A cold wallet — also called a hardware wallet — is a physical device that stores your cryptocurrency private keys completely offline, making them immune to remote hacks. The two market leaders in the UK are Ledger (Nano X at £149, Nano S Plus at £79) and Trezor (Model One at £59, Model T at £179). If you hold more than £500 in crypto for longer than six months, a hardware wallet is worth the cost — but only if you buy direct from the manufacturer, generate your seed phrase on the device, and store it on paper, never digitally. This is information, not financial advice.
What is a cold wallet — and how it differs from a hot wallet
Your cryptocurrency is not stored on any device — it lives on the blockchain. What a wallet stores is the private key: the cryptographic proof that authorises a transaction from your address. Whoever controls the private key controls the funds. The wallet's job is to keep that key safe.
A hot wallet — MetaMask, the Coinbase Wallet app, or the custodial balance you hold on an exchange — keeps the private key on an internet-connected device. That connection is convenient, but it is also the attack surface: malware, phishing sites, browser exploits and exchange hacks all target keys held in hot environments.
A cold wallet stores the private key on a dedicated piece of hardware that never connects to the internet. When you approve a transaction, the hardware wallet signs it internally and passes only the signed transaction — not the key itself — to your computer or phone. The key never leaves the device, so a remote attacker has nothing to steal even if your computer is fully compromised.
The core trade-off is convenience versus security. Hot wallets are frictionless for frequent trading; cold wallets add a physical step every time you sign a transaction. For a balance you intend to hold for months or years, that friction is worth it.
The Bybit hack — why a cold wallet is not automatically invulnerable
In February 2025, approximately US$1.5 billion in Ethereum was stolen from Bybit — the largest single crypto hack on record. The funds were held in what Bybit described as cold storage. Understanding how it happened is essential for any hardware wallet owner, because the lesson is not that cold wallets failed — it is that the signing interface did.
Bybit's cold storage used a multi-signature (multisig) setup on the Safe{Wallet} platform, which requires multiple authorised signers to approve each transaction. Attackers — attributed to the Lazarus Group — compromised the Safe{Wallet} front-end interface used by Bybit's signers. When the signers reviewed and approved what appeared to be a routine internal transfer, they were actually signing a transaction that transferred control of the vault to the attacker. The hardware wallets themselves were not broken; the signers never saw the real transaction they were authorising.
For an individual hardware wallet user, the equivalent attack is a malicious browser extension or fake wallet interface showing you a spoofed transaction. The defence: always verify the exact recipient address and amount on the hardware wallet's own screen — not the software interface — before approving any transaction. If those two do not match, reject immediately. Your hardware wallet screen is the only display you should trust.
The Bybit hack does not make cold wallets less valuable; it makes screen-verification discipline mandatory.
Ledger vs Trezor — the two UK market leaders compared
Ledger and Trezor are the two hardware wallets most UK buyers encounter first. Both are legitimate, well-established manufacturers with millions of devices in the field. The right choice depends on which coins you hold, your stance on open-source firmware, and how you feel about the Ledger Recover controversy.
Ledger is a French company. Its Nano X (£149) connects via Bluetooth and USB-C and supports more than 5,500 coins and tokens through the Ledger Live application. The Nano S Plus (£79) drops Bluetooth but otherwise matches the Nano X on coin support and is the value option for most UK buyers. Ledger uses a certified Secure Element chip — the same class of chip in passports and payment cards — to isolate the private key from the rest of the device. In 2023, Ledger launched its optional Recover service, which allows an encrypted shard of your seed phrase to be backed up with third-party custodians. Uptake is voluntary, and the private key never leaves the Secure Element in plaintext, but many in the self-custody community objected that the service demonstrated Ledger's firmware could extract the seed — an architectural concern, not a confirmed exploit. Ledger's firmware is closed-source, which means you are trusting their internal security verification rather than public code review.
Trezor is a Czech company (SatoshiLabs), the maker of the first commercially available hardware wallet. The Model One (£59) is the entry-level option; the Model T (£179) adds a colour touchscreen. Trezor's firmware is fully open-source, which allows public code review — a meaningful security property for users who prefer auditable systems. The trade-off is coin support: Trezor does not support native Solana or XRP without routing through a third-party bridge wallet, and Cardano (ADA) support is limited. For a Bitcoin-and-Ethereum portfolio, Trezor is excellent; for a broader altcoin mix, Ledger's coin support is more comprehensive.
Neither manufacturer has suffered a hardware exploit that allowed remote extraction of private keys. Ledger experienced a significant data breach in 2020 that exposed customer names, email addresses and postal addresses — not private keys — but that data was used in targeted phishing campaigns. Trezor had a physical extraction vulnerability on older models under lab conditions (not remote). Both facts are worth knowing, but neither changes the fundamental security model for normal use.
- Ledger Nano S Plus (£79): Best value for most UK buyers. USB-C, 5,500+ coins, Secure Element chip, closed-source firmware. No Bluetooth.
- Ledger Nano X (£149): Adds Bluetooth for mobile signing. Same coin support. Worth the premium if you want wireless use.
- Trezor Model One (£59): Cheapest entry. Open-source firmware, Bitcoin and Ethereum well-supported. Limited altcoin support without bridges.
- Trezor Model T (£179): Touchscreen, open-source, same coin support caveats. Best for users who value open-source above all else.
Other hardware wallets worth considering
Ledger and Trezor are not your only options. Three alternatives merit attention depending on your use case.
Coldcard (price varies, approximately £150–£200 imported) is Bitcoin-only and is considered the most security-focused hardware wallet available. It supports fully air-gapped signing — transactions can be moved by microSD card with no USB or Bluetooth connection required. Coldcard is the standard for Bitcoin maximalists and anyone who wants the deepest security profile available. Its interface is deliberately sparse; it is not designed for beginners.
Blockstream Jade is an open-source, Bitcoin-focused hardware wallet at a lower price point than Coldcard. It supports air-gapped signing via QR code and is a credible alternative for Bitcoin holders who want an open-source option without Trezor's coin support limitations.
Keystone Pro uses QR code-based air-gapped signing exclusively — no USB cable is required at any point. The QR exchange means the device is never in a wired connection with a potentially compromised computer. It supports a broader range of assets than Coldcard and integrates with MetaMask and several other software wallets via QR. For users who want air-gap capability without being Bitcoin-only, Keystone is the most practical option.
- Coldcard: Bitcoin-only, air-gapped, maximum security. Not for beginners.
- Blockstream Jade: Open-source, Bitcoin-focused, air-gapped via QR, competitively priced.
- Keystone Pro: QR-only air gap, multi-asset, integrates with MetaMask. Best air-gap option for altcoin holders.
How to set up a hardware wallet safely — and the seed phrase rules
A hardware wallet's security depends entirely on the seed phrase — the 12 or 24 random words generated on first setup. The seed phrase is the master key. Anyone with those words can restore your wallet on any compatible device and access every asset in it. Treat the seed phrase as more sensitive than your bank PIN and passport combined.
When you first power on the device, it generates the seed phrase on-device, and you write it down. The following rules are not optional — each one represents a real attack vector that has cost people their funds.
After writing your seed phrase on paper, test your backup immediately: most hardware wallets offer a seed verification function that confirms you copied the words correctly without exposing them digitally. Use it. A backup you have never verified is a backup you do not have.
Once your device is set up, use it: every time you approve a transaction, check the recipient address character-by-character on the hardware wallet's own screen, not just the software interface. Clipboard malware that replaces wallet addresses in transit is one of the most common crypto theft methods and it is entirely defeated by checking the device screen.
- Write the seed phrase on paper — never type it, photograph it, store it in a notes app, cloud service or password manager, or speak it aloud near a recording device.
- Write it during setup only, when the device displays each word. Never ask another device to 'help' generate or store the phrase.
- Store the written seed phrase in a physically secure location, separate from the hardware wallet device. If both are lost in the same event (fire, theft), you lose everything.
- Consider a second paper copy in a different location — a fireproof safe, a trusted family member's premises — for disaster recovery.
- Never enter your seed phrase into any website, app or software under any circumstances. No legitimate hardware wallet manufacturer will ever ask for it.
- If you suspect your seed phrase has been compromised, move funds to a new wallet with a freshly generated seed phrase immediately.
Who actually needs a cold wallet?
A hardware wallet is not necessary for every crypto user. The meaningful question is whether the cost — in money and setup friction — is proportionate to what you are protecting.
The practical threshold most security-conscious holders use: if you hold more than roughly £500 worth of crypto that you do not intend to trade for at least six months, a hardware wallet is worth the investment. Below that level, the risk-adjusted loss from a hack is comparable to the cost of the device. Above it, the maths tips decisively toward cold storage.
If you actively trade daily on an exchange, moving funds to cold storage every time you want to transact is impractical. The common approach is to keep an active trading balance on an exchange — sized to what you are comfortable losing if the exchange is hacked or fails — and move long-term holdings to cold storage. The Bybit hack demonstrated that exchange cold storage is not equivalent to your own hardware wallet; the exchange controls the signing environment, you do not.
Cold wallets do not protect against market loss. If the value of your holdings falls, the hardware wallet cannot change that. What it protects against is theft and exchange failure — two very real risks, but not the only risks in crypto.
UK buyer's guide — where to buy a hardware wallet safely
The single most important purchasing decision for a hardware wallet is where you buy it. A tampered device — one that has been opened, reprogrammed and resealed — could be shipped with a pre-compromised seed phrase or modified firmware. This is not a theoretical attack: it has been documented.
Buy exclusively from the manufacturer's official website. Ledger sells at ledger.com; Trezor at trezor.io; Coldcard at coldcard.com; Blockstream Jade at store.blockstream.com; Keystone at keyst.one. These are the only sources where you can be confident the supply chain has not been tampered with.
Do not buy hardware wallets from third-party Amazon sellers, eBay, or any reseller who is not the official manufacturer. This applies even when the listing appears authentic. Even if a third-party device arrives sealed, you cannot verify the seal has not been tampered with.
When your device arrives, check the manufacturer's specific tamper-evidence instructions (most use holographic seals or check codes). On first setup, the device should generate a fresh seed phrase — if it prompts you to enter a pre-supplied seed phrase or shows a pre-set PIN, the device has been compromised. Do not use it and contact the manufacturer.
In the UK, import duties may apply to some devices depending on origin; factor this into your cost comparison. Both Ledger and Trezor ship to UK addresses directly.
- Ledger: ledger.com (ships to UK, VAT included at checkout).
- Trezor: trezor.io (ships to UK, check checkout for VAT).
- Coldcard: coldcard.com (Bitcoin-only buyers).
- Blockstream Jade: store.blockstream.com.
- Keystone: keyst.one.
- Never buy from Amazon third-party sellers, eBay or unofficial resellers.
Frequently asked questions
What is a cold wallet in crypto?
A cold wallet — also called a hardware wallet — is a physical device that stores your cryptocurrency private keys offline, disconnected from the internet. Because the key never touches an internet-connected environment, it cannot be stolen remotely. Ledger and Trezor are the most widely used cold wallets in the UK. This is information, not financial advice.
What is the difference between a cold wallet and a hot wallet?
A hot wallet (MetaMask, a Coinbase Wallet app, or an exchange balance) keeps your private key on an internet-connected device, making it accessible but vulnerable to remote attack. A cold wallet stores the key on a dedicated offline device; the key never leaves it, even when you sign a transaction. For holdings you do not trade frequently, cold storage is the more secure option.
Which is better — Ledger or Trezor?
For most UK buyers, the Ledger Nano S Plus (£79) is the best value option: Secure Element chip, 5,500+ coin support, USB-C. Trezor is the open-source alternative — the Model One (£59) suits Bitcoin and Ethereum holders who prefer auditable firmware. Trezor lacks native Solana and XRP support; Ledger's firmware is closed-source. Neither has suffered a remote key-extraction exploit. If coin breadth matters, choose Ledger. If open-source firmware matters most, choose Trezor.
What happened in the Bybit hack and does it affect hardware wallet users?
In February 2025, approximately US$1.5 billion was stolen from Bybit via a compromised Safe{Wallet} signing interface — attackers showed signers a spoofed transaction on screen. The hardware wallets themselves were not broken; the signers trusted the software interface rather than verifying on the device screen. The lesson for hardware wallet users: always check the recipient address on your device's own screen, never the browser or app interface alone.
What is a seed phrase and why is it so important?
A seed phrase (also called a recovery phrase) is the 12 or 24 random words generated when you set up a hardware wallet. It is the master key to all assets in that wallet — anyone with those words can restore the wallet on any compatible device. Write it on paper during setup and store it securely offline. Never type it, photograph it, or enter it into any website or app. No legitimate company will ever ask you for it.
Should I buy a hardware wallet from Amazon?
No. Only buy from the manufacturer's official website — ledger.com, trezor.io, coldcard.com, and so on. Third-party Amazon and eBay sellers cannot guarantee an unmodified supply chain. A tampered device may arrive with a pre-compromised seed phrase or modified firmware. The risk is real and documented; the price saving is not worth it.
Do I need a cold wallet if I only hold a small amount of crypto?
If you hold less than approximately £500 and trade it regularly, the friction of a hardware wallet may outweigh the benefit. Above £500, especially for long-term holdings you do not intend to move frequently, cold storage is generally worth the investment. The device cost (from £59 for a Trezor Model One) is a one-off expense; the protection is ongoing. This is information, not financial advice.
What is an air-gapped hardware wallet?
An air-gapped hardware wallet signs transactions with no wired or wireless connection to any other device. Coldcard and Blockstream Jade can sign via microSD card; Keystone Pro and Blockstream Jade can sign via QR code. The signed transaction is then broadcast from a separate, connected device. Air-gapping removes the USB/Bluetooth attack surface entirely, at the cost of additional steps per transaction.
What is Ledger Recover and should I use it?
Ledger Recover is an optional paid service that splits and encrypts your seed phrase and backs it up with three custodian companies. It is opt-in — your seed phrase is not backed up without your active consent. The security concern raised by the community is architectural: the service demonstrated that Ledger's firmware is capable of extracting the seed phrase, which conflicts with the self-custody principle. If you prefer zero reliance on any third party for your seed phrase, do not use Ledger Recover and do not opt in if prompted during firmware updates.
Sources & further reading
An independent publisher mapping the regulation of cryptocurrency exchanges. Our editorial desk verifies every licence and availability claim against primary sources — the ESMA MiCA register, the FCA register, ASIC, MAS, VARA and each exchange's own terms — and never accepts payment for a better assessment or placement. We publish information only; nothing here is financial advice.