery words, plus an optional encrypted backup on a microSD card. Handy, but treat that card as carefully as the words.
• Ledger: 24 words. Ledger Recover is an optional paid service that stores encrypted shares of your backup with third parties and needs ID. You do not have to use it.

Whichever you choose, write the words on paper or metal, never in a phone or cloud. See Seed phrases and backups. An optional passphrase adds a second factor if your words are ever found.

Ease of use and apps

All three apps walk you through setup, show your balance and let you send and receive. Trezor Suite has built-in coin control and Tor. BitBoxApp is clean and Bitcoin-focused, and can connect to your own node. Ledger Wallet (formerly Ledger Live) is polished and phone-friendly, and covers the most coins. All three also work with Sparrow, a free desktop wallet that gives you more control and can connect to your own node.

Trezor

Good for: people who value open source and want a choice of screen sizes, a Bitcoin-only option and multi-share backups.
Watch out for: older Model One and Model T have no secure element. If you use one, add a strong passphrase.

Trezor official site (link coming soon)

BitBox

Good for: Bitcoin-only holders who want a small, simple device, a very tidy app, open firmware and a microSD backup.
Watch out for: a small screen with touch sliders takes a minute to learn.

BitBox official site (link coming soon)

Ledger

Good for: people who hold many coins, want Bluetooth and a phone-first experience, and prefer a certified secure element.
Watch out for: closed-source operating system, the recovery service debate, and phishing linked to the 2020 data leak.

Ledger official site (link coming soon)

Which one suits you?

Whichever you pick

• Order only from the maker's own site or an official reseller listed there. Avoid marketplaces and second-hand devices.
• Run through our setup checklist the day it arrives.
• Never type your recovery words into a phone, computer or website. No real support team will ever ask for them.
• Check every receive address on the device screen.
• Send a small test, then test your recovery before you move larger amounts.

Questions people ask

Not financial advice. General education only. Do your own research.