Hardware wallets: the criteria that actually decide

Analysis reviewed on September 7, 2026. The price is checked separately and carries its own date.

What we have analysed

Almost every hardware wallet round-up ranks devices by price or by the number of coins they support. Those are the two figures that tell you least. These are the ones that tell you most, and every one of them can be checked without taking anybody's word for it.

1. The secure element, and which certification it holds

A secure element is a chip designed to hold out against someone who has the device in their hand and laboratory tools on the bench. It is measured on a certification scale — EAL, from 1 to 7 — awarded by an external laboratory. Current devices sit between EAL5+ and EAL6+. A wallet with no secure element is not a fraud, but its defence against physical theft rests entirely on your having turned the passphrase on.

2. Open or closed firmware

This is the difference most people skip over and the one that weighs most in the long run. With closed firmware, the guarantee is an audit you cannot repeat. With open firmware, anyone can read the code and compile it. You do not have to be the one who does it: it is enough that it can be done, because then there are plenty of people who do.

3. Can the seed leave the device?

Plenty of people buy believing the answer is "no, it is physically impossible". On some models it is "not by default, but the firmware knows how to do it if you subscribe to a service". That is not the same thing, and it is worth knowing before you pay. The concrete question to put to any review: is there any function, however optional, that extracts fragments of the recovery phrase?

4. What you can read on the screen before signing

The wallet screen is the only place where you see the real transaction. The computer can show you one address and send to another. A tiny screen that cuts the address in half pushes you into confirming without reading, and confirming without reading is today the most common way of losing money: ahead of theft, ahead of the laboratory attack.

5. What happens the day it breaks

The device can be replaced; the recovery backup cannot. Look at how many words it uses, whether it lets you split the backup into several parts so that no single one is any use on its own, and whether you can restore it on a device from another maker. A standard recovery scheme means you are not tied to that manufacturer still existing ten years from now.

What should not decide the purchase

• The number of supported coins. What matters is that yours are on the list; another five thousand on top changes nothing.
• Bluetooth. It is convenience, not security and not insecurity either. Decide on everything else.
• The opinion of anyone who has not opened one. Ourselves included: you will not find a score out of ten here, nor an "I have been using it for two years", because it would not be true. What you will find is every claim with its source.
• Buying second hand, or anywhere other than the manufacturer and its distributors. A tampered wallet is a wallet with somebody else's seed inside.

Frequently asked questions