Evidence refresh: October 3, 2026. This comparison uses current manufacturer product pages, support documentation, incident disclosures, and independent security reporting. We did not buy, deposit into, or hands-on test either device for this review. Prices, promotions, shipping, and optional service availability can change after the check date.
There is no universal winner. Ledger may fit someone who wants a broad device range, mobile connectivity, and the Ledger Wallet ecosystem. Trezor may fit someone who puts more weight on open-source design and the current Safe-series security architecture. Either can move long-term ETH away from the counterparty risk of an exchange, but either can also fail operationally if its owner mishandles the backup, approves the wrong transaction, or loses access to every recovery method.
Custody: What You Control — and What You Still Risk
Both brands are designed for self-custody: the device protects the signing keys, and you authorize a transaction on its screen. The manufacturer is not holding an exchange-style balance for you and cannot reverse an on-chain transfer. That removes exchange insolvency risk, but it shifts backup, phishing, address verification, and recovery responsibility to you.
Ledger Recover is a separate, opt-in, ID-based recovery service rather than the default custody model. Ledger's FAQ, updated July 27, 2026 says an encrypted pre-BIP39 version of the private key is divided into three fragments held by Ledger, Coincover, and EscrowTech; two fragments are required for recovery. Buyers who do not want an identity-backed recovery path can keep using an offline wallet backup instead. A separate Recovery Key, checked October 3, 2026 on the recovery-solutions page, is an offline PIN-protected NFC card with a secure element. It is included with new touchscreen devices and listed at $39 if bought alone. The same page listed the identity-based Recover subscription at $99.99 per year and described a Trusted Contact add-on that can help restore access after a security period the subscriber controls. None of those optional paths is the default model. Trezor's standard model likewise leaves backup control with the owner, with passphrase and multi-share options depending on the setup. The store, checked October 3, 2026, also said current wallets work with both 20-word and 24-word backups, so confirm the exact length a setup generates before writing it down.
Ledger: Current Lineup, Cost & Trust Model
Checked October 3, 2026, Ledger's comparison page listed the Nano S Plus at $69, Nano X at $99, Nano Gen5 at $179, Flex at $249, and Stax at $399. The Nano S Plus figure is $10 higher than the $59 on the August 1 check. Nano X was marked as a new price at the same $99. Those are device prices before tax, shipping, bundles, or promotions; compare the live checkout total on Ledger's current comparison page.
Ledger's design centers on a secure element and Ledger's operating system. That gives buyers a mature device family, but it also means important firmware components are not fully open for public audit. Treat that as a trust-model choice, not proof that the device is either automatically safer or unsafe.
The lineup has materially changed since the original version of this review. Ledger says the touchscreen Nano Gen5 launched at Ledger Op3n 2025, and Ledger Live is now branded Ledger Wallet. Nano X, Nano Gen5, Flex, and Stax add mobile-oriented features such as Bluetooth; verify the connection, screen, battery, and platform support of the exact model rather than buying on the brand name alone.
Current device snapshot, checked October 3, 2026:
- Nano S Plus — $69. The comparison page lists a USB-A to USB-C connection and a compact OLED screen. Ledger frames the classic Nanos as backup signers.
- Nano X — $99, marked as a new price. Bluetooth and a USB-A to USB-C connection are listed. Recovery Key is not listed as included.
- Nano Gen5 — $179. Touchscreen, with USB-C, Bluetooth, and NFC listed. Recovery Key included.
- Flex — $249. Larger touchscreen, with USB-C, Bluetooth, and NFC listed. Recovery Key included.
- Stax — $399. Curved touchscreen, USB-C, Bluetooth, NFC, and wireless charging listed. Recovery Key included.
Trezor: Current Safe Series, Cost & Open Design
Checked October 3, 2026, Trezor's structured product data listed Safe 3 at $59, Safe 5 at $129, and Safe 7 at $249 in USD, each marked in stock. The visible store price was still loading during that check, and support says the checkout total is final, so compare the live pages. This refresh does not repeat the August 1 promotional figures of $47, $103, and $224, because this check did not confirm them. Use the live pages for Safe 3, Safe 5, and Safe 7 before buying.
Trezor publishes an open-source design and firmware model. Its current Safe 3 and Safe 5 use an OPTIGA Trust M secure element for PIN enforcement, device authentication, and entropy; Safe 7 adds a separately auditable TROPIC01 secure element alongside OPTIGA and the main microcontroller. That is a material change from older Model One and Model T comparisons.
The old blanket claim that “Trezor devices do not have a secure element” is no longer accurate. Trezor's current architecture guide says Safe 3, Safe 5, and Safe 7 all include secure elements. Model One and Model T are no longer in production, although their product pages say security updates continue.
Open hardware does not mean flawless hardware. In 2026 Trezor disclosed that Ledger Donjon researchers used a highly specialized laser fault-injection attack against a standalone TROPIC01 chip used in Safe 7. Trezor says the finding did not extract wallet keys, requires invasive physical lab work at each power-up, and leaves the device's other protection layers in place. It is still relevant evidence for buyers with a high-value physical threat model.
Current device snapshot, checked October 3, 2026:
- Safe 3 — structured USD price $59; two-button interface; secure element; in stock.
- Safe 5 — structured USD price $129; color touchscreen and haptic feedback; secure element; in stock.
- Safe 7 — structured USD price $249; color touchscreen, wireless connectivity, and layered secure elements; in stock.
- Model One and Model T are no longer sold. The store said these legacy models continue to receive updates and support. Bitcoin-only variants of Safe 3, Safe 5, and Safe 7 were listed separately; buy that variant only if you do not need Ethereum on the same device.
Cost & Fee Comparison
- Purchase price: compare the exact model, tax, shipping, accessories, and any temporary promotion on the same day. The cheapest device is not automatically the cheapest workable setup if it lacks your required phone or desktop connection.
- Network fees: neither manufacturer removes Ethereum gas. Ledger's network-fees guide says fees go to network validators, not Ledger; speed and fee depend on network conditions.
- Optional services: in-app buy, sell, swap, or staking routes use third-party providers whose quotes, spreads, availability, and fees can vary. Compare the final receive amount before signing; Trezor's transaction-fee guide likewise separates network fees from service-provider fees.
- Recovery cost: Ledger Recover is optional and subscription-based; Trezor's standard recovery methods do not require a subscription. Keep subscription pricing and availability separate from the hardware price.
Decision rule: choose the exact device and recovery model that you can operate correctly. A theoretically stronger wallet does not protect an owner who exposes the backup or confirms a malicious approval on the device.
Security History: Separate Device Risk From Account-Data Risk
Ledger disclosed a 2020 breach of its e-commerce and marketing database. Its incident notice said roughly one million email addresses were affected and about 9,500 records also included details such as names, postal addresses, phone numbers, or ordered products; Ledger said payment information and crypto funds were not in that database. The practical risk was targeted phishing and physical-address exposure, not extraction of keys from a Ledger device.
In December 2023, a malicious Ledger Connect Kit package was loaded by some decentralized apps after a former employee's package-publishing session was compromised. Ledger reported that users were tricked into signing draining transactions during a window of less than two hours. Independent security firm Blockaid documented the same supply-chain incident. It was an application and signing-flow failure, not proof that the secure element had released device keys. On August 28, 2026, Cointelegraph reported that OneKey reproduced a transaction-replacement signing bug against Ethereum app 1.22.1 in a lab. Ledger told Cointelegraph that no user was hacked, that the demonstration used an outdated app, and that app 1.22.2, released August 13, 2026, added safeguards. Cointelegraph also reported that Ledger said the attack required control of the link between the device and its host, and that the underlying issue was fixed in Secure SDK 26.6.1 on August 21. Keep the Ethereum app updated, and still read the device screen before confirming.
Trezor disclosed unauthorized access to a third-party support portal in January 2024. It warned that names or nicknames and email addresses for as many as 66,000 support contacts might have been exposed, and that 41 customers received messages seeking recovery seeds. Trezor said the incident did not expose wallet backups or device funds. In early September 2026, Cybernews reported that Trezor said a breach at shipping provider ShipMonk exposed order data such as names, shipping addresses, phone numbers, and email addresses, and that a later update widened the affected set. Cybernews linked a Trezor post that could not be loaded on October 3, 2026, so this review does not repeat the reported customer counts. The described exposure is storefront order data, not wallet backups or device keys. Treat unexpected calls or letters about an order as a phishing risk and confirm any notice on Trezor channels.
Kraken Security Labs' January 2020 disclosure showed a physical extraction attack against the microcontrollers used in Trezor One and Model T and recommended a strong passphrase as mitigation. That evidence should not be generalized unchanged to today's Safe 3, Safe 5, or Safe 7, which use different secure-element architectures. Conversely, the 2026 TROPIC01 disclosure means current Safe 7 buyers should not assume “new” or “open” means invulnerable to specialist physical research.
Availability & Jurisdiction Limits
Hardware availability is a checkout question. Ledger's shipping-restrictions article cited in the August review now resolves to a Recover country list last updated May 13, 2026, not a shipping table. On October 3, Safe 3 and Safe 5 product metadata included a U.S. shipping rate of $0 and a three-day transit estimate; that schema is not a promise for every destination. Use Trezor support for logistics, then compare destination, tax, and reseller status at checkout.
Optional services are more jurisdiction-sensitive than local signing. Ledger Recover availability depends on the issuing country of the identity document and is subject to sanctions and compliance checks. Buy, sell, swap, and staking partners inside Ledger Wallet or Trezor Suite can also vary by country. If a feature is essential, confirm it for your exact jurisdiction and device; do not infer eligibility from a global product page.
Who Each Option May — or May Not — Suit
Ledger may suit you if:
- You want several screen, Bluetooth, battery, and price choices in one current product family.
- You prefer Ledger Wallet's account flow and have verified support for the Ethereum networks and apps you use.
- You understand the partially closed operating-system trade-off and can keep Ledger Recover separate from your default backup decision.
Ledger may not suit you if: fully public firmware review is a non-negotiable requirement, or an ID-based optional recovery path conflicts with your threat model.
Trezor may suit you if:
- You prioritize an open-source design and want a current Safe model with a documented secure-element architecture.
- You prefer owner-controlled backup options and are comfortable managing passphrase or multi-share recovery correctly.
- You have checked that Trezor Suite or your chosen third-party wallet supports the exact Ethereum or L2 workflow you need.
Trezor may not suit you if: your required app, chain, phone, or connection path is unsupported by the exact model, or if you are considering an older device based on a current Safe-series review.
A Same-Day Buying & Setup Checklist
- Compare live device, shipping, tax, and accessory totals from the manufacturer or a verified authorized reseller.
- Confirm the exact model supports your desktop or phone, preferred wallet app, Ethereum network, and tokens.
- Choose the recovery model before funding: offline backup, passphrase, multi-share backup, or an optional service you deliberately accept.
- Initialize the device yourself. Never use recovery words supplied in packaging or by another person.
- Practice recovery with an empty or low-value wallet before treating the setup as your only path to material funds.
- For every transfer or approval, verify the destination, asset, network, and action on the hardware screen before confirming.
Bottom Line
Ledger is not the automatic “security winner,” and Trezor is not the automatic “open-source winner.” Current Ledger devices span more price and interface tiers; current Trezor Safe devices have corrected the old blanket no-secure-element comparison. For most ETH holders, the defensible choice is the exact device whose connection, backup, and signing workflow they can verify and rehearse. Recheck live pricing, regional eligibility, and Ethereum app support on the day you buy.
Sources & Freshness
Time-sensitive product and availability facts were checked October 3, 2026. Incident dates are preserved below.
- Ledger hardware-wallet comparison and U.S. prices — checked October 3, 2026. Nano S Plus was $69; Nano X $99; Gen5 $179; Flex $249; Stax $399.
- Ledger recovery solutions — Recovery Key included with new touchscreen devices and listed at $39 separately; Recover listed at $99.99 per year. Checked October 3, 2026.
- Cointelegraph on the outdated Ledger Ethereum app lab reproduction — August 28, 2026. Ledger said no user was hacked and app 1.22.2 shipped August 13, 2026.
- Cybernews report of the Trezor ShipMonk order-data notice — September 8, 2026, updated September 9. Customer counts are omitted because the linked Trezor post could not be loaded on October 3, 2026.
- Ledger: Introducing Ledger Nano Gen5 — launch stated as Ledger Op3n 2025; checked August 1, 2026.
- Ledger Recover FAQ — updated July 27, 2026.
- Ledger Recover country and document list — last updated May 13, 2026. The August review mislabeled this URL as shipping restrictions.
- Ledger network-fees guide — checked August 1, 2026.
- Ledger's July 2020 e-commerce and marketing breach notice.
- Ledger Connect Kit incident report and Blockaid's independent report — December 2023.
- Trezor device comparison, plus Safe 3, Safe 5, and Safe 7 product pages — structured USD prices $59, $129, and $249, in stock, checked October 3, 2026.
- Trezor support and logistics — the old shipping-guide URL returned a missing page on October 3, 2026. Support still has a logistics section.
- Trezor Suite transaction-fee guide — this URL did not load on October 3, 2026. The Trezor homepage FAQ still says send fees go to the network, not Trezor, and that Suite shows the full buy, sell, or swap cost before you confirm.
- Trezor secure elements in Safe devices — architecture described from the August 1, 2026 reading. The learn URL did not load on October 3, 2026.
- Trezor's TROPIC01 vulnerability disclosure — 2026 findings, checked August 1, 2026.
- Trezor support-portal security alert — January 20, 2024.
- Kraken Security Labs: physical attack on older Trezor hardware — January 31, 2020.
