Guide
How to Choose a Hardware Wallet: 5 Criteria That Beat Any "Best Of" Ranking
The Bottom Line
When choosing a hardware wallet, the first thing to decide is not "which product" but "where you buy it." The single most important criterion is to always buy from the manufacturer's official store or an officially authorized reseller. Used devices and resold units from unauthorized marketplaces carry the trap of a "tampered device" with a recovery phrase already pre-loaded — and if you fall for one, your entire balance can be drained. On top of that, the neutral way to choose — without relying on someone's ranking — is to weigh five criteria against your budget: (1) an authorized seller, (2) open-source and verifiability, (3) BIP39 compliance, (4) passphrase support, and (5) whether the device has a screen.
Key takeaways
- "Buy from an authorized seller" beats any product ranking — a tampered, resold device is the single biggest risk.
- BIP39 compliance means you can recover your funds on another brand's wallet even if the maker disappears (no vendor lock-in).
- Passphrase support and the presence of a screen are practical criteria that determine theft resistance and how safely you can operate the device.
- Expensive does not mean safe. Match your choice to how you actually use it (amount, frequency, storage horizon).
If you're still unclear on what a hardware wallet even is and why you'd need one, read What Is a Hardware Wallet and Hot Wallet vs. Cold Wallet first — the criteria in this article will make a lot more sense afterward.
Why You Shouldn't Choose by "Product Ranking"
Search for "hardware wallet comparison" and the top results are mostly affiliate-driven "recommended rankings." Rankings aren't inherently bad, but a #1 pick that ignores how you actually use it — your holdings, trading frequency, storage horizon, and technical literacy — is not your #1. Because this is YMYL (information tied directly to money and safety), the safest long-term approach is not to swallow someone else's ranking whole, but to develop your own set of criteria for making the call.
Below are those criteria, listed in order of priority.
Criterion 1: Always Buy From an Authorized Seller (Most Important)
This takes precedence over every other criterion. Both Trezor and Ledger officially and strongly recommend purchasing devices only from their official store or an authorized reseller. The reason is that through unauthorized distribution channels, a third party can open and tamper with the device somewhere along the supply chain.
In fact, there have been reported cases where counterfeit, tampered Trezor devices were sold on a marketplace that appeared trustworthy, and buyers had their funds stolen (as flagged by Kaspersky). The typical scheme works like this.
注意
A genuine, brand-new wallet will never come with a recovery phrase (seed phrase) "pre-printed and included in the box."
If a card telling you to "enter these 12 words" is inside the box from the start, that is a tampered trap. The attacker already knows those words, so the moment you deposit funds, they can steal them. If the device arrives looking already opened, the seal is broken, or a phrase is presented to you before initial setup — stop using it immediately and contact the manufacturer's support.
Checklist:
- Buy only from the manufacturer's official store, or an authorized reseller listed on the official website.
- When it arrives, always run the manufacturer's authenticity check (Genuine Check, etc.).
- It is normal for the recovery phrase to be generated for the first time on your own device.
Criterion 2: Open Source and Verifiability (Can You See Inside?)
Whether a wallet's firmware and software are published as open source (OSS) is an important indicator of trustworthiness. If the source is public, developers worldwide can verify that no malicious behavior or backdoor has been slipped in. With a fully closed product, by contrast, you have no choice but to trust the manufacturer.
This doesn't mean "it absolutely must be OSS," but if you're choosing neutrally, the higher the verifiability (i.e., the more open source it is), the more reasons you have to feel reassured. Check the product page for wording like "open source" or "verifiable firmware."
Criterion 3: BIP39 Compliance (Are You Tied to One Maker?)
BIP39 is the industry-standard specification that expresses a seed phrase as 12 or 24 standard words (chosen from a 2,048-word dictionary). Many of the major hardware wallets comply with this standard.
Why does BIP39 compliance matter? Because it means you aren't tied to a specific manufacturer (you avoid vendor lock-in). With a BIP39-compliant wallet, even if that maker goes bankrupt or shuts down its service, you can recover your funds simply by entering the same 12 or 24 words into another compatible wallet's "restore" function. The longer your intended storage horizon, the more this "freedom to exit" pays off.
The meaning of a seed phrase and how to store it properly are covered in detail in How to Back Up Your Seed Phrase.
Criterion 4: Passphrase (BIP39 Passphrase) Support
BIP39 includes an option to add one more optional secret (a passphrase) on top of the 12/24-word seed. Once you set a passphrase, the same seed phrase produces a completely different wallet "with passphrase" versus "without."
This becomes your "last line of defense" if your seed phrase is glimpsed or physically discovered. Even if an attacker obtains your 24 words, they can't reach your real funds without knowing the passphrase.
重要
A passphrase is powerful, but it comes with a trade-off: the number of secrets you must manage grows to two. If you forget your passphrase, you'll lose your funds permanently even if your seed phrase is intact. Beginners should first nail down proper seed management, and only start using a passphrase once they understand how it works.
Criterion 5: Presence of a Screen (Display)
Whether you can verify and approve the destination address and amount on the wallet's own screen greatly affects practical safety. With a screen, even if your PC or phone is infected with malware and the destination address is swapped, you can catch it because you do the final confirmation on the device's own display. Small, card-shaped models without a screen offer superior portability, but confirmation depends on your phone. The more frequently you send funds, the greater the peace of mind a built-in screen provides.
The Five Criteria at a Glance
| Criterion | What to look at | Why it matters (for beginners) |
|---|---|---|
| 1. Authorized seller | Official store / authorized reseller? | Avoids tampered, resold devices (most important) |
| 2. OSS / verifiability | Is the firmware public and verifiable? | A third party can confirm there's no backdoor |
| 3. BIP39 compliance | Is it the 12/24-word standard? | Recoverable elsewhere even if the maker disappears |
| 4. Passphrase | Does it support a BIP39 passphrase? | Last line of defense if the seed leaks |
| 5. Screen | Can you verify the address on the device? | Lets you detect a swapped destination |
Thinking by Budget (Choosing Without Naming a #1)
Price is not the simple story of "cheap = dangerous / expensive = safe." The trick is to match your choice to how you actually use it.
- Small amounts / just getting started: Even an entry-level model works perfectly well as long as it meets (1) authorized seller, (3) BIP39 compliance, and (5) a screen. Simply starting proper self-custody the right way is the biggest step forward.
- Mid-to-high amounts for long-term storage: Emphasize (3) BIP39 and (4) a passphrase. Prioritize future freedom to switch and theft resistance.
- Frequent sending / multiple assets: Emphasize (5) a built-in screen, supported coins, and usability. Think of it as an investment in reducing the daily stress of verification.
For the full picture of how to safely store and manage your bitcoin — wallet included — see How to Store Bitcoin.
Frequently Asked Questions
Q. Can I buy a hardware wallet cheaply used or on a resale app? A. Avoid it regardless of price. The risk of getting a tampered device is high, and there have been real cases of funds being stolen via counterfeits. Always buy a new unit from the manufacturer's official store or an authorized reseller, and run an authenticity check upon arrival.
Q. Is it OK to buy on Amazon? A. It can be an option if the seller is an official one (an official store listing or authorized reseller). But if there's anything abnormal — a broken seal, a device that looks already opened, or an included phrase — don't use it regardless of the sender, and contact support.
Q. Are more expensive products safer? A. Not necessarily. Safety is determined not by price but by authorized distribution, BIP39 compliance, verifiability, and whether the device suits how you operate. Even an entry-level model is plenty safe when used correctly.
Q. If the manufacturer goes bankrupt, can I no longer recover my funds? A. If you've properly stored a BIP39-compliant seed phrase, you can recover your funds by entering the same words into another compatible wallet's "restore" function. That's exactly why standard compliance and backing up your seed are so important.
---
This article is educational information, not investment advice. Self-custody of crypto assets carries personal responsibility, and losing your seed phrase or passphrase can lead to the permanent loss of your funds. The performance, specifications, and sale terms of specific products can change, so always check each manufacturer's official information before purchasing.
Sources
- Best Practices To Securely Buy Your Ledger Signer — Ledger Academy
- Essential tips for safeguarding your Hardware Wallet purchase — Trezor Blog
- 'Trusted' marketplace sold fake Trezor wallets stealing crypto — Cointelegraph (Kaspersky investigation)
- Seed phrase — Bitcoin Wiki
- BIP-39 Passphrase — COLDCARD Documentation
Sources
FAQ
- Can I buy a hardware wallet cheaply used or on a resale app?
- Avoid it regardless of price. The risk of getting a tampered device — one with a recovery phrase already pre-loaded — is high, and there have been real cases of funds stolen via counterfeits. Always buy a new unit from the manufacturer's official store or an authorized reseller, and run an authenticity check upon arrival.
- Are more expensive products safer?
- Not necessarily. Safety is determined not by price but by authorized distribution, BIP39 compliance, verifiability like open source, and whether the device suits how you operate (amount and frequency). Even an entry-level model is plenty safe when used correctly.
- If the manufacturer goes bankrupt, can I no longer recover my funds?
- If you've properly stored a BIP39-compliant seed phrase (12/24 words), you can recover your funds by entering the same words into another compatible wallet's restore function. That's exactly why standard compliance and backing up your seed are so important.
- Should beginners set a passphrase too?
- A passphrase is a powerful last line of defense if your seed leaks, but it increases the number of secrets you must manage to two, and forgetting it means losing your funds. Beginners should first nail down proper seed management and understand how it works before using one.
This article is informational only and is not financial, investment, or trading advice. Prices are reference snapshots and may be outdated. Always do your own research.
