Ledger App: Dividing the Work Between Software and Device
Using the Ledger app for safer crypto storage works only if one condition holds: your 24-word recovery phrase is written on paper or stamped into metal and never photographed, typed into a website or kept in a cloud folder. The device, its PIN and its screen add a second layer, but they cannot rescue a phrase that has already leaked. This guide covers how storage is split between the device and Ledger Live, how to protect your backup, how the options compare and how to check your setup before you move value.
How the Ledger App and Your Device Divide the Work
Ledger Live is the free companion app for Ledger hardware wallets, available on desktop and mobile. The device keeps the private keys and signs only after you approve on its screen. Ledger Live prepares the transaction and sends it on.
The Secure Element is not ordinary memory
Private keys are generated and stored on the device’s Secure Element and stay offline. Memory on a phone or laptop can be read by any program that gains the right access, which is why software wallets depend on a clean computer. The computer only ever sees public addresses and finished signatures.
On-device confirmation defeats a tampered computer
The computer may already be infected, so you cannot fully trust what it shows. The device screen states the destination and the amount, and the device signs only what you approve there. A swapped address is normally caught at this last step, before the transfer is sent.
The PIN protects the device, the phrase protects the funds
The PIN guards the device itself against someone who holds it. The recovery phrase is what rebuilds your accounts on a replacement device. A stolen device without the PIN is of little use, while a copied phrase gives access to everything. Treat the phrase as the real secret.
Who Benefits from Dedicated Hardware and Who Can Use Software
Choose a hardware wallet when the amount at risk would change your plans if it disappeared, when you hold for long periods or when someone else needs to be able to recover the assets after you. A phone wallet can cover small, frequent amounts. There is no fixed amount at which hardware becomes necessary, because the threshold is personal.
Long-term holdings
Savings that you rarely move gain the most from keeping keys offline. A device kept in a safe place meets a networked computer only when you sign.
Active use
If you trade often, you may keep a small working balance in a more convenient place and the main holding on your Ledger. Refill the working balance from your Ledger, rather than growing it.
Recovery planning
A device is useless to a family member who does not know that the recovery phrase exists. Writing the words down is half of the job. The other half is making sure that a trusted person knows where the backup is and how restoring works, without sharing the words over a message or a call.
Ledger Devices and Other Custody Routes Compared
Current Ledger models are Nano S Plus, Nano X, Ledger Flex and Ledger Stax. The original Nano S is discontinued, although existing devices still work. All of them keep keys on a Secure Element. Check ledger.com for current model details.
| Route | Key location | Setup effort | Main limit |
|---|---|---|---|
| Ledger device with USB | Secure Element on the device | Install Ledger Live, set PIN, write down phrase | You are responsible for the phrase |
| Nano X, which also supports Bluetooth | Secure Element on the device | Same, plus pairing with the mobile app | Wireless link you should use only when needed |
| Third-party wallet connected to a Ledger | Still on the device | Extra review of another program | Another party in your trust path |
| Exchange account | Held by the company | Low: identity checks and a deposit | Withdrawal holds and company risk |
| Phone software wallet | On the phone | Low: install and write down words | Malware or a lost unlocked phone |
A hardware wallet fits long-term storage. An exchange fits trading, but it is not self-custody. A phone wallet suits spending money and not much more.
Connection is not the same as security
Desktop connects to the device by USB. Bluetooth is used only between a Nano X (and, where Ledger supports it, newer devices) and the mobile app. Whichever link you use, the keys stay on the device and each transaction needs your approval there.
Exchanges and hot wallets leave the secret elsewhere
An exchange holds the keys, so a freeze or a breach becomes your problem even though you never owned a device. A phone wallet is closer to self-custody, but its keys sit in memory that malicious programs may reach. Both are quick, and both suit amounts you could afford to lose.
Where Losses Come From
Real losses rarely involve a broken device. They cluster around a recovery phrase typed into a phishing page, a fake app installed from a search advertisement, an address swapped on the clipboard and a backup kept in a photo library.
Pages that ask for the recovery phrase
Ledger Live will never ask you to enter your 24-word recovery phrase. No legitimate procedure needs the words anywhere except the device itself, and the device asks only when you restore. A website, a chat or a caller asking for them is running the attack right then. Once the phrase is exposed, nobody can reverse the loss.
Clipboard swapping and unread approvals
Malware that rewrites a copied address defeats everything except a direct comparison between the device screen and what you meant. Read the address and amount on the device before you confirm.
Second-hand and resealed devices
A device from an unknown seller may arrive with a phrase already recorded by someone else. Buy from ledger.com, create the phrase yourself on the device and refuse any words that come with the packaging. A device that arrives already set up should not be trusted.
Checking Your Storage Setup Before Moving Funds
Run this list before your first deposit, not after. You need the device, a cable or a charged phone, paper or a metal plate and the ledger.com site.
Step 1: Inspect the box and the device
Check the packaging and the device for signs of tampering before you connect anything. If something looks wrong, contact Ledger Support through ledger.com.
Step 2: Install Ledger Live from the official source
Type ledger.com yourself and download the version for Windows, macOS or Linux, or use the Apple App Store or Google Play on a phone. The macOS version is not in the Mac App Store.
Step 3: Set the PIN and create the phrase on the device
Choose a PIN on the device. The device then shows your 24-word recovery phrase on its own screen. Do not pick words yourself and do not accept a phrase from anyone else.
Step 4: Write the phrase offline
Write the words on paper or stamp them into metal, in the order shown, and keep them away from cameras and cloud folders. These words are the only thing that restores your accounts if the device is lost or destroyed.
Step 5: Send a small test transfer
Send a small amount to your own address, and read the destination and amount on the device before you approve. This costs one network fee and exposes mistakes while the sum at risk is small.
What Is Still Optional or Changing
Supported coins, firmware and services change with each release. Details are on ledger.com.
Firmware updates
Firmware updates are installed through Ledger Live in My Ledger, following the prompts on the screen and on the device. They are never a separate download. Do not disconnect the device during an update.
Ledger Recover
Ledger Recover is an optional paid subscription service. It creates an encrypted, fragmented backup of the recovery phrase held by independent providers, and it requires identity verification. It changes who holds pieces of your backup, so read the details on ledger.com before deciding. Your written phrase remains your main backup.
No wallet data backup file
There is no backup file from Ledger Live that protects your funds. Your recovery phrase is what matters.
Frequently Asked Questions
Is Ledger Live safe to use on a computer that might have malware?
Ledger Live does not hold your private keys, because they stay on the device. Malware can still change a recipient address shown on the computer, so compare the address and amount on the device screen with what you expected before you approve. If they differ, stop. Download Ledger Live only from ledger.com and use a computer you trust.
What happens if I forget my Ledger PIN?
You cannot open the device without the PIN, and Ledger Live cannot recover it for you. If you have your 24-word recovery phrase, you can restore your wallet on the device and set a new PIN. Without the PIN and without the phrase, access is permanently lost. Restoring is done on the device itself.
Can I use Ledger Live without my Ledger device?
You can open the app, but you cannot send crypto, add new accounts, install apps or update firmware without the device. If the device is lost, you need a replacement Ledger and your recovery phrase to restore access. If you only lost a phone or computer, install Ledger Live again and connect the same device.
Why do I need to verify addresses on the device screen?
The app runs on a computer or phone that can be infected, while the device shows what it will actually sign. Checking the address and amount there blocks address-swapping malware and clipboard attacks.
If someone steals my phone and knows my Ledger Live password lock, can they take my crypto?
They could open the app and see balances and addresses, but the app does not hold the private keys needed to sign a transfer. Those keys remain on the Ledger device. Keep the device and your recovery phrase in separate, private places, and never store the phrase in photos, chats, e-mail or the cloud.