8 Best Cold Storage Wallets 2026 (Expert Recommended)
.jpg)
%20(1).png)
Key Takeaways
- Tangem is our best pick overall at $59.90 for a 2-card set, the Ledger Nano X is the best starting point for beginners at $99, and the NGRAVE Zero is the strongest option for security and recovery.
- Which wallet is right for you depends on what you value most: independent security certification, the range of assets supported, price, or ease of daily use.
- 2026 brought three very different hardware wallet incidents. One firmware flaw cost users real money, two third-party vendor breaches leaked customer data but no funds, and one chip finding was a laboratory result with nothing at risk.
- Moving crypto to a cold wallet is not a taxable event, but it is where cost basis gets lost, which is what makes a Form 1099-DA overstate your gain.
These are the best cold storage wallets for keeping cryptocurrency you plan to hold long-term offline and out of reach. Our panel of experts reviewed dozens of options and built this list around five criteria: security architecture and independent certification, supported assets, price, ease of setup and daily use, and build quality. Every price below was checked against the manufacturer’s own store in September 2026. We also weigh a manufacturer’s security track record, which is why one wallet that appeared on earlier versions of this list is no longer on it.
| Wallet | Best for | Price | Supported assets | Security certification |
|---|---|---|---|---|
| Tangem | Overall | $59.90 (2-card set) | 14,100+ across 90 blockchains | EAL6+ |
| Ledger Nano X | Beginners | $99 | Thousands of coins and tokens | Certified Secure Element chip |
| Ledger Stax | Design & UX | $399 | Thousands of coins and tokens | Certified Secure Element chip |
| Trezor Safe 3 | Affordability | $59 | Thousands of coins and tokens | EAL6+ Secure Element |
| Cypherock X1 Basic | Key splitting | $99 (list $129) | 18,000+ assets | EAL6+ on each X1 card |
| NGRAVE Zero | Security & recovery | $498 (Combo Pack) | 3,500+ assets and NFTs | EAL7 |
| BC Vault ONE | Cryptocurrency selection | No USD price published | Millions of coins and tokens | Not published |
| D'CENT | Biometric security | $79 | 10,000+ across 100+ blockchains | EAL5+ |
Get your crypto taxes right after you move to cold storage
Self-custody solves your security problem and creates a reporting one. The moment your coins leave an exchange, that exchange can no longer see what you paid for them, and the Form 1099-DA it files later can report your sale without the cost basis behind it.
CoinLedger connects to hundreds of exchanges and reads your cold wallet addresses directly, matches each withdrawal to the deposit on the other side, and carries your cost basis across the transfer. More than 700,000 investors use CoinLedger to file their crypto taxes. Get started with a free account today, and you only pay when you download your completed report. If you want to compare tools first, see our roundup of the best tax software for Form 1099-DA.
If you want peace of mind, affordability, and convenience, Tangem is one of the best cold storage wallets on the market today.
Price: $59.90 for the 2-card set, $69.90 for the 3-card set. Tangem also sells the Tangem Ring at $160 and the Tangem Pro Kit at $180.
Supported assets: 14,100+ across 90 blockchains
Rating: 4.8/5
Why didn’t Tangem get a higher rating? The firmware is not open source, and a card set can only be backed up at setup, so you cannot add a spare card later. If open-source code matters more to you than skipping the seed phrase, the Trezor Safe 3 is the better fit.
Price: $99
Supported assets: Thousands of coins and tokens across 100+ blockchains
Rating: 4.6/5
Why didn’t the Ledger Nano X get a higher rating? The firmware is closed source, and the Nano X now sits two generations behind Ledger’s current Nano. The January 2026 breach at Ledger’s payment processor also exposed customer contact details, which is a phishing risk rather than a device risk.
Price: $399
Supported assets: Thousands of coins and tokens
Rating: 4.3/5
Why didn’t the Ledger Stax get a higher rating? It is the most expensive wallet on this list by a wide margin, and the extra money buys design and convenience rather than additional security. The Ledger Flex offers the same E Ink touchscreen approach for $249.
Price: $59
Supported assets: Thousands of coins and tokens
Rating: 4.6/5
Why didn’t the Trezor Safe 3 get a higher rating? The plastic body and small monochrome screen show where the money was saved, and it is not air-gapped. Trezor’s newer Safe 5 and Safe 7 add a colour touchscreen at $129 and $249.
Price: $99 for the X1 Basic, list $129
Supported assets: 18,000+
Rating: 4.2/5
Why didn’t the Cypherock X1 get a higher rating? Five physical pieces to look after is more to manage than one device and one backup, and the setup is the most involved on this list. It is a poor first wallet and a strong second one.
Price: $498 for the Combo Pack. The ZERO is currently sold only bundled with its backup plate rather than standalone, so the Combo Pack is the cheapest way to buy one today.
Supported assets: 3,500+ assets and NFTs
Rating: 4.5/5
Why didn’t the NGRAVE Zero get a higher rating? It is the most expensive way onto this list once the bundle is the only option, it supports fewer assets than most of its rivals, and being fully air-gapped makes it slow to use for anything but long-term storage.
Price: BC Vault publishes prices in euros only. The ONE Basic model lists at €131.14 on its own store, and there is no official USD price.
Supported assets: Millions of coins and tokens, per BC Vault’s own claim
Rating: 3.9/5
Why didn’t BC Vault ONE get a higher rating? The interface is dated, there is no published security certification, and buyers outside the EU pay import costs on top of a price that is not quoted in dollars.
Price: $79 for a single Biometric Wallet, $149 for the 2-pack
Supported assets: 10,000+ across 100+ blockchains
Rating: 4.0/5
Why didn’t D'CENT get a higher rating? The firmware is not open source, and the fingerprint sensor is a convenience feature rather than an extra layer of cryptographic security. The Biometric Wallet is also an older device than D'CENT’s current DCENT X.
What the 2026 hardware wallet incidents mean for you
2026 was the year hardware wallets made headlines, and the three events readers ask about are not the same kind of event. Grouping them together as ‘hardware wallets got hacked’ gets the risk badly wrong. Here is what actually happened in each case, and what was and was not compromised.
The Coldcard firmware flaw, July 2026: funds were stolen. On July 30, 2026, an attacker began draining bitcoin from Coinkite Coldcard devices. The cause was a build error in a March 2021 firmware release that made seed generation fall back on a weak software random number generator, cutting effective key strength from a designed 128 bits to as little as 40 bits on affected devices. Because the weakness sat in the keys themselves, the attacker needed no physical access to any device and no internet connection to it. Published loss estimates run above 1,700 BTC, which is more than $100 million, and totals differ by source because the theft happened in waves. This was a failure in the device’s own key generation, and it is why Coldcard is not on this list. If you generated a seed on a Coldcard between March 2021 and the fix, treat that seed as compromised and move your funds to a new one.
The Ledger and Trezor vendor breaches: customer data leaked, no funds and no devices. In January 2026, attackers compromised Global-e, the payment processor Ledger uses, and took customer names, postal addresses, email addresses, phone numbers and order details. Separately, a breach at fulfilment provider ShipMonk exposed order data for roughly 81,000 Trezor customers. In both cases the leak sat with a third-party vendor, not with the wallet maker’s hardware. No funds were taken, no recovery phrases were exposed, and no device was compromised. What these leaks do create is a targeted phishing and personal-safety risk, because the stolen lists identify people who own crypto and say where they live. Ledger customers received physical letters with QR codes asking for their 24-word recovery phrase in April 2025 off the back of an earlier leak. No hardware wallet company will ever ask you for your recovery phrase, by letter, email, phone or app.
The Trezor Safe 7 chip finding, June 2026: a laboratory result, not an exploit. Ledger’s Donjon security team demonstrated an attack on the TROPIC01 chip used in the Trezor Safe 7 and disclosed it to Trezor, which published the finding. It affects one of several security layers, and using it requires physical possession of the device, specialist equipment and expert knowledge. No user funds were at risk and there is no evidence of it being used outside a lab. Two competitors finding and disclosing each other’s weaknesses is the system working rather than failing.
What to take from all this. Buy directly from the manufacturer or an authorised reseller, keep firmware current, and look for devices whose key generation has been independently audited rather than only certified. Assume any message about your wallet is a phishing attempt until you have verified it yourself. And read how a company responds to a disclosure as closely as you read its spec sheet. For the fundamentals, see our guide to bitcoin wallet security.
The current generation of hardware wallets
The eight wallets above are our picks on security, value and ease of use, and several of them are mature devices that have years of audits behind them. The category did move in 2025 and 2026, though, and these are the newer models worth knowing about before you buy. All prices were checked against the manufacturer’s own store in September 2026.
- Ledger Nano Gen5, $179: Ledger’s Nano refresh, launched in October 2025. A 2.8-inch E Ink touchscreen, USB-C, Bluetooth and NFC, with a PIN-protected Ledger Recovery Key in the box. Ledger now positions the Nano X and Nano S Plus as its lower-cost classics rather than its flagship.
- Ledger Flex, $249: sits between the Nano X and the Stax, bringing the Stax’s E Ink touchscreen into a smaller and cheaper body.
- Trezor Safe 7, $249: Trezor’s flagship, and the device at the centre of the TROPIC01 disclosure described above. Read that section before you decide.
- Trezor Safe 5, $129: the colour-touchscreen Trezor, a step up from the entry-level Safe 3 we recommend for affordability.
- ELLIPAL Titan 2.0, $149: fully air-gapped, with no USB data, Bluetooth, NFC or Wi-Fi. Every transaction is signed by QR code through a 4-inch touchscreen in a sealed metal body.
If you want a shortlist that is not limited to cold storage, see our guides to the best crypto wallets, the best Bitcoin wallets, the best crypto wallets for beginners, and the best XRP wallets.
Why do I need a cold storage wallet?
Cold storage wallets are considered the best option for long-term security, especially compared to ‘hot wallets’ (software wallets connected to the Internet). If you are new to the idea, our explainer on bitcoin cold storage covers the basics. Here are the advantages:
- Strong storage: Because cold storage wallets store your cryptocurrency offline, they’re considered the best choice to prevent hacks.
- Hardware-based security measures: Many cold storage wallets use Secure Element chips to protect against tampering and brute-force attacks.
- Support for multiple cryptocurrencies: Most cold wallets support a wide range of digital assets, allowing you to securely store all the cryptocurrencies you own.
- Backup and recovery options: Seed phrases (usually 24 words) are provided as backups, allowing users to recover their wallets in case of an emergency.
- Integration with software interfaces for transactions: Many cold storage wallets can interact with hot wallets to allow you to easily make transactions.
Cold wallets vs. hot wallets
Cold wallets offer different benefits than ‘hot wallets’ (software wallets like Coinbase Wallet and MetaMask that are constantly connected to the Internet). Let’s walk through them:
| Feature | Cold Storage Wallets | Hot Wallets |
|---|---|---|
| Internet Connectivity | Offline (can integrate with hot wallets) | Always online |
| Security | Higher | Lower |
| Convenience | Less convenient for frequent transactions | More convenient for daily use |
| Cost | Hardware purchase required | Typically free |
| Best For | Long-term storage, large amounts of crypto | Daily transactions, smaller amounts of crypto |
Cold wallet security features
Want to choose a wallet with the best security features? Here’s what you should look out for.
- Secure Element chips: These chips securely store private keys and handle cryptographic operations, offering a higher level of protection against attacks.
- PIN protection and optional passphrases: Many cold wallets come with PINs and additional passphrase options for increased security.
- Air-gapped functionality: Some wallets (e.g., NGRAVE Zero) are air-gapped, meaning they are never connected to the internet, essentially making your crypto immune to online attacks. However, air-gapped wallets may be more difficult to use for transactions.
- Open-source software: Software transparency allows the community to audit, review, and fix potential vulnerabilities.
- Physical tamper-evident design: Many cold storage wallets are designed with tamper-evident features, so unauthorized individuals cannot access your holdings.
How to set up and use a cold wallet
Let’s walk through 5 steps to help you get started using your cold storage wallet.
- Purchase a reputable cold storage device: Buy directly from an authorized retailer to avoid counterfeit devices.
- Follow the setup instructions: When you set up your wallet, carefully follow the manufacturer’s instructions. This may include verifying your device, updating to the latest firmware, and confirming your PIN. Being cautious during setup ensures your wallet is configured correctly and reduces the risk of mistakes that could compromise your crypto.
- Generate and securely store the recovery phrase: Write down your recovery phrase (usually 24 words) and store it in a safe place. Remember, this phrase can help you recover access to your wallet in the event of an emergency.
- Transfer cryptocurrencies to the cold wallet: Use the wallet address to transfer your assets to your cold wallet.
- Verify transactions on the device: To protect yourself against hacks, carefully review and verify transactions you make on your wallet.
Do you pay taxes when you move crypto to a cold wallet?
No. Moving cryptocurrency between two wallets you control is not a disposal, so transferring crypto to a cold wallet is not a taxable event. You still own the same coins, and your holding period and cost basis carry across with them.
What changes is the paperwork. When you withdraw crypto from an exchange, that exchange loses sight of what you originally paid for it. Starting with the 2025 tax year, US exchanges report your sales on Form 1099-DA, and for 2025 that form shows your gross proceeds without the cost basis behind them. Exchanges only have to report cost basis from the 2026 tax year onward, and even then they cannot report a basis they never saw. So if you move coins into cold storage and later send them back to an exchange to sell, the 1099-DA can report the full sale amount as though your basis were zero, which makes your gain look far larger than it actually was.
Three habits stop that from turning into an overpayment:
- Record every transfer: the date, the asset, the amount, the wallet it left and the wallet it arrived in.
- Keep your original purchase records: what you paid, when you paid it, and where you bought.
- Track everything in one place: a portfolio tracker or tax platform that sees both your exchange accounts and your cold wallet addresses can match a withdrawal to the deposit on the other side and carry your basis across it.
For more detail, see whether you get a Form 1099-DA when you transfer crypto.
What are the disadvantages of cold storage wallets?
- Higher initial cost: While software wallets are free to use, you need to pay for a cold wallet.
- Less convenient for frequent trading: Cold wallets are best for long-term storage, so they may not be as convenient for frequent transactions.
- Risk of physical damage, loss, or theft: If your device is damaged, lost, or stolen, you could lose access to your assets unless you have a backup of your recovery phrase.
- Potential for user error: Incorrect setup or failure to securely store the recovery phrase could mean losing access to your assets.
- Firmware updates may require additional steps: Unlike software wallets that automatically update, cold wallets sometimes require manual action for firmware updates.
- Limited functionality: Cold storage wallets generally don’t support features like direct crypto purchases or built-in exchanges.
Should I use a paper wallet?
In the early days of crypto, paper wallets were one of the most popular ways to store crypto offline. These days, investors have turned mostly towards modern hardware wallets.
A paper wallet is simply a physical printout (or handwritten note) of your public and private keys. In theory, it’s completely offline and immune to online attacks. However, paper wallets can be difficult to use and easy to lose.
Fragile: If your paper gets damaged or smudged, your crypto could be gone forever.
No built-in security features: Unlike hardware wallets, paper wallets don’t have PINs, biometric security, or recovery mechanisms.
Frequently asked questions
- What are the disadvantages of a cold wallet?
- Do I really need a cold storage wallet?
- Can you lose crypto in a cold wallet?
- Do cold wallets need private keys?
- How long do cold wallets last?
- What's the best cold wallet for XRP?
- Does my crypto still grow in a cold wallet?
- Which cold wallet is best for beginners?
- What's the cheapest cold wallet?
- Are hardware wallets still safe after the 2026 Coldcard exploit?
- Do I pay tax when I move crypto to a cold wallet?
.png)
