I’ve been holding more crypto lately and it’s starting to make me nervous keeping it on exchanges and hot wallets. I’m looking for the best cold wallet for long term storage that’s secure, reliable, and not too hard to use. What hardware wallet brands or models do you trust, and what security features or pitfalls should I know about before I move everything over?
I went through the same “oh crap I have too much on exchanges” phase. Here is what worked for me and what I’d suggest you look at.
Short version
• For most people: Ledger Nano X or Nano S Plus
• If you want extra paranoia: Coldcard or Passport (Bitcoin only or BTC-focused)
• Add steel backup for the seed phrase
• Test restores before loading big funds
- Ledger vs Trezor vs “more advanced stuff”
Ledger
Pros:
• Supports a lot of coins and tokens. Good if you hold random altcoins.
• Ledger Live app is simple. Good UX for a first hardware wallet.
• Widely used, lots of guides and support.
Cons:
• Closed source firmware. Some users do not like trusting code they cannot inspect.
• Past PR issues with their “Ledger Recover” feature announcement made people nervous.
• Requires trust in secure element + company.
Trezor (Model T or One)
Pros:
• Open source firmware. Security model easier to audit by the community.
• Good UI. Model T has touchscreen, which some people prefer.
• Works great with Bitcoin and major coins.
Cons:
• No secure element chip, security tradeoff is different.
• Supports fewer obscure coins than Ledger.
• Some phishing attacks in the past targeted users with fake sites, so you need to double check URLs.
Advanced / Bitcoin-focused
Coldcard, Foundation Passport, SeedSigner etc.
Pros:
• Strong focus on Bitcoin security.
• Airgapped workflows possible. You can sign transactions via SD card or QR.
• Features like PIN tricks, duress PINs, etc.
Cons:
• More complicated UX. Not ideal if you want simple and fast.
• Mostly for Bitcoin. If you hold a bag of ERC20s and Solana stuff, this will not help for those.
• Learning curve. You must read the docs.
- What I would do in your shoes
If you hold:
• A mix of BTC, ETH, some majors, a few tokens
→ Get a Ledger Nano S Plus or Nano X, or a Trezor Model T.
If you like open source more, lean Trezor.
If you have many different tokens, lean Ledger.
If you are mostly BTC and long term
→ Get a Coldcard or Passport, plus a simple software wallet as a watch-only wallet.
Keep the signing device offline.
- Seed phrase and backup
This part is more important than brand.
• Write the seed phrase on paper in calm conditions.
• Do not take photos, do not store it in cloud, email, notes app.
• Consider a steel backup (Cryptosteel, Seedplate, Blockmit template and washers, etc.). Fire and water can destroy paper.
• Store backups in 2 separate secure locations. Example: home safe plus bank safe deposit box.
You should also:
• Add a passphrase (25th word) if you understand it. Write a clear procedure for yourself. If you forget it, funds are gone.
• After setting up, reset the device and do a full restore from the seed phrase on the device. If the funds show up after restore, you know your backup works before you move serious size.
- Avoid common mistakes
• Do not buy hardware wallets from eBay or random resellers. Use official store or trusted dealers. Some scams ship pre-initialized devices.
• Do not enter your seed phrase on a computer or phone, only on the hardware device itself.
• Always verify addresses on the device screen, not only on your computer.
• Keep firmware updated, but wait a few days after new releases and read user feedback.
- Simple setup example
Example for a mixed portfolio person:
- Buy Ledger Nano S Plus from official site.
- Initialize offline, write seed phrase twice on paper.
- Store one backup at home in a safe, one in a different location.
- Install Ledger Live, add BTC, ETH, main tokens.
- Send small test amounts from exchange, confirm everything works.
- After you trust the flow, move bulk in a few steps, not in one giant transfer.
If you want set and forget long term storage, the device brand matters less than:
• Good seed backup
• No exposure of seed to the internet
• Your own ability to follow your recovery steps in five years when you forgot half the details
Pick something you feel you can operate even when tired or stressed, because future you will thank present you.
You’re already 80% of the way there just by deciding to get off exchanges.
I mostly agree with @sterrenkijker, but I’d tweak the priorities a bit:
1. “Best” wallet depends on how you might screw up, not just the device brand
Most people obsess over Ledger vs Trezor vs Coldcard. In practice, the thing that wrecks people long term is:
- Losing the seed
- Misusing a passphrase and forgetting it
- Family/heirs having no clue how to recover anything
So I’d actually start from: who needs to be able to restore this in 5–10 years and work backwards. If the answer is “just me and I’m pretty technical,” then the hardcore BTC devices make sense. If the answer is “me + future confused spouse,” friendlier UX wins.
2. Stuff I’d seriously consider that wasn’t mentioned much
-
Keystone (airgapped, QR-based)
Solid option if you like the idea of never plugging in via USB. Works with MetaMask, BTC, ETH etc. For long term storage, QR workflows are nice because you reduce attack surface from USB/desktop malware. UX is a bit more complex than Ledger/Trezor but less scary than Coldcard. -
BitBox02
Very underrated. Open source, secure element, clean app, especially good for BTC + a few majors. If you don’t need 500 random tokens, it’s a solid middle ground between Ledger convenience and Bitcoin-nerd devices.
3. Where I slightly disagree with the “just add a passphrase” advice
Passphrase (25th word) is powerful, but I’ve seen more people lock themselves out than get hacked. If you’re:
- New to hardware wallets
- Not extremely organized with written procedures
then I’d skip passphrase at first. Nail the basics, make sure you can restore your seed, then later decide if you want a passphrase, and document it like you’re writing instructions for a future, forgetful version of yourself.
4. A different angle on redundancy
Instead of only “one device + backups,” I like:
- Two different hardware wallets from different vendors, each holding a portion of your stack.
Example:- BitBox02 or Trezor for BTC/ETH long hold
- Ledger for the weird alt zoo
That way if a vendor goes bust, firmware gets bricked, or there’s a supply chain issue, you’re not all-in on one ecosystem.
5. Don’t sleep on this boring but crucial thing
Write a short, clear “recovery doc” for yourself and whoever might need it if something happens to you. Not your seed phrase itself, but:
- Where backups are
- What device they correspond to
- What software to download
- Any passphrase info described in a way you will understand in 7 years
People spend thousands on hardware and steel plates then forget they’ll be older, more tired, and maybe less into crypto when they actually need to recover.
If I were in your shoes with a mixed bag of coins long term:
- Get BitBox02 or Trezor Model T for the sleep-at-night stash (BTC, ETH, majors)
- Use Ledger only for stuff that really needs its broad coin support
- No passphrase at the start
- Two physical seed backups, in two places
- One small “practice” wallet with a tiny amount where you actually test restoring every few months, so the process stays in your muscle memory
The specific brand matters less than choosing something you’re confident you can still operate after a year of not touching it and after 3 market cycles frying your brain.
For long term cold storage I’d zoom out one level from what @nachtschatten and @sterrenkijker wrote and look at threat model + human factors first, then pick hardware.
They already nailed the usual suspects (Ledger, Trezor, Coldcard, Passport, Keystone, BitBox02), so I’ll add a few angles that often get ignored:
1. “Best” wallet vs “least likely to cause future you problems”
Most people asking this are not trying to defend against nation state attackers. They are trying to defend against:
- Future self doing something dumb
- Water / fire / move to another country
- Forgetting the exact setup you used
If that is you, the best crypto cold wallet for long term safe storage is often:
A boring hardware wallet + very clear written recovery instructions + simple estate plan
I slightly disagree with the idea that “test once and you’re done”. I think:
- You should rotate a scheduled, tiny-amount restore test every 6–12 months.
- Treat it like checking smoke alarms.
That matters more than whether you picked Coldcard vs Ledger.
2. Product angle: metals & multisig, not just the device
Everyone talks hardware, fewer people talk about redundancy structure.
If you have a meaningful stack, instead of obsessing over Nano vs Trezor, consider:
A) Single wallet, hardened backup
- One main device of your choice
- Seed on something like a steel backup (any reputable plate / capsule solution)
- Copy in two places
Pros: Very simple mental model.
Cons: Single point of failure if someone discovers both backups or device + backup.
B) Simple 2‑of‑3 multisig
This is where I diverge a bit from both @nachtschatten and @sterrenkijker. They lean more “one device + strong backup” for typical users. I think some non‑technical but organized people can actually handle basic multisig if you keep it boring.
Example high level:
- 3 hardware wallets from at least 2 vendors (e.g. Trezor + Ledger + Coldcard or BitBox02)
- Wallet software like Sparrow or Specter to assemble a 2‑of‑3 for BTC
- Store each seed in a different location
Pros:
- One compromise does not nuke you.
- One lost device or backup is survivable.
Cons:
- Recovery is more steps.
- Only really convenient for Bitcoin.
For long term BTC cold storage, a simple 2‑of‑3 can be a better “sleep at night” setup than the fanciest single device.
3. Vendor diversification beats vendor perfection
Both earlier replies mentioned using multiple devices, which I strongly agree with, but I’d push that even harder:
- Assume at least one vendor will: screw up firmware, have a supply chain issue, or disappear.
- Don’t tie your entire net worth to the ongoing competence of one company.
For example:
- Stack A (BTC, ETH, majors) on open source + secure element style device like BitBox02.
- Stack B (altcoins zoo) on something more “mass market” like a Ledger.
- If you really want ultimate BTC paranoia, add a Coldcard or Passport later.
You can still treat all of this as “cold storage” by keeping the devices powered off and only connecting when needed.
4. Ease for heirs and future non‑technical you
This is the one that bites in long term storage and it is where I’d slightly push back on heavy use of passphrases or complex airgapped flows for non‑experts.
If the person who might need to recover your funds someday:
- Is not crypto‑native
- Will already be under stress (because something happened to you)
then:
- Prefer a wallet & app combo that has a simple UI and lots of documentation. Trezor Suite, BitBoxApp, Ledger Live, that type.
- Write a short “how to recover” note in normal human language. No seed words, but clear steps and device names.
Advanced gear like Coldcard or Passport is fantastic for security, but the UX and documentation assumptions are more “enthusiast”. That can be a con for long term safe storage if heirs are involved.
5. Quick pros / cons summary of the “classic” hardware wallet idea
Using a standard hardware wallet as your main cold wallet for long term storage:
Pros
- Very strong protection against remote hacks if seed never leaves device.
- Easy to keep offline most of the time.
- Mature ecosystems like Ledger, Trezor, and others are well documented.
- Compatible with steel backups for added physical safety.
Cons
- Vendor risk: closed source firmware or corporate decisions can spook you later.
- Some devices are too complex for casual users; errors during recovery are common.
- If you over‑optimize with passphrases and hidden wallets, the main risk becomes self‑lockout.
- For some altcoins, wallet support can break or vanish over the years.
Competitors like what @nachtschatten and @sterrenkijker described each have tradeoffs. Ledger shines in asset coverage, Trezor and BitBox02 in transparency and simplicity, Bitcoin‑focused devices in hardcore security. None is “best” in a vacuum.
If I had to give a concrete direction based on what you wrote:
- If you want the least friction and you hold multiple chains, pick a mainstream hardware wallet with good software and focus 80% of your effort on backup, steel, and recovery docs.
- If most of your net worth is BTC and you are willing to read a bit, consider adding a second vendor and maybe a basic multisig for the “never touch for years” portion.
The cold wallet brand is the visible part. The part that keeps you safe long term is boring redundancy, periodic restore testing, and a recovery plan that someone other than you can follow.