When Ledger genuinely discounts
Hardware is the one category on this site with a conventional retail margin, so ordinary discounting applies and the sales are real.
Black Friday and Cyber Monday is the clearest window, with Ledger running sales through its own store. Reductions tend to be deeper on entry and mid-range devices than on the flagship.
Model transitions produce the other genuine opportunity. When a successor launches, the outgoing device is frequently discounted and is usually still entirely adequate — improvements in this category are mostly convenience features rather than security fundamentals.
What you should not do is wait. If you hold a meaningful amount of crypto without a hardware wallet, the exposure while you wait for November costs more in expectation than the discount saves. This is the rare case where our advice is simply not to optimise.
Which model is enough
Ledger's range spans a wide price band — touchscreen devices reported from around $149 up to $399 for the Stax — and the comparison content around it obscures a simple truth.
The expensive models buy convenience: a larger screen, wireless connectivity, a nicer body, a longer list of supported assets. The cryptographic protection is substantially the same across the range.
Three questions decide the choice, and none of them is about the price:
- Does it support the specific assets you hold? Check the coins, not the headline count.
- Does it work with the software you use? Wallet compatibility varies.
- Will you actually use it? A device inconvenient enough to sit in a drawer protects nothing.
That last one is underrated. Security you route around because it annoys you is not security, and a cheaper device you use properly beats an expensive one you avoid.
The rule that overrides price
Buy from Ledger, or an authorised reseller Ledger names
Never from a general marketplace listing, an auction site, a classified advert or a private seller, whatever the discount. Supply chain tampering is a documented attack: the device arrives pre-initialised with a recovery phrase the seller already holds, works perfectly, and empties the moment you fund it.
Ledger states this itself, repeatedly, which tells you how often it happens. A twenty percent saving on a compromised device is not a saving — it is a transfer of everything you subsequently put on it.
The related rule: a genuine hardware wallet never arrives with a recovery phrase already written down. The device generates the phrase during setup and you write it. Any card, leaflet or insert supplying one means the device is compromised and must not be used.
The fake app incident
The attack has moved. It used to be counterfeit hardware; increasingly it is counterfeit software, and April 2026 produced the clearest example yet.
A fake Ledger Live app, published under the name "Leva Heal", sat on the Apple App Store for roughly two weeks. It drained approximately $9.5 million from more than 50 victims before Apple removed it.
Read that carefully, because the implications are uncomfortable. The victims bought genuine hardware. They went to an official app store. They were defeated by a listing that should not have been there, using a name designed to be overlooked.
The defence is small and specific: check the publisher field before installing wallet software. Almost nobody does. The app name can be faked, the icon can be faked, the screenshots can be faked; the developer account name is the field worth reading.
Better still, install from a link on the manufacturer's own site rather than searching the store. Same principle as typing a domain rather than clicking an advertisement, which runs through our whole safety guide.
Setup, where it is won or lost
Buying the device is the easy half. Most losses in this category originate in the ten minutes after the box is opened.
Initialise it yourself
The device generates the recovery phrase. If one arrived with the packaging, stop — the device is compromised.
Write the phrase on paper
Not a photo, not a notes app, not a cloud document. A screenshot in a synced camera roll is a copy on somebody else's server.
Verify the app publisher before installing
Reach Ledger Live from a link on ledger.com rather than a store search, and read the developer name before you tap install.
Test recovery with a small amount
Send a token amount, wipe the device, restore from the phrase, confirm it worked. Do this before the wallet holds anything meaningful.
The failure we keep seeing
Someone sets up correctly, writes the phrase down, and never tests recovery. Two years later they need it and discover a transcription error made on day one — a swapped word, an ambiguous character — that has been sitting there the whole time.
The device worked. The backup did not. Test it once, early, with nothing at stake.