The rule with no exceptions
Before any price comparison
Buy from the manufacturer’s own store, or from a reseller that the manufacturer itself publishes as authorised. Never from a general marketplace listing, an auction site, a classified advert or a private seller.
This is not caution for its own sake. Tampered devices are a documented attack: the seller supplies a wallet already initialised with a recovery phrase they hold, the buyer funds it, and the funds are swept. The victim did nothing technically wrong.
The manufacturers state this themselves and repeat it constantly, which should tell you how often it happens. A twenty percent saving on a compromised device is not a saving; it is a transfer of everything you subsequently put on it.
The related pattern to recognise: a genuine hardware wallet never asks you to enter a recovery phrase into a computer or a website. The phrase is generated by the device and written down by you. Any packaging, card or instruction supplying a phrase already written is a compromised device, and any site asking you to type one in is stealing.
When discounts appear
Hardware is the one category here with an ordinary retail margin, so ordinary retail discounting applies.
Black Friday and Cyber Monday are the clearest window. Ledger, Trezor, Tangem and others run genuine sales through their own stores, typically with the deepest cuts on entry and mid-range models rather than flagships.
Model transitions produce the other real opportunity. When a manufacturer launches a successor, the outgoing device is frequently discounted and is usually still perfectly adequate: the improvements in this category tend to be convenience features rather than security fundamentals.
Occasional mid-year promotions appear but are smaller and less predictable.
Do not wait if you are already exposed
If you hold a meaningful amount of crypto without a hardware wallet, buy one now. The discount is modest; the exposure while you wait for November is not. This is the rare case where the timing advice is simply “do not optimise.”
Which model to buy
The specification comparisons in this category obscure a simple truth: for most people, the entry-level device from an established manufacturer is entirely sufficient.
What the more expensive models add is convenience. A larger screen, Bluetooth connectivity, support for a longer list of assets, a nicer case. These are genuine improvements to the experience and they are not improvements to security. The cryptographic protection is substantially the same across a manufacturer’s range.
Three questions that actually matter when choosing:
- Does it support the assets you hold? Check the specific coins, not the headline count.
- Does it work with the software you use? Wallet compatibility varies and is worth confirming rather than assuming.
- Will you use it? A device that is inconvenient enough to sit in a drawer protects nothing.
That last point is more important than it sounds. The best hardware wallet is the one whose workflow you will tolerate, because security you route around is not security.
The part that matters more than the purchase
Buying the device is the easy half. The setup is where the outcome is determined, and it is where most losses in this category originate.
Initialise it yourself
The device generates a recovery phrase during setup. If one arrived with the packaging, the device is compromised and must not be used.
Write the phrase on paper
Not a photo, not a notes app, not a cloud document. A screenshot in a synced camera roll is a copy on somebody else’s server.
Store it somewhere that survives ordinary disasters
Fire, water, a house move, a well-meaning tidy-up. A second copy in a separate location is sensible for anything substantial.
Test recovery with a small amount first
Send a token amount, wipe the device, restore from the phrase, confirm it worked. Doing this before the wallet holds anything meaningful is the whole point.
That fourth step is skipped almost universally and is the one that turns a written phrase from a hope into a fact.
Giving one as a gift
A hardware wallet is the best crypto gift there is, and it comes with an obligation attached.
You are giving somebody an asset with no support line, no password reset and no fraud department. For a person who has been told what that means, it is a genuine upgrade. For a person who has not, it is a device that will either sit unused or hold funds behind a phrase they photographed.
So budget the conversation alongside the purchase. Recovery phrase on paper, never typed into a website, never shared with anybody claiming to be support. Fifteen minutes, and it is the part of the gift that does the work. Our gifting guide covers how to have it without sounding like a lecture.
The pattern we keep seeing
Someone receives a hardware wallet, sets it up correctly, writes the phrase down, and then never tests recovery. Two years later they need it, and discover a transcription error made on day one — a swapped word, an illegible character — that has been sitting there the whole time.
The device worked perfectly. The backup did not. Test it once, early, with nothing at stake.