Ranking — security architecture only
The safest crypto wallets, scored on architecture
This page ignores price, convenience and brand. It ranks thirteen wallets on one thing: how hard the design makes it to take your keys — and how the maker behaves when somebody finds a gap.
- 9.6/10 Top security architecture score
- US$250k Lab cost of the Tangem laser attack
- 5 mths Ledger Donjon disclosure window before publishing
- ~0% Losses caused by broken cryptography
How we score security, and what we deliberately ignore
Most "safest wallet" lists are really popularity lists with a security-sounding headline. We wanted something more specific, so the score on this page is built from five properties, each of which is either verifiable from published material or observable in how a company has actually behaved.
Key isolation. Can the signing key ever be read by an internet-connected device? This is binary and it is the largest single factor. A hardware wallet scores here; a software wallet, however well engineered, cannot.
Chip protection. Whether a dedicated secure element guards the key against physical extraction, and at what Common Criteria assurance level. EAL6+ is the current benchmark in this market. We treat this as a meaningful but secondary signal, because a certificate describes how rigorously something was evaluated rather than how strong it is in absolute terms.
Auditability. Whether the firmware is published, and whether builds are reproducible so you can confirm your device runs the published code.
Attack surface. Fewer interfaces means fewer ways in. A Bitcoin-only device that communicates by QR code has a dramatically smaller surface than a multi-chain device with Bluetooth, NFC, a browser bridge and hundreds of coin applications.
Update path and disclosure behaviour. Can the firmware be patched when something is found? Does the company publish advisories, run a bounty, and respond to researchers? A vendor that has never disclosed anything is not safer — it is quieter.
What we deliberately exclude: price, ease of use, coin support, brand recognition and how it looks. Those all matter and they are all in our main grading. They are not security.
| Rank & wallet | Security score | Key isolation | Chip | Code | Patchable |
|---|---|---|---|---|---|
| 01 Coldcard Q Coinkite (Canada) · official site | Offline | Dual secure elements | Source-available firmware | Yes | |
| 02 Keystone 3 Pro Keystone · official site | Offline | Three secure element chips | Firmware open | Yes | |
| 03 Trezor Safe 5 Trezor (SatoshiLabs) · official site | Offline | EAL6+ certified | Firmware fully open | Yes | |
| 04 BitBox02 Shift Crypto (Switzerland) · official site | Offline | Dual chip + secure element | Firmware fully open | Yes | |
| 05 Ledger Nano S Plus Ledger · official site | Offline | ST33K1M5, CC EAL6+ | Partly — SE apps closed | Yes | |
| 06 Blockstream Jade Plus Blockstream · official site | Offline | No SE — blind oracle design | Fully open, reproducible builds | Yes | |
| 07 BlueWallet BlueWallet · official site | On device | Device keystore | Fully open source | Yes | |
| 08 Trust Wallet Trust Wallet · official site | On device | Device keystore | Core libraries open | Yes | |
| 09 Exodus Exodus Movement · official site | On device | Device keystore / Secure Enclave | Mostly closed source | Yes | |
| 10 Phantom Phantom Technologies · official site | On device | Device keystore | Closed source | Yes | |
| 11 Tangem Wallet Tangem AG · official site | Offline | EAL6+ certified | App open, firmware closed | No firmware updates | |
| 12 MetaMask Consensys · official site | On device | Device keystore | Largely open source | Yes | |
| 13 KeepKey KeepKey / ShapeShift · official site | Offline | None | Open, but slow-moving | Yes |
Why the top of the table looks like that
The three highest architecture scores all belong to devices that most people should not buy first, and that is not a contradiction — it is what happens when you score security in isolation.
Coldcard Q, 9.6. Dual secure elements, Bitcoin only, and it verifies transactions on the signer itself rather than trusting what a companion app tells it. It can be operated entirely through a microSD card, so no data path to a computer is required at all. The design premise is explicit: assume the machine you plug into is already owned by somebody else. That premise produces the most rigorous consumer signing device on the market, and an interface that will lose most people inside ten minutes. Both facts are true and neither is a defect.
Keystone 3 Pro, 9.3. Three secure element chips, open firmware, and USB that only charges — every transaction moves by QR code. It gets you most of Coldcard's isolation with a phone-sized touchscreen and multi-chain support, which is a genuinely impressive trade. Its weakness here is New Zealand availability rather than anything technical.
Trezor Safe 5, 9.1. The best-balanced device on the table. EAL6+ secure element, fully open firmware, and a colour touchscreen that makes address verification something a non-technical person will actually do. If we could only recommend one device on this page to a first-time buyer, this is it — and the Safe 7 goes further with the auditable TROPIC01 chip layered alongside an Infineon Optiga EAL6+ element and a separate microcontroller.
Why Tangem scores 6.4 despite an EAL6+ chip
This is the clearest illustration on the page of why a certificate is not a score, and it deserves explaining carefully because Tangem is otherwise a likeable product with the friendliest onboarding in cold storage.
In July 2026, Ledger's research lab Ledger Donjon published a laser fault-injection attack against Tangem's cards. The researcher, Baptiste Boileau, directed a single nanosecond laser pulse at a specific region of the EAL6+ chip, evaded the platform's own fault-detection countermeasures, and corrupted one conditional check in Tangem's firmware. That was sufficient to set the card's access password to a value the attacker chose, granting control of the assets. It does not require knowing the existing password, does not require a backup card, and is not mitigated by disabling the recovery feature.
Three things make this a scoring event rather than a footnote. It affects every card in circulation. It cannot be patched, because Tangem's cards have no firmware update mechanism at all — the property that makes them tamper-resistant also makes them permanently frozen at whatever their firmware was on the day they shipped. And the disclosure was handled properly: Ledger notified Tangem on 10 February 2026 and published on 9 July 2026, roughly five months later, and Tangem published its own analysis of laser fault injection in response.
What it does not mean is that Tangem owners should panic. The attack needs physical possession of the card, an estimated US$250,000 of laboratory equipment, advanced hardware-security expertise, and it is invasive — the card shows visible damage afterwards. If your threat model is malware and phishing, your Tangem is fine. If your threat model includes a well-resourced adversary who can obtain the physical card, it is not, and the absence of a patch path means it never will be. Full detail in our Tangem review.
The lesson worth taking from this
An unpatchable device is a bet that nobody will find anything, held for the lifetime of the product. That bet has never paid off in the history of computing. When comparing devices, treat "can receive firmware updates" as a first-class security property, not a convenience feature.
The actual threat
How wallets really get emptied
If you rank loss mechanisms by frequency rather than by how interesting they are, the list looks nothing like a security spec sheet.
The owner typed the recovery phrase into something
A cloned wallet site, a "validate your wallet" form, a fake support agent in a Discord DM, a migration notice by email. At that point no hardware helps, because the master key was handed over voluntarily. This is the single largest category and it has nothing to do with which wallet you own.
A malicious approval was signed
On smart-contract chains, granting a spending allowance is a normal operation, and a malicious contract asks for an unlimited one. The wallet signed exactly what was requested. Bitcoin-only wallets are immune to this entire class simply because there is nothing to approve.
The phrase was stored digitally
A photo that synced to a cloud account, a password manager entry, a note app. The wallet was compromised weeks or years after the fact, when the cloud credential leaked from somewhere unrelated.
The address was swapped in transit
Clipboard-hijacking malware replaces a pasted address with the attacker's, matching the first and last few characters so a quick glance passes. This is the specific attack a hardware wallet's trusted display exists to defeat — provided you read the screen.
The device was tampered with before purchase
Second-hand or marketplace devices pre-initialised with a seed the seller retains. Everything about the setup looks normal. Buy only from the manufacturer or an authorised reseller, and let the device generate its own phrase in front of you.
Two habits, most of the risk
Never type the phrase. Always read the screen.
Your recovery phrase goes into the wallet device or app during setup and recovery, and nowhere else, ever. And every time you approve a transaction, read what the device is actually showing you rather than what you assume it says. Those two habits eliminate the large majority of real-world losses, regardless of which wallet you bought.
If it already happened
What "safe" cannot mean in New Zealand
There is one dimension of safety that does not exist for self-custody here, and it is worth being blunt about it. There is no regulator standing behind your wallet, no compensation scheme, and no dispute resolution process.
The Financial Markets Authority does not license wallet software or hardware, because self-custody is not a financial product. Its consumer guidance on cryptocurrencies is essentially a risk warning, and its most actionable advice is to deal with providers listed on the Financial Service Providers Register, because FSPR registration generally brings access to an independent dispute resolution scheme. That advice applies to where you buy, not where you store.
On the anti-money-laundering side, exchanges and brokers are captured by the AML/CFT Act 2009, and from 1 July 2026 the Department of Internal Affairs becomes the single supervisor, replacing the split between the Reserve Bank, the FMA and DIA. Again: relevant to platforms, irrelevant to your seed phrase.
The practical consequence is that your security posture is your protection. There is no backstop. That is not an argument against self-custody — the platforms that did have oversight still managed to lose New Zealanders roughly NZ$30 million at Cryptopia and leave NZ$6.3 million unaccounted for at Dasset — but it does mean the operational discipline described on this site is not optional extra credit.
A security posture that is genuinely good enough
One hardware wallet from an authorised source, initialised by you. Recovery phrase handwritten, twice, in two buildings, tested by a wipe-and-restore before funding. A passphrase if you hold more than about NZ$20,000, written down separately. A small phone wallet for spending. Nothing left on an exchange overnight. Sealed instructions with your will. That setup beats the vast majority of holders and costs about NZ$120 and one careful afternoon.
Security FAQ
Wallet security questions, answered plainly
What is the safest crypto wallet?
On security architecture alone, the Coldcard Q — dual secure elements, Bitcoin only, air-gapped operation, and a design that assumes your computer is already compromised. The Keystone 3 Pro is close behind with three secure elements and QR-only communication. But "safest" is only meaningful relative to a threat, and for most people the binding constraint is not chip security, it is whether they backed up a recovery phrase and whether they can resist a convincing phishing page. On that measure, the safest wallet is the one you will actually operate correctly.
Can crypto wallets be hacked?
The cryptography essentially never breaks. What breaks is everything around it. In the incident reports we read, losses come from recovery phrases typed into fake sites, malicious token approvals granted to contracts nobody read, infostealer malware harvesting keystore files, clipboard hijackers swapping destination addresses, and devices bought second-hand that were pre-loaded with someone else's seed. Genuine attacks on the hardware exist — Ledger's research lab published a laser fault-injection attack against Tangem cards in July 2026 — but they need physical possession and roughly US$250,000 of laboratory equipment.
What are the most secure crypto wallets available in New Zealand?
Weighting security architecture against what you can actually obtain here: the Trezor Safe 5 or Blockstream Jade Plus are the strongest options with a straightforward New Zealand supply route, and the Ledger Nano S Plus is the most widely stocked device with a CC EAL6+ secure element at around NZ$99. Coldcard and Keystone are both available through The Bitcoin Shop or by direct import, and both score higher on architecture if you are willing to wait.
What happens if my crypto wallet gets hacked?
Move fast and assume the key is fully compromised, not partially. Create a brand new wallet with a new recovery phrase on a clean device and move anything remaining immediately — do not simply revoke approvals and continue using the same key, because if the phrase leaked the attacker can return at any time. Record transaction hashes and timestamps, because you may need them for a police report or an insurance claim, and because a disposal you did not authorise still has tax implications you will need to explain. Report to Netsafe and the police. Realistically, on-chain transactions are not reversible.
Is an open-source wallet safer than a closed-source one?
Open source is a stronger position, but it is not a guarantee and the difference is smaller than the arguments suggest. Open firmware means independent researchers can inspect the code and, in the best cases, reproduce the build to confirm your device runs what was published. Closed firmware means you are trusting a vendor plus a certification lab. Both models have shipped good products and both have shipped bugs. If you cannot decide, choose open — it is the option you are least likely to regret and it costs you nothing.
Next in this cluster