Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errorsA suspicious email, support message, or warning does not by itself mean your Ledger wallet was compromised. The key questions are whether anyone could have seen your Secret Recovery Phrase and whether an outgoing transaction you did not authorize is confirmed on the relevant blockchain. Never share the phrase. If it may have been exposed, treat it as unsafe and move remaining assets to accounts protected by a different phrase.
First, stop the possible attack
- Do not type, photograph, send, or disclose your Secret Recovery Phrase. Ledger says it will never ask you for the phrase, and advises entering it only directly on your Ledger device. Its current phishing guidance also warns about unsolicited messages and fake support contacts.
- Do not approve a transaction on the device unless you initiated it and understand the details shown on the device screen.
- If a site or app reports an error and asks for your 24 words, stop using it. Reach support through Ledger’s official channels independently, not through links or contact details in the suspicious message.
Work out what may have been compromised
“Compromised” can mean different things. A phishing attempt, an exposed recovery phrase, an unauthorized device approval, and an incomplete app history are not the same situation.
As an Amazon Associate I earn from qualifying purchases.
| What happened | What it establishes | What to do |
|---|---|---|
| You received an unsolicited email, call, text, or support message, but did not share the phrase or approve a transaction. | It indicates an attempted lure, not by itself access to your wallet. | Do not interact with the sender or links. Check account activity as described below. |
| You entered or shared the phrase, or you are unsure whether someone saw it. | Treat the phrase as exposed. A blockchain check cannot establish that nobody copied it. | Move remaining assets to accounts controlled by a different phrase, then retire the exposed phrase. |
| You approved a transaction you did not initiate. | The approval may have authorized an action, even if the request came through a suspicious app. | Inspect the resulting transaction on the correct blockchain and act on any confirmed unauthorized transfer. |
| Ledger Wallet history is missing an entry, or a Recovery Check failed. | Neither issue alone proves theft or phrase exposure. | Check the relevant network’s records; for a failed backup check, follow the separate steps below. |
Check activity on the blockchain, not just in Ledger Wallet
- Open the account in Ledger Wallet and review its transaction list for activity you did not initiate.
- Confirm the account address and network, then look up the address or transaction using an explorer appropriate to that blockchain. Check whether an outgoing transaction is confirmed and whether its details match what you recognize.
- Compare the explorer record with Ledger Wallet. An app history gap can reflect a display or indexing issue; it is not proof of theft. Conversely, a clean app display does not rule out activity if the account is not syncing or the explorer shows a transaction.
For transactions, verify the details and addresses on the hardware device before approving them. Ledger’s transaction verification guidance explains this precaution. For Polkadot, Ledger notes that some transaction types may not appear in Ledger Wallet history and recommends checking Subscan or another appropriate chain source in its missing Polkadot transactions guidance.
If your recovery phrase may have been exposed
Assume that anyone who has the phrase can use it to access accounts derived from it. A new hardware device or a device reset does not make that phrase safe. Ledger’s recovery-phrase change instructions describe moving assets before creating a new phrase and accounts.
#1 Best Overall
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
- Enjoy Bluetooth connectivity, iOS access, and hours of battery use with this mobile-first, secure backup signer. Freedom you can depend on.
- Genuine Check: confirm your signer is authentic during setup with the Ledger Wallet app.
- Protect your signer: keep it in mint condition at all times with a bespoke Pod or Case to avoid scratches and everyday wear and tear.
- Use accounts controlled by a genuinely different recovery phrase as temporary destinations. Make sure you can access those accounts before moving funds.
- Move tokens first, then move native assets such as ETH or BNB as needed to cover network fees. Confirm recipient addresses and transaction details on the device before approving.
- After assets are secured, reset the device, set it up as a new device to generate a new phrase, and create new accounts. Do not reset first if that would remove access to accounts whose assets have not been moved.
- Stop using the exposed phrase to protect funds. If the network or asset makes the transfer steps unclear, consult Ledger’s official recovery instructions and account-specific support.
If Recovery Check fails
A failed Recovery Check is not, by itself, evidence that your coins were compromised. Ledger says a failure does not lock accounts or reset the device. First check the phrase length, spelling, word list, and word order, then retry carefully. Never send phrase words to support.
If the check continues to fail and your backup may be incorrect, Ledger’s Recovery Check troubleshooting guidance recommends securing crypto in safe accounts first, deleting emptied accounts, resetting the device, and creating a new phrase and accounts before moving assets back. Keep the old phrase backup if some accounts have not yet been moved and may still need recovery.
Rank #2
- All your digital assets in one place. You can manage thousands of crypto including Bitcoin, Ethereum, Solana, Tether and more.
- Defend your identity against hackers: secure your online accounts with passwordless, hardware backed, 2FA logins for all your favorite apps and websites.
- Connectivity: USB-C cable connection only. No Bluetooth.Compatible with the Ledger Wallet crypto app, both desktop (Windows, macOS, Linux) and mobile (Android only). Not compatible with iOS.
- Protect your digital assets with the industry's best security: keep your private keys offline in your private signer, battle-tested by the Donjon's white hat hackers, CC EAL 6+ certified Secure Element, constantly updated Ledger OS.
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
How to interpret the 2023 Ledger Connect Kit incident
Ledger’s support page about the December 14, 2023 Connect Kit exploit says malicious code affected some decentralized applications and that the integrity of Ledger hardware and Ledger Wallet was not affected. That statement concerns that specific incident; it does not determine whether an individual user approved a malicious transaction or disclosed a phrase. If you used an affected application, identify the transaction and check it on-chain. Follow the exposed-phrase steps if your phrase may also have been disclosed. See Ledger’s Connect Kit incident guidance.
Quick Recap
Best Value
- All your digital assets in one place. You can manage thousands of crypto including Bitcoin, Ethereum, Solana, Tether and more.
- Connectivity: USB-C cable connection only. No Bluetooth.Compatible with the Ledger Wallet crypto app, both desktop (Windows, macOS, Linux) and mobile (Android only). Not compatible with iOS.
- Protect your digital assets with the industry's best security: keep your private keys offline in your private signer, battle-tested by the Donjon's white hat hackers, CC EAL 6+ certified Secure Element, constantly updated Ledger OS.
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
- Choose the colors that match your style: express your personality and your crypto management mood, color code your signers, one for each use (trading, staking, HOLDing...).
Rank #4
- More than just crypto: confirm your device is authentic with Genuine Check, manage all your logins with Ledger Security Key, detect common scams with Transaction Check and more.
- Industry-defining security: battle-tested by the Donjon's white hat hackers, protected by the Secure Element, and powered by Ledger OS.
- Connect effortlessly with Ledger Wallet: pair your secure Ledger signer with the all in one Ledger Wallet crypto app to manage thousands of digital assets across multiple devices and accounts with Ledger Sync from a single, secure dashboard.
- Playful, user-friendly design: monitor the market, compare rates and Clear Sign all transactions on the secure 2.8'' anti-glare, scratch-resistant touchscreen.
- This is what security feels like: Ledger touchscreen signers all come with a private, offline, PIN-protected backup, Ledger Recovery Key, to never lose access to your assets.
Rank #3
- Simply & securely take control of your digital assets and identity with the all-in-one Ledger Wallet crypto app and Ledger Flex touchscreen signer.
- Digital asset control at your fingertips: manage 15,000+ crypto across multiple chains. Earn rewards. Top up & share with ease. Explore DeFi with confidence. Collect and showcase NFTs. Make informed choices with clarity.
- Connect effortlessly with Ledger Wallet: pair your secure Ledger signer with the all in one Ledger Wallet crypto app to manage thousands of digital assets across multiple devices and accounts with Ledger Sync from a single, secure dashboard.
- Cutting-edge design: monitor the market, compare rates, and Clear Sign transactions on the secure, high resolution, 2.8'' E Ink touchscreen.
- This is what security feels like: Ledger touchscreen signers all come with a private, offline, PIN-protected backup, Ledger Recovery Key, to never lose access to your assets.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
