Self-custody wallets
Ledger, Trezor, Tangem and Keystone hardware wallets, plus the software wallets our guides refer to. We check Solana and EVM support, how each works with Phantom and MetaMask, blind signing, code openness and the secure element. Every fact comes from the maker's official pages.
Hardware wallets
The private key stays in the device and you approve every transaction on it physically. You keep using Phantom, Solflare or MetaMask as usual; only the signature goes through the device.
- Yes
- No
- Not documented
| Device | Solana | EVM | With wallet | Secure element and code | Screen, notes, sources |
|---|---|---|---|---|---|
| Keystone 3 ProQR · microSDOfficial shop | Through Solflare (extension, iOS, Android), Backpack and Jupiter Wallet (extensions) and the Keystone Nexus app. | MetaMask (extension, iOS, Android) and Rabby (extension). |
| Three secure element chips (models not named on the product page)Open source Yes, per Keystone: “100% open source”, hardware and software code on GitHub. | Screen: 4" colour touchscreen, fingerprint reader. Air-gapped: transactions move by QR code or microSD card, with no data cable. USB is for charging and updates. |
| Ledger FlexUSB-C · Bluetooth · NFCOfficial shop | Solana app on the device, in Ledger Wallet and in third-party wallets. Some transactions need blind signing enabled in the Solana app. | The Ethereum app covers EVM chains, Base included. Works with MetaMask, Rabby and Phantom. |
| CC EAL6+Partly Partly. The Ledger Wallet app is MIT-licensed, and the on-device apps and SDK are public. The operating system is only partly reviewable, and Ledger does not publish the low-level secure element code because of its agreement with the chip maker. | Screen: 2.8" E Ink touchscreen. Battery up to 10 hours. The larger screen makes the address and amount easier to read before signing. Sources (12) · verified on
|
| Ledger Nano S PlusUSB-COfficial shop | Solana app on the device, in Ledger Wallet and in third-party wallets. Some transactions need blind signing enabled in the Solana app. | The Ethereum app covers EVM chains, Base included. Works with MetaMask, Rabby and Phantom. |
| ST33K1M5, CC EAL6+Partly Partly. The Ledger Wallet app is MIT-licensed, and the on-device apps and SDK are public. The operating system is only partly reviewable, and Ledger does not publish the low-level secure element code because of its agreement with the chip maker. | Screen: 1.1" OLED, mono, buttons. No battery. Cable only, no battery or Bluetooth. For Phantom on a phone you need a model with Bluetooth. Sources (12) · verified on
|
| Ledger Nano XUSB-C · BluetoothOfficial shop | Solana app on the device, in Ledger Wallet and in third-party wallets. Some transactions need blind signing enabled in the Solana app. | The Ethereum app covers EVM chains, Base included. Works with MetaMask, Rabby and Phantom. |
| CC EAL5+Partly Partly. The Ledger Wallet app is MIT-licensed, and the on-device apps and SDK are public. The operating system is only partly reviewable, and Ledger does not publish the low-level secure element code because of its agreement with the chip maker. | Screen: 1.1" OLED, mono, buttons. Battery up to 5 hours. The only Ledger with EAL5+ rather than EAL6+ in Ledger's comparison table. Sources (12) · verified on
|
| Ledger StaxUSB-C · Bluetooth · NFC · QiOfficial shop | Solana app on the device, in Ledger Wallet and in third-party wallets. Some transactions need blind signing enabled in the Solana app. | The Ethereum app covers EVM chains, Base included. Works with MetaMask, Rabby and Phantom. |
| CC EAL6+Partly Partly. The Ledger Wallet app is MIT-licensed, and the on-device apps and SDK are public. The operating system is only partly reviewable, and Ledger does not publish the low-level secure element code because of its agreement with the chip maker. | Screen: 3.7" curved E Ink touchscreen. Battery up to 10 hours. Qi wireless charging. Phantom lists the newer Ledger Nano Gen5 as unsupported. Sources (12) · verified on
|
| Tangem WalletNFCOfficial shop | In the Tangem app. Solana dApps (e.g. Jupiter, Raydium, pump.fun) connect via WalletConnect by scanning a QR code. | In the Tangem app; EVM dApps via WalletConnect, not as a hardware wallet inside MetaMask. |
| Samsung S3D350A, CC EAL6+Partly Partly. The Tangem app for iOS and Android is open source. The card firmware is factory-installed and cannot be updated; audited by Kudelski Security (2018), hardware assessed by Riscure (2023). | Screen: None. A card with no screen: you see transaction details only in the phone app. Seedless by default: 2 or 3 cards share one key and act as the backup. An existing seed phrase can optionally be imported. Sources (8) · verified on
|
| Trezor Safe 3USB-COfficial shop | Native in Trezor Suite (desktop and web): SOL, SPL tokens and staking. For Solana, Trezor lists Backpack among third-party wallets. | Ethereum and EVM chains in Trezor Suite; MetaMask and Rabby as third-party wallets. |
| Certified EAL6+ chipOpen source Yes. Trezor describes its software and design as open source. | Screen: 0.96" OLED, mono, two buttons. On iOS, Trezor Suite cannot send, swap or set up the device. Sources (9) · verified on
|
| Trezor Safe 5USB-COfficial shop | Native in Trezor Suite (desktop and web): SOL, SPL tokens and staking. For Solana, Trezor lists Backpack among third-party wallets. | Ethereum and EVM chains in Trezor Suite; MetaMask and Rabby as third-party wallets. |
| NDA-free EAL6+ secure elementOpen source Yes. Trezor describes its software and design as open source. | Screen: 1.54" colour touchscreen, Gorilla Glass 3. On iOS, Trezor Suite cannot send, swap or set up the device. Sources (9) · verified on
|
| Trezor Safe 7USB-C · Bluetooth · Qi2Official shop | Native in Trezor Suite (desktop and web): SOL, SPL tokens and staking. For Solana, Trezor lists Backpack among third-party wallets. | Ethereum and EVM chains in Trezor Suite; MetaMask and Rabby as third-party wallets. |
| Two secure elements: TROPIC01 (auditable) and Optiga; EAL6+Open source Yes: the firmware and Bluetooth encryption are open source, and the TROPIC01 chip is auditable. | Screen: 2.5" colour touchscreen, Gorilla Glass 3. Bluetooth can be turned off in settings; USB and Bluetooth links are encrypted with the Trezor Host Protocol. Sources (9) · verified on
|
We do not list prices: the official shops show them per country and load them only in the browser, so we could not record a PLN or EUR price anyone could check. Follow “Official shop” for the current price.
Blind signing on Solana: enabling it on a Ledger
Some transactions, especially in DeFi apps, are too complex for a Ledger to display in readable form. Phantom then reports an error until you enable blind signing in that network's app on the device. The device signs without showing the details, so the wallet preview is your only view of what you sign.
Phantom advises enabling blind signing only for the Ledger apps you actually use.
- Solana: open the Solana app on your Ledger › Settings › Blind signing › Enable blind signing › Enabled.
- Ethereum / EVM: open the Ethereum app › Settings › Blind signing › Enable transaction blind signing › Enabled.
- Close Ledger Wallet before connecting the device to Phantom; the Solana and Ethereum apps must be up to date.
Sources: Phantom Help: use a Ledger with the Phantom extension, Ledger Support: allowing blind signing in the Solana (SOL) app, Ledger Support: enable blind signing in the Ethereum (ETH) app.
Software wallets
The wallets our guides and swap refer to. All are self-custody: you hold the keys and sign every transaction yourself.
| Wallet | Chains | Platforms | Code | Hardware wallets | Security and sources |
|---|---|---|---|---|---|
| BackpackOfficial site | Solana, Ethereum, Base, Arbitrum, Optimism, Polygon, Sonic |
Browser extension, iOS and Android. | Not documented The public coral-xyz/backpack repository (GPL-3.0) has a single commit and warns the code is not production-ready. It does not confirm this is the current app's code. | Ledger, Trezor and Keystone. | Multisig, and NFT collection locking that rejects transactions touching a locked NFT (select projects). The docs do not describe simulation or pre-signing warnings. |
| MetaMaskOfficial site | Ethereum, Base, Solana, Bitcoin Plus other EVM chains. A multichain account holds one EVM, one Solana and one Bitcoin address. |
Extension for Firefox, Chrome and Chromium-based browsers, plus the mobile app. | Partly The code is public, but the ConsenSys licence allows non-commercial use only. It is source-available, not an open source licence. | Extension: Ledger, Trezor, Keystone, Lattice, OneKey and others. Mobile: Ledger, Keystone, NGRAVE ZERO. Hardware accounts are EVM only. | Security alerts (Blockaid among others) and simulated balance changes before signing, on by default in the extension and app. |
| PhantomOfficial site | Solana, Ethereum, Base, Polygon, BNB Chain, HyperEVM, Robinhood Chain, Arc, Bitcoin |
Officially Chrome, iOS and Android. Brave, Edge and Opera work without guarantees; the Firefox extension no longer gets updates. | Closed source No. The app's code is not public; only developer SDKs are on GitHub. | Ledger: Nano S Plus, Flex, Stax in the extension; Nano X, Flex, Stax in the app (Bluetooth). Trezor and Tangem unsupported. | Transaction previews that flag suspicious activity before you approve. A blocklist of malicious domains. A warning when a transaction's outcome cannot be predicted. Hiding and burning spam. Sources (7) · verified on |
| RabbyOfficial site | Ethereum, Base Over 90 EVM chains, EVM only. Rabby states it does not support Solana, Bitcoin or Tron. |
Browser extension and a mobile app for iOS and Android. | Open source Yes. The extension and mobile app code is on GitHub. | Extension: 11 devices, including Ledger, Trezor, Keystone, GridPlus, OneKey and BitBox02. Mobile: Ledger and Trezor over Bluetooth, Keystone, OneKey. | Simulation of every transaction before signing, risk alerts, warnings about risky approvals and batch revoke. |
| SolflareOfficial site | Solana |
Extension for Chrome, Brave, Edge, Firefox, Opera and Arc, a web app, and iOS, Android and Solana Saga. | Not documented Solflare's docs do not describe the code's status. | Ledger, Keystone and its own Solflare Shield. | Pre-signing transaction review (Solflare Guards), a scam site blocklist, warnings on token delegation approvals and biometric lock. Sources (2) · verified on |
Which wallet to choose
- You trade Solana memecoins in Phantom
- Keep only your trading amount in Phantom and the rest on a hardware wallet. Phantom supports only Ledger: Nano S Plus, Flex and Stax in the extension, Nano X, Flex and Stax on phones. Phantom does not support Trezor or Tangem.
- You hold SOL and tokens long term
- Every device in the table supports Solana. Trezor has Solana with SPL tokens and staking right in Trezor Suite, Ledger in Ledger Wallet. If public code matters to you, Trezor and Keystone publish their firmware; Ledger publishes only part of it.
- You mostly use Base and other EVM chains
- MetaMask and Rabby work with Ledger, Trezor and Keystone. Note that MetaMask uses a hardware wallet for EVM accounts only, and Rabby does not support Solana at all.
- You want to use only your phone
- Ledger Nano X, Flex and Stax connect to Phantom over Bluetooth. Keystone 3 Pro passes transactions by QR code to Solflare or MetaMask on a phone. Tangem works over NFC in its own app and connects to Solana dApps through WalletConnect; the card has no screen, so you read the transaction only on the phone.
- You want no cable and no radio
- Keystone 3 Pro is air-gapped: data moves only by QR code or microSD card. Phantom does not list it, though: on Solana you use Solflare, Backpack or Jupiter Wallet.
Security checklist
- Seed phrase offline only
Write it on paper or metal. No photos, no cloud, and never type it into a website. Phantom Support states it will never ask for your recovery phrase; no honest company will. More in our guide A memecoin wallet setup. Source: Phantom Help: how your wallet is secured.
- A device with no ready-made seed phrase
Ledger never ships a device with a recovery phrase or PIN already set, and Trezor ships devices without firmware installed. If the box holds a card with words already written on it, do not use the device. Sources: Ledger Academy: best practices to securely buy your Ledger signer, Trezor Support: is my device safe to use?.
- Address poisoning
A scammer sends a tiny transaction from an address that looks like yours or like one you often pay. Copy the address from the wallet’s Receive screen, not from history, and compare the middle characters too. On a hardware wallet, check the address on the device screen. See Fake tokens and address poisoning. Source: MetaMask Support: address poisoning scams.
- Approvals and revoke
On EVM chains a token spending approval stays active until you revoke it. Review approvals and revoke the ones you no longer need; Rabby offers batch revoke. On Solana, Solflare warns about token delegation before you sign. A hardware wallet does not protect you from an approval you sign yourself. Sources: Rabby Support: what are approvals and why revoke them?, Rabby Support: how to revoke approvals, Solflare: security features.
- Drainer sites
Open sites from a bookmark, not from an ad, a DM or a reply under a post. Connecting a wallet should never require a transfer or an approval. If Phantom shows “This dApp could be malicious”, stop. Install wallets only from the official site or app store: fake download pages circulate in search results. Red flags list: Memecoin red flags. Source: Phantom Docs: domain and transaction warnings.
- Blind signing only when needed
With blind signing the device cannot show exactly what you sign, so your last check is the wallet preview and the site’s domain. Enable it only in the apps you use. Simulation in MetaMask or Rabby shows the expected balance changes. Sources: Phantom Help: use a Ledger with the Phantom extension, MetaMask Support: transaction simulations.
Where to buy safely
Buy only from the maker's official shop or an authorised reseller the maker itself lists. Marketplaces and auctions carry used or opened devices, or ones with a planted seed phrase card. Such a device can look new. Ledger checks authenticity cryptographically (Genuine Check in Ledger Wallet), and Trezor Suite accepts only firmware signed by SatoshiLabs.
Sources: Ledger Academy: best practices to securely buy your Ledger signer, Trezor Support: is my device safe to use?.
How we built this comparison
- Facts come only from the makers' pages: product pages, help centres, docs and repositories. We count a wallet–device pairing when either side documents it. The one exception is Phantom's code status, where we also cite Walletbeat.
- When no official source documents something we write “Not documented”, not “Yes” or “No”.
- We give no scores and build no ranking. The order is alphabetical. A referral link does not change the order, the description or whether a wallet is listed.
- Hardware support in wallets changes with updates. Before moving a large amount, send a small test transaction.
Buying your first crypto? See MiCA-authorised exchanges and memecoin terminals, and before your first trade the first purchase guide.
Our referral link rules are set out on How we make money. Found an error? Write to kontakt@memecoiny.pl.