Buying, storing and security · Comparison

Bitcoin wallets compared.
How to choose one for your holdings.

READ14 min·UPDATED·APPLIES TOAny country·LEVELBeginner
For new holders choosing a wallet for their balance size. Sources are listed at the bottom of the page; check their dates before acting.

Wallet choice is not one-size-fits-all. The right wallet for a beginner holding $100 is the wrong wallet for someone holding $50,000. This guide explains what to check in any wallet, then walks through the main categories (custodial exchange accounts, mobile software, desktop software, hardware signers and multisig) with example wallets whose details were checked against each project's own site or release notes.

Short answer

Pick a wallet by who holds the keys, how much it will hold, and whether the project is open, well backed up and still maintained. Exchange accounts are custodial: fine for getting started and for amounts you can afford to lose. Phone and desktop wallets put the keys in your hands but on an internet-connected device. A hardware signer keeps keys offline and is the usual step once holdings become meaningful; at larger size, a hardware signer connected to your own node, then multisig. No setup removes all risk, so match the setup to the amount and check the project's release notes and security advisories before you trust it.

On this page
  1. How to choose a Bitcoin wallet: the checklist
  2. What each check means in practice
  3. Category 1 · Custodial (exchange wallets)
  4. Category 2 · Non-custodial software (hot wallets)
  5. Category 3 · Non-custodial software (desktop)
  6. Category 4 · Hardware wallets
  7. Is the wallet still maintained? Latest releases as of 2026-09-26
  8. The progression by stack size
  9. Where to compare current options

How to choose a Bitcoin wallet: the checklist

  1. Custody model. Decide who holds the keys: an exchange (custodial), you alone (single-signature self-custody), or you plus other keys (multisig, possibly with a company holding one key).
  2. Amount and purpose. Spending money, a growing savings position and long-term cold storage call for different setups. See the progression by stack size.
  3. Platform. Phone for payments, desktop for coordinating savings and hardware signers, a dedicated device for the keys themselves.
  4. Open source and verifiable builds. Prefer published source code and a public release history; check whether the app you download can be matched to that code.
  5. Backup and recovery. Know what you must back up (seed words, passphrase, wallet descriptor for multisig) and test a recovery before sending real funds.
  6. Hardware and multisig support. If you expect to grow, confirm the software works with the signers you plan to use (PSBT, QR or microSD signing) and supports multisig.
  7. Privacy features. Connection to your own node, Tor, coin control and labels.
  8. Maintenance status. Date of the latest release, open security advisories, and whether the app is still available in your region.
  9. Bitcoin-only or multi-coin. Bitcoin-only firmware and apps carry less code, and less code means less to go wrong.
  10. Where you buy it. Buy hardware directly from the manufacturer and download software only from the project's own site or release page.

What each check means in practice

Custody model. On an exchange, your Bitcoin is an account balance: the exchange holds the keys and can freeze the account, lose the coins or get hacked. Not your keys, not your coins. With a self-custody wallet you hold the keys and carry the full responsibility for backups. Collaborative multisig services such as Unchained and Casa sit in between: you hold some of the keys and the company holds one, so it can help with recovery but cannot move funds alone[1]. For choosing an exchange as an on-ramp, see how to choose a Bitcoin exchange.

Open source is not all the same. "Open source" can mean anything from fully published code under a standard license to partly published code. Two examples as of 2026-09: Coldcard publishes its firmware under an MIT license with the "Commons Clause" condition attached, which makes it source-available rather than open source in the strict licensing sense[2]; Ledger publishes its apps and parts of its operating system but says its chip supplier's agreement prevents it from releasing the low-level secure element code[3]. Published code also helps only if the app you install was built from it. WalletScrutiny tests for that (reproducible builds) and states plainly that it does not provide a security audit[4].

Backup and recovery. Check whether the wallet uses a widely supported backup format, such as a BIP39 seed phrase, so a different wallet can restore your funds if this one disappears. Some wallets use their own format instead: Muun, for example, uses an exported "Emergency Kit" containing private keys and output descriptors[5]. For multisig, the seeds alone are not enough; you also need the wallet configuration. See seed phrase rules and the multisig deep dive.

Privacy. A light wallet has to ask a server about your addresses. Sparrow, for example, can connect to public servers, to your own Bitcoin Core, or to a private Electrum server, with Tor built in[6]. Default setups without a personal node work and put no money at risk, but public server operators can observe wallet queries. See the privacy guide.

Maintenance status. A wallet is software, and software needs fixes. Three real examples: in 2023 BlueWallet shut down the hosted Lightning node many of its users relied on, while still letting users connect their own[7]; in July 2026 Coinkite disclosed a firmware bug that weakened seed generation on several Coldcard models and told affected users to update and move funds to new seeds[8]; and app store availability can differ by country. Check the latest release date and any advisories before you set up a wallet, and again from time to time afterward.

Category 1 · Custodial (exchange wallets)

Your Bitcoin is held by the exchange. You log in with email and password. The exchange can freeze your account, lose your coins, or get hacked. Not your keys, not your coins.

What to compare between exchanges (custody and reserves, registration, fees and spreads, withdrawals to self-custody, Bitcoin-only versus altcoin platforms) is covered in how to choose a Bitcoin exchange. For wallet purposes, the key check is simple: can you withdraw to your own wallet easily, and do you test that withdrawal early?

When it's acceptable: amounts you could lose without pain; the first few weeks while you set up self-custody; the on-ramp for fiat deposits before withdrawal. When to leave: balance above ~$500, or as soon as you own a hardware wallet and have verified a test transaction.

Category 2 · Non-custodial software (hot wallets)

You hold the keys. They live on your phone or computer, which is online. Free, private, and practical for small spending amounts. The risk is device loss, theft, or malware. Examples below; details checked 2026-09-26 against each project's own pages.

PHOENIX WALLET · LIGHTNING-FOCUSED, SELF-CUSTODIAL

Built by ACINQ. Self-custodial, with a 12-word recovery phrase, on iOS and Android[9]. Phoenix uses splicing so each user has a single channel that can be resized, which lets the same balance move between on-chainon-chainA Bitcoin payment recorded directly and permanently on Bitcoin's main public ledger, settled by the network itself rather than through a faster off-network lane.Full definition and Lightning without managing channels yourself[10]. As of 2026-09-26 it is listed on the US App Store[11]; its availability in US app stores has changed before, so check your own store.

BLUEWALLET · MOBILE, ON-CHAIN FIRST

Mature open-source mobile wallet (MIT license)[12] that supports multiple wallets and watch-only wallets. Its hosted Lightning service was shut down in 2023; Lightning now means connecting your own LndHub server[7]. Good first wallet for learning how addresses, UTXOsUnspent Transaction Output (UTXO)A piece of bitcoin you received and have not yet spent, like a separate bill in a wallet. Your balance is the total of your UTXOs. Spending uses up whole UTXOs and creates new ones, usually including change sent back to you, and each UTXO carries its own history, which matters for privacy.Full definition, and fees work.

MUUN · ONE BALANCE FOR ON-CHAIN AND LIGHTNING

Beginner-friendly self-custodial wallet on iOS and Android that pays on-chain and Lightning from a single balance. Backup is an exported Emergency Kit rather than a standard seed phrase[5]. Trades some advanced control for simplicity.

Best for: Lightning payments, daily spending, amounts you'd carry in a physical wallet. Not suitable for long-term savings positions. More on Lightning in the Lightning Network guide.

Category 3 · Non-custodial software (desktop)

Full-featured wallets for managing significant holdings. You get UTXO control, coin selection, PSBT workflows with hardware devices, and (in Sparrow and Specter) the ability to connect to your own Bitcoin node.

SPARROW WALLET · FULL COIN CONTROL

Built by Craig Raw, open source (Apache 2 license), desktop. Full coin and fee control, labels on transactions, inputs and outputs, built-in Tor, single-sig and multisig. Connects to public servers, your own Bitcoin Core or a private Electrum server, and works with common hardware wallets over USB or air-gapped, with full PSBT support[6]. A common choice among holders who want full control. Setup walkthrough: Sparrow Wallet guide.

SPECTER DESKTOP · MULTISIG-FOCUSED

Built by the Specter Labs team (MIT license), designed around 2-of-3 and larger multisig setups with hardware device integration. As of 2026-09-26 the latest stable release is v2.1.11 (2026-08-09), with v2.2.0 pre-releases published in August 2026[13].

ELECTRUM · SINCE 2011

Operating since November 2011, lightweight, open source (MIT license). Supports hardware wallets, multisig and cold storage, and can be recovered from a secret phrase[14]. The interface is older than Sparrow's, but it remains a valid choice.

Best for: serious savings positions, UTXO hygiene, privacy-conscious users, multisig coordinators. Desktop-only is a feature, not a limitation.

Category 4 · Hardware wallets

Keys generated and stored on a dedicated offline device. Transactions are signed on the device; your computer or phone never sees the private keyPrivate keyA secret number that proves the right to spend bitcoin by signing transactions. Most wallets derive their private keys from a seed phrase backup. The phrase is not itself a private key, but it can regenerate them, so unless the wallet also needs a passphrase or other keys, anyone who has it can spend the coins.Full definition. This is the baseline for anyone holding meaningful amounts. Setup steps: hardware wallet setup.

Snapshot as of 2026-09-26, from each manufacturer's site and code repository. Models and features change; prices are left out because they change often.
WALLET (MODELS LISTED) BITCOIN-ONLY SOURCE CODE AIR-GAPPED SIGNING
Coldcard (Mk5, Q; older Mk4)[15]yessource-available (MIT + Commons Clause)[2]yes (microSD, NFC; QR on Q)
Trezor (Safe 3, Safe 5, Safe 7)[16]multi-coin; Bitcoin-only firmware offeredopen (GPLv3 / LGPLv3)[17]no (USB-C; Safe 7 adds Bluetooth)
Ledger (Nano S Plus, Nano X, Nano Gen5, Flex, Stax)[18]noapps open; secure element OS closed[3]no (USB; Bluetooth and NFC on newer models)
Foundation Passport Core[19]yesopen (GPLv3 copyleft)[20]yes (QR)
BitBox02 / BitBox02 Nova[21]Bitcoin-only edition availableopen (Apache 2)no
SeedSigner (DIY)[22]yesopen (MIT)yes (QR, stateless)

Foundation also sells a newer device, Passport Prime, which adds encrypted Bluetooth for setup and updates through its companion app[19]; check its documentation for how signing works before treating it as air-gapped. SeedSigner is built from off-the-shelf parts that the project says cost less than $50, keeps the seed only in memory while powered, and has no WiFi or Bluetooth hardware[22].

SECURITY ADVISORY · COLDCARD · JULY 2026

On 2026-07-30 Coinkite disclosed a firmware bug that weakened seed generation. Affected: Mk4 and Mk5 standard firmware before 5.6.0, Q standard firmware before 1.5.0Q, Edge firmware before 6.6.0, and Mk2/Mk3 on 4.0.1 to 4.1.9. Coinkite's guidance is to update the firmware first, then generate a new seed and move funds to it; seeds made with 50 or more private dice rolls are not at risk from this issue alone[8]. If you own one, read the advisory itself rather than this summary.

Ledger context: the company's June 2020 e-commerce data breach exposed about 1 million customer email addresses; a database later dumped publicly contained about 272,000 records with names, postal addresses and phone numbers[23]. Ledger says the breach had no impact on its hardware wallets or customer funds[23], but many customers moved away from Ledger on principle. Ledger Recover, announced in 2023, is an optional paid service in which the device encrypts the seed and splits it into three fragments held by Ledger, Coincover and EscrowTech, with identity verification required to recover[24]. It showed that the firmware can export an encrypted copy of the seed with the user's approval, which reopened the debate about closed firmware.

Air-gapped models (Coldcard over microSD, Passport Core, SeedSigner) never need a cable to an internet-capable device. PSBTs travel via SD card or QR code. This eliminates an entire class of attack surface.

Is the wallet still maintained? Latest releases as of 2026-09-26

A recent release does not prove a wallet is safe, and an old one does not prove it is abandoned, but a long silence is worth a closer look. This table is a dated snapshot taken from each project's public release page; follow the links for the current state.

Snapshot as of 2026-09-26. Not updated automatically.
WALLET LATEST RELEASE SEEN CHECK CURRENT STATUS
Sparrow2.5.5 · 2026-09-17GitHub releases
Electrum4.8.2 · tagged 2026-09-11electrum.org download
Specter Desktopv2.1.11 · 2026-08-09 (2.2.0 pre-releases after)GitHub releases
BlueWallet8.0.1 · 2026-07-21GitHub releases
Phoenix (Android)2.8.2 · 2026-09-08GitHub releases
Muun55.11 · source published 2026-08-27GitHub tags
Coldcard firmwaresee change log (advisory July 2026)Coldcard change log
BitBox02 firmware9.27.1 · 2026-08-31GitHub releases
Passport Core firmware2.3.11 · 2025-12-12GitHub releases
SeedSigner0.8.7 · 2026-07-08GitHub releases

Trezor and Ledger publish firmware and model information on their own sites: Trezor model comparison and Ledger model comparison.

The progression by stack size

The dollar bands are a rough guide, not rules. What matters is the step, not the exact threshold: each one closes a weak point the previous setup leaves open.

UNDER $500 · A PHONE WALLET SUCH AS PHOENIX OR BLUEWALLET

Mobile. Free. Lightning-capable in Phoenix's case. The amount is small enough that phone loss is tolerable; the goal is learning and practical spending.

$500–$5,000 · HARDWARE WALLET + SPARROW

A Bitcoin-only hardware signer on current firmware, keys stored offline, Sparrow on desktop for coordination. Test recovery before transferring real funds.

$5,000–$50,000 · HARDWARE + YOUR OWN NODE

Add a Bitcoin node (Start9, Umbrel, or bare Bitcoin Core). Sparrow connects to your node via Tor. Your wallet queries no longer go to anyone else's servers. See running a node.

ABOVE $50,000 · MULTISIG

2-of-3 multisig eliminates single points of failure. Options: Sparrow for a do-it-yourself setup, or a collaborative custody service such as Unchained or Casa for guided setup, where the company holds one key[1]. See multisig deep dive.

Which wallet fits which stack size?
  1. Under $500Phone walletYou hold the keys
  2. $500–$5,000Hardware + SparrowBaseline: keys stay offline
  3. $5,000–$50,000Hardware + own nodeTransactions no longer leak
  4. Above $50,0002-of-3 multisigNo single point of failure
Move one step up every time your holdings grow enough to notice.
Each step closes one weak point as the stack grows: a phone wallet puts keys in your hands instead of an exchange's, and from $500 a hardware wallet generates and stores keys on an offline device. A personal node stops transactions leaking to anyone's servers, and 2-of-3 multisig eliminates single points of failure.
A MATURE SETUP

A typical mature setup at a meaningful stack: a Bitcoin-only hardware signer on current firmware generating and signing, Sparrow Wallet on desktop as the coordinator, connected to a self-hosted Bitcoin node (Start9, Umbrel, or bare Bitcoin Core) over Tor. Every transaction broadcasts through your own node. No public Electrum server or third-party wallet backend sees transactions before they hit the P2P network. Default Sparrow without a personal node works fine and no money is at risk, but public Electrum server operators can observe wallet queries. Running a personal node closes that privacy gap. Setup usually takes an afternoon; after that, the node and the signer still need occasional software updates.

Where to compare current options

No list stays current, including this one. These resources were opened and checked on 2026-09-26. None of them is complete, and each has its own point of view.

BITCOIN.ORG · CHOOSE YOUR WALLET · COMMUNITY PROJECT

bitcoin.org/en/choose-your-wallet filters wallets by platform and rates them on control, validation, transparency, environment, privacy and fees. Bitcoin.org describes itself as an independent open-source project and says it is not Bitcoin's official website[25]. The wallet page shows no date, no statement of how listings are chosen, and no advertising or affiliate disclosure.

WALLETSCRUTINY · SOURCE CODE AND BUILD CHECKS · NON-PROFIT

walletscrutiny.com/methodology explains how it checks whether a wallet's source code is public, whether released apps can be reproduced from that code, and who controls the keys. Its About page describes it as a small non-profit team, lists Spiral and the Human Rights Foundation as sponsors, and accepts donations; the methodology page says it does not provide a security audit[4]. Its footer showed "Last updated Sep 25, 2026" when checked. Use it for the open-source check, not as a recommendation list.

THE BITCOIN HOLE · HARDWARE WALLET MATRIX · COMMERCIAL, USES AFFILIATE LINKS

thebitcoinhole.com/hardware-wallets compares dozens of hardware wallets side by side on secure element, air-gap method, connectivity, firmware openness, backup options and multisig support. The page header says it is an Amazon Associate and that its buy buttons go to official manufacturer sites; its About page says some product links are affiliate links, and the manufacturer buy links checked on 2026-09-26 carried affiliate or referral codes. Its footer states that brands do not pay for placement[26]. The page says "Updated for 2026" but gives no date for individual entries. Useful for specs; confirm them with the manufacturer.

Disclaimer: The Bitcoin Hole makes money from some of its links. Its About page says some product links are affiliate links that pay it a commission if you buy through them, and its comparison page says it earns from qualifying Amazon purchases. It says brands cannot pay for placement and that commissions do not affect its comparisons; fiatisfake.org has not verified that. fiatisfake.org has no relationship with The Bitcoin Hole or any wallet maker and earns nothing if you click through or buy. To buy without a referral code, type the manufacturer's address yourself instead of using a buy button.

JAMESON LOPP · RECOMMENDED WALLETS · INDIVIDUAL'S CURATED LIST

lopp.net recommended wallets is one well-known Bitcoin developer's curated list by category, with links to further comparisons[27]. It reflects the author's own views and shows no last-updated date or affiliate disclosure.

FIRST-PARTY · FINAL VERIFICATION

Before you install or buy, check the project's own release page or the manufacturer's site: the release pages linked in the maintenance table above, plus Sparrow docs, Coldcard docs, Foundation docs, Trezor and Ledger. Download software only from those pages, and buy hardware directly from the manufacturer.

Features and terms change. Use these resources to compare options, then confirm the current version, fees, supported devices, and security advisories directly with the project or manufacturer.

KEY TAKEAWAY

The right wallet is the one matched to your stack size and threat model. Every wallet beyond custodial is better than staying on an exchange long-term. The progression from phone → hardware → hardware-plus-node → multisig is risk management, not snobbery. You do not need the whole stack on day one. You do need to move one step up every time your holdings grow enough to notice, and to keep checking that the wallets you rely on are still maintained.

Where to go from here

Do next

Hardware Wallets

Pick and set up a hardware wallet, then test recovery before trusting it with real money.

Read next

Bitcoin Custody Levels

Five levels of custody, from exchange to multisig to full sovereignty.

Explore further

Sources

Bracketed numbers in the text link to these sources. Figures, rates and rules change: check each source’s date before acting on it.

  1. Collaborative multisig providers: Unchained ("collaborative multisig custody") · unchained.com; Casa (multi-key vaults with paid memberships) · casa.io. Named as examples, not endorsements; checked 2026-09-26. ↩
  2. Coldcard firmware license (MIT with "Commons Clause" License Condition v1.0) · github.com/Coldcard/firmware. ↩
  3. Ledger Academy, "Is Ledger open source?" (page shows update 2025-11-19) · ledger.com. States the chip supplier agreement prevents release of low-level secure element code. ↩
  4. WalletScrutiny, methodology and About pages (About page: non-profit team, sponsored by Spiral and Human Rights Foundation; methodology: does not provide a security audit) · walletscrutiny.com/methodology · walletscrutiny.com/about. Checked 2026-09-26. ↩
  5. Muun wallet site (self-custodial, single balance for on-chain and Lightning, Emergency Kit backup) · muun.com · source github.com/muun/apollo. ↩
  6. Sparrow Wallet, feature list and documentation · sparrowwallet.com · sparrowwallet.com/docs. Checked 2026-09-26. ↩
  7. BlueWallet, "Sunsetting Lndhub.io" (2023-02-23) · bluewallet.io. Hosted node shut down 2023-05-31; users can still connect their own LndHub. ↩
  8. Coinkite, COLDCARD seed-generation security advisory (posted 2026-07-30, updated 2026-08-01) · blog.coinkite.com · firmware change log. ↩
  9. ACINQ, Phoenix wallet · phoenix.acinq.co · github.com/ACINQ/phoenix (README: self-custodial, 12-word recovery phrase, iOS and Android). ↩
  10. ACINQ, "Phoenix splicing update" (2023-07-11, updated 2023-12-15) · acinq.co. ↩
  11. Apple App Store (US), Phoenix Wallet listing · apps.apple.com. Listed as of 2026-09-26. ↩
  12. BlueWallet releases (MIT license) · github.com/BlueWallet/BlueWallet. ↩
  13. Specter Desktop releases (MIT license) · github.com/cryptoadvance/specter-desktop. ↩
  14. Electrum project site (since November 2011; MIT license; hardware wallet, multisig and cold storage support) · electrum.org. ↩
  15. Coinkite, COLDCARD product pages and documentation (models Mk5 and Q listed; Bitcoin-only; microSD, NFC and QR on Q) · coldcard.com · coldcard.com/docs. Checked 2026-09-26. ↩
  16. Trezor, model comparison (Safe 3, Safe 5, Safe 7; Bitcoin-only firmware editions; Safe 7 Bluetooth) · trezor.io/compare. Checked 2026-09-26. ↩
  17. Trezor firmware repository license file (GPLv3 and LGPLv3 by component) · github.com/trezor/trezor-firmware. ↩
  18. Ledger, hardware wallet comparison (models and connectivity) · shop.ledger.com. Checked 2026-09-26. ↩
  19. Foundation, Passport documentation and product site (Passport Core; Passport Prime with encrypted Bluetooth) · docs.foundation.xyz (formerly docs.foundationdevices.com) · foundation.xyz. Checked 2026-09-26. ↩
  20. Foundation, Passport firmware repository (QR air-gap via UR standard; GPLv3 copyleft) · github.com/Foundation-Devices/passport2. ↩
  21. BitBox02 firmware releases (separate Bitcoin-only and multi-coin builds for BitBox02 and BitBox02 Nova; Apache 2 license) · github.com/BitBoxSwiss/bitbox02-firmware. ↩
  22. SeedSigner project site and README (stateless, QR-only, no WiFi or Bluetooth, parts under $50 per the project) · seedsigner.com · github.com/SeedSigner/seedsigner. ↩
  23. Ledger. "Message by Ledger's CEO: Update on the July data breach" (2020-12-21) · ledger.com. About 1 million email addresses stolen; a later public dump held about 272,000 detailed records; Ledger states hardware wallets and funds were not affected. ↩
  24. Ledger Academy, "What is Ledger Recover?" (published 2023-05-18, page shows update 2026-04-09) · ledger.com. ↩
  25. Bitcoin.org, "Choose your wallet" and "About bitcoin.org" · choose-your-wallet · about-us. ↩
  26. The Bitcoin Hole, hardware wallet comparison and About page (commercial site; comparison page header discloses Amazon Associate status and says buy buttons go to official sites; About page says some product links are affiliate links; manufacturer buy links carried affiliate or referral codes) · thebitcoinhole.com/hardware-wallets · thebitcoinhole.com/about. Checked 2026-09-26. ↩
  27. Jameson Lopp, Bitcoin information resources and recommended wallets · lopp.net · recommended wallets. ↩

Last updated . Not financial advice. Not a product endorsement. Research before buying any hardware device and always buy direct from the manufacturer. Disclosures · How pages are reviewed

Subscribe via RSS for new articles.