Hardware Wallets Compared: What Actually Differs

I have bought and used several of these at full retail price. No review units, no affiliate links. What follows is the set of differences that turned out to matter, and the ones that did not.

What every device does the same

Generates a seed phrase on the device, stores private keys offline, signs transactions internally, and never exposes the key to the connected computer.

That is the core function and every reputable device performs it. Choosing between them on this basis is not possible, because they do not differ here.

What actually differs

Screen size and quality. This matters more than anything else and is rarely the headline feature. The screen is the only display an attacker cannot alter, so verifying a destination address means reading it there. A device with a small, low-resolution screen makes that verification tedious, which means people skip it, which defeats the purpose.

Larger screens are worth the additional cost for this reason alone.

Full transaction display versus blind signing. When interacting with a contract, some devices show the decoded operation and some show a hash. Approving a hash means trusting the computer that built the transaction, which is the thing the device exists to avoid.

Check whether the device supports full display for the chains and operations you actually use.

Chain and token support. Varies substantially. Verify before buying that the specific assets you hold are supported, not just the major ones.

Connection method. USB, Bluetooth, or QR-based air-gapped operation. Air-gapped devices never connect to anything, which removes an attack surface and adds friction to every transaction.

Recovery approach. Most use a standard seed phrase, which means a device can be replaced by any compatible one. A few use proprietary schemes, which ties you to the manufacturer.

Standard recovery is strongly preferable.

What does not differ enough to choose on

Marketing claims about secure elements. All reputable devices use secure hardware. The differences are real at a technical level and do not change the practical threat model for an individual.

Open source status. Meaningful in principle. In practice, the parts that matter most for a typical user are the screen and the recovery scheme.

Companion software. All of them work. Preferences vary and none is a reason to choose a device.

The buying rules that matter more than the choice

Buy from the manufacturer. Not a marketplace, not a reseller with a discount. Tampered devices sold pre-initialised with an attacker’s seed phrase are a documented attack.

A genuine device never arrives with a seed phrase. It generates one in front of you. A card with words in the box means the device is compromised.

Test the recovery before funding. Wipe, restore from your written phrase, confirm the address matches. This catches transcription errors while they are still fixable, and it is the step people skip.

What I would tell someone buying their first

Buy the one with the larger screen, from the manufacturer, with standard seed phrase recovery. Spend thirty minutes on setup and the restore test.

Then move the long-term portion across from wherever you bought, sending a small test amount first. I use the exchange used for the withdrawal test for that, because the withdrawal screen lets you pick the network explicitly rather than guessing, which is where most first transfers go wrong.