Ledger vs Trezor: security, prices and which to choose

Trezor is the better choice if you want open-source firmware you can verify and flexible backup options; Ledger is better if you hold many different assets, sign on a phone or want the widest wallet and dApp support. At the entry level the gap is small: the Trezor Safe 3 and Ledger Nano S Plus both cost $59 and both protect keys with an EAL6+ secure element.

Prices below are US list prices from ledger.com and trezor.io as of September 2026, before tax and shipping.

Ledger vs Trezor at a glance

	Ledger	Trezor
Entry model	Nano S Plus, $59	Safe 3, $59
Full range	Nano S Plus $59, Nano X $99, Nano Gen5 $179, Flex $249, Stax $399	Safe 3 $59, Safe 5 $129, Safe 7 $249
Secure element	Yes on every model (EAL6+, except Nano X at EAL5+)	Yes on every current model (EAL6+); Safe 7 adds a second chip, TROPIC01
Firmware	Closed operating system on the chip; apps and SDK open source	Open source firmware and hardware design
Backup	24-word phrase; optional Recovery Key card ($39) and paid Recover service	12, 20 or 24 words, or multi-share backup
Bluetooth	Nano X, Gen5, Flex, Stax	Safe 7 only
Companion app	Ledger Wallet (formerly Ledger Live)	Trezor Suite
Coin support	500+ coins in Ledger Wallet; more via third-party wallets	“Thousands” per Trezor, fewer natively in Suite
Bitcoin-only firmware	No	Yes

Security model: closed chip OS vs open firmware

Both companies now put a secure element in every device they sell. That chip resists physical attacks such as voltage glitching, which matters if someone steals your device.

Where they differ is what you can verify.

Ledger runs its operating system inside the secure element (an STMicroelectronics chip). Ledger says the chip vendor’s agreement prevents publishing that low-level code, so it stays closed. Ledger’s apps and developer kit are open source, and its in-house research lab, Ledger Donjon, publishes attacks on other wallets, which shows real expertise but doesn’t let you audit Ledger itself.

Trezor publishes its firmware so anyone can check it, and its devices ship without firmware: Trezor Suite installs a signed build during setup. The secure element in the Safe 3 and Safe 5 (Infineon’s Optiga) protects the PIN-derived secret but isn’t itself open. The Safe 7 adds TROPIC01, a chip whose design is open for audit.

The practical takeaway: if “don’t trust, verify” is your rule, Trezor fits it better. If you’re comfortable trusting a certified chip vendor and a company with a large security team, Ledger’s model is sound.

Ledger Recover: what actually happened

In May 2023 Ledger announced Ledger Recover, an opt-in subscription that backs up your seed off the device. According to Ledger’s explainer, the secure element encrypts the seed, splits it into three fragments and sends them to three companies (Coincover, Ledger and EscrowTech). Recovering requires identity verification, and two of the three fragments. It costs $9.99 a month.

The backlash wasn’t mainly about the service. It was about what it revealed: a firmware update could instruct the device to export your seed in encrypted form. Ledger’s support account acknowledged that writing firmware to extract keys had always been technically possible. For many users, that was at odds with the “keys never leave the device” pitch.

Ledger paused the rollout, published an open-source roadmap and later launched the service as strictly optional. If you never subscribe, no fragments are created. The lasting lesson applies to every hardware wallet with updatable firmware: you are trusting the maker’s future updates. Trezor’s open firmware lets outsiders check those updates; Ledger’s doesn’t.

Track record: incidents on both sides

Neither brand has a clean record, and neither has had a remote attack that pulled keys off a device.

• Ledger, 2020: a breach of its e-commerce database exposed about 1 million email addresses and the names, addresses and phone numbers of roughly 272,000 customers. Scammers later mailed tampered “replacement” Nano X devices to people on that list.
• Ledger, December 2023: attackers phished a former employee and pushed malicious versions of Ledger’s Connect Kit library, which briefly drained wallets through DeFi front ends that loaded it. Ledger’s incident report covers the timeline. The hardware wasn’t compromised; users who signed malicious transactions were.
• Trezor, 2020: Kraken’s security team showed that the Model One and Model T, which lack a secure element, could have their seed extracted with physical access. A BIP39 passphrase defeats that attack. The Safe line fixed it with a secure element.
• Trezor, 2024: a third-party support portal was breached, exposing names and email addresses of about 66,000 contacts.
• Trezor, June 2026: Ledger’s researchers found a laser attack on the Safe 7’s TROPIC01 chip. Trezor says keys aren’t stored on that chip and funds remain protected by the PIN; no user action is needed.

The common thread is phishing. Most real losses come from people typing their phrase into a fake app or signing a malicious transaction, not from breaking the hardware.

Coins, apps and DeFi use

Ledger has the broader native coverage: Ledger Wallet lists 500+ coins, and Ledger signing is supported almost everywhere, from MetaMask and Rabby to Solana wallets. The touchscreen models also show “clear signing” details for supported dApps, which makes approvals easier to read.

Trezor Suite covers the major assets (Bitcoin, Ethereum and EVM networks, Solana, Cardano and others) and connects to third-party wallets for the rest. It’s excellent for Bitcoin, with built-in coin control and Tor support, and Trezor sells Bitcoin-only firmware for people who want the smallest possible attack surface.

If you actively trade onchain, for example bridging funds between chains or swapping with MEV protection on CoW Swap, check that your exact network is supported by the device and the wallet you’ll pair it with.

Backups and recovery

Ledger uses a single 24-word phrase. On the Gen5, Flex and Stax you can add a Ledger Recovery Key, a $39 NFC card with its own secure chip that stores a PIN-protected copy of your phrase. Ledger Recover is the paid cloud option.

Trezor defaults to a 20-word single-share backup on current models and also supports 12 and 24 words. Its multi-share backup (based on Shamir’s secret sharing) lets you, for example, split a wallet into three shares where any two restore it. You can store shares in different places, so one found share doesn’t expose the wallet and one lost share doesn’t lose it.

For people with larger holdings, Trezor’s multi-share backup is the most practical advantage either brand offers.

Price and value, model by model

Budget	Ledger	Trezor	Better value
About $60	Nano S Plus ($59): buttons, USB	Safe 3 ($59): buttons, USB	Tie; pick on firmware philosophy
$100–130	Nano X ($99): Bluetooth, older EAL5+ chip	Safe 5 ($129): colour touchscreen	Safe 5 for desktop, Nano X for phone
About $180	Nano Gen5 ($179): E Ink touch, Bluetooth, NFC	none	Gen5
$249	Flex ($249)	Safe 7 ($249): Bluetooth, battery, dual secure element	Close; Flex for app support, Safe 7 for openness
$399	Stax ($399)	none	Only if you want the design

Verdict: which should you buy

• Bitcoin holders and privacy-minded users: Trezor Safe 3 or Safe 5. Open firmware, Bitcoin-only option, multi-share backups.
• Multi-chain holders and DeFi users: Ledger. Broader coin support and dApp integrations; a Flex or Gen5 if you sign often.
• Mostly on a phone: Ledger Nano X ($99) is the cheapest Bluetooth option; the Safe 7 is Trezor’s only Bluetooth model.
• Tight budget: either $59 model. The security difference at this level is philosophy, not strength.

For Ledger, buy from the official Ledger shop; for Trezor, order from trezor.io. Then follow our hardware wallet setup guide before you move real funds. If neither appeals because you’d rather not manage a seed phrase at all, read our Tangem review, or see the full hardware wallet comparison with all three brands.