Ledger Live, the app that drives a Ledger hardware wallet

01 / Definition

What Ledger Live actually is

02 / Architecture

How Ledger Live and the device divide the work

The division of labor is simple once you see it. The hardware wallet generates private keys, keeps them, and signs with them. Ledger Live handles everything that does not require a key: discovering accounts, reading balances, converting amounts into your local currency, storing the names you give accounts, checking for updates and drawing the portfolio graph. Neither half is worth much alone, which is why Ledger Live asks you to connect the device for anything consequential and stays read-only when it is unplugged.

Account discovery runs on extended public keys. When you add an account, the device exports the extended public key for a derivation path, and Ledger Live uses it to derive every receiving and change address in that branch and look up their history. An extended public key can generate addresses but cannot produce signatures, so a copy of Ledger Live sitting on a stolen laptop is a viewer, not a spender. It is still a privacy exposure, which is why the application supports a local password lock.

That confirmation screen on the device is the entire point of owning one, and checking it is the habit worth drilling. Malware on a computer can change what any window displays, including what Ledger Live displays. It cannot change what the hardware shows, because the hardware received the transaction independently and renders the details from the data it has been asked to sign. If the address on the device does not match the address you intended, reject it, no matter what Ledger Live claims. The same rule applies in reverse when receiving funds: display the address on the device and compare it before you share it.

Ledger Live also authenticates the hardware. On connection it performs a genuine check, a cryptographic challenge confirming that the secure element holds an attestation key issued by the manufacturer, which is the main defense against counterfeit units sold through third-party resellers. Firmware updates for the device and for its individual coin applications are delivered through Ledger Live as well. Those updates are signed, verified by the device before installation, and never require or expose the recovery phrase held in the secure chip.

03 / Compatibility

Devices and platforms

Ledger Live is built for Ledger's own hardware, and the model you own decides which platforms you can pair with. Every current device connects to a computer over USB-C, so desktop Ledger Live works with all of them; the models that include Bluetooth can also talk to a phone without a cable, while the ones that do not are restricted to wired connections.

The original Nano S is no longer sold, and its constrained application storage is the practical limit: Ledger Live can only keep a handful of coin applications installed at once, so owners end up uninstalling one to make room for another. Removing an application deletes nothing of value, because the accounts exist on the blockchain and the keys derive from the recovery phrase; reinstall the application in Ledger Live and the same accounts come straight back.

On phones the distinctions matter most. Ledger Live for iOS pairs only over Bluetooth, since Apple does not expose the wired path these wallets use. Ledger Live for Android accepts Bluetooth or a USB-C cable through an on-the-go connection. Bluetooth never carries secret material in either direction; it is only a transport for the same unsigned and signed payloads, and the signature still demands a physical confirmation on the device in your hand.

04 / Functions

What you can do inside Ledger Live

Settings deserve a look on day one. Ledger Live offers a local password lock that encrypts the application data on your computer, a choice about whether analytics and crash reports are shared, currency and language preferences, and an export of transaction history as a CSV file for accounting or tax reporting. None of these settings touch the keys, but the lock in particular stops a passing housemate or a lost laptop from revealing your full financial picture.

05a / Coverage

Coins, tokens and networks

05b / Services

Buying, swapping and staking

Beyond storage, Ledger Live acts as a front end for services provided by outside companies. You can buy crypto with a card or bank transfer, sell back to fiat in supported regions, and swap one asset for another without the funds leaving your own custody, since each leg is signed by your device. Ledger Live is not the counterparty in any of these deals; it presents quotes from partner providers, and those providers set the rates, the spreads and the identity checks that apply.

That distinction has practical consequences. Buying inside Ledger Live usually means completing identity verification with the provider, and the price you get includes their margin, which can be wider than an exchange order book. What you gain is delivery straight to an address your hardware controls, skipping the step where coins sit on an exchange waiting for you to withdraw them. Whether that premium is worth paying is a personal call, and comparing the quoted rate against a public market price before confirming is always sensible.

Staking works along the same lines. For proof-of-stake networks that support it, Ledger Live can delegate a balance to a validator, show accrued rewards, and handle the unbonding process, with every operation authorized on the device. The rewards are real but so are the constraints: unbonding periods lock funds for days on some chains, validators can be penalized for poor performance, and delegation through Ledger Live does not remove either risk. Read the specific network's rules in the flow before committing a balance you might need quickly.

06 / Threat model

Security model, limits and past incidents

The security guarantee is narrow and precise, which is what makes it strong. A hardware wallet used with Ledger Live protects you from a compromised computer, because the key never appears on that computer and the transaction is confirmed on separate hardware. It does not protect you from approving a transaction you did not understand, from a malicious contract you signed willingly, or from anyone who obtains your recovery phrase. The phrase is the single point of total failure, and no version of Ledger Live can defend it once it has been written into a website or a text file.

Phishing is the dominant threat in practice. Attackers imitate the interface, publish counterfeit downloads and advertise fake support channels, all aimed at the same 24 words. Install Ledger Live only from the official application listing for your platform, treat every unexpected prompt with suspicion, and remember that a genuine recovery only ever happens by typing the phrase into the device itself, never into Ledger Live and never into a browser. A hardware wallet stores keys offline, and the value of that arrangement is described in general terms in the Wikipedia entry on cryptocurrency wallets.

Ledger's history includes incidents worth knowing about, none of which broke the key isolation but all of which shaped how careful owners behave. In 2020 the company's e-commerce and marketing database was breached, exposing customer contact details and, for a subset of buyers, delivery addresses. No keys or devices were affected and Ledger Live was not involved, but the leaked list fueled years of targeted phishing and even physical threats against named customers, which is why unsolicited messages about a device deserve zero trust.

In December 2023 a code library that Ledger supplies to third-party websites for connecting hardware wallets was compromised after an employee account was phished, and malicious code briefly drained funds from users who approved transactions on affected decentralized applications. The Ledger Live application itself was not the vector, and users who read the transaction details on their device screen had the information needed to reject the malicious approvals. The lesson generalizes: the device display is the last honest surface in the chain, whether you are inside Ledger Live or on some other site.

The company also offers Ledger Recover, an optional paid subscription introduced in 2023 that encrypts and splits a backup of the seed among independent providers, releasing it back only after identity verification. Its announcement drew heavy criticism from users who felt an exportable seed contradicted the promise of the secure element. Ledger Recover is opt-in, requires a subscription and consent, and doing nothing leaves the standard model intact, so if you never enable it your Ledger Live setup keeps working exactly as it did with a phrase that exists only on paper in your possession.

07 / Record

Timeline of notable events

A short chronology helps place Ledger Live in context, both as a product and as a piece of infrastructure that a large number of people now rely on daily.

1. 2014 Ledger is founded in Paris and begins shipping hardware wallets built around a secure element chip.
2. 2018 Ledger Live launches as a unified desktop application, retiring the separate browser-based wallet apps.
3. 2019 Mobile versions bring the same portfolio and manager to iOS and Android, paired over Bluetooth with the Nano X.
4. 2020 A breach of the company's customer database exposes contact details, triggering a long wave of phishing aimed at owners.
5. 2023 Ledger Recover is announced as an optional seed backup subscription and meets significant public criticism; a compromised connection library affects third-party sites in December.
6. 2024 Touchscreen devices Ledger Stax and Ledger Flex ship, and Ledger Live adds support for their larger E Ink displays and clearer transaction review.

08 / Alternatives

Ledger Live compared with other ways to hold crypto

Three arrangements cover most people: an exchange account, a software wallet running on a phone or browser, and a hardware wallet driven by Ledger Live. They differ less in features than in who can move your money and what has to be compromised for you to lose it.

None of these is universally correct. Small amounts you trade weekly may not justify unplugging hardware every time, and many owners keep a small hot wallet alongside the balance held through Ledger Live. What changes with size is the cost of a mistake, and the reason Ledger Live pairs with dedicated hardware is to move the decisive moment off a general-purpose computer and onto a device that does one job.

09 / Setup

How to get started

Initial setup takes roughly half an hour if you do not hurry, and the order matters. Do it at a desk, alone, with pen and paper ready and no camera pointing at you.

1. 01

   Install

   Download Ledger Live from the official source for your platform, and be suspicious of search ads and mirrors offering the same thing.

2. 02

   Initialize

   Connect the device and let Ledger Live guide you through setting a PIN and generating a new recovery phrase on the hardware.

3. 03

   Record

   Write the 24 words on the supplied sheets, confirm them on the device, and store them offline. Never photograph or type them.

4. 04

   Verify

   Run the genuine check, apply any firmware update, then install the coin applications you need through the manager in Ledger Live.

5. 05

   Test

   Add an account, receive a small test amount, confirm it arrives, and send a little back before moving anything significant.

One extra exercise pays for itself. Once the small test transfer has settled, wipe the device by entering the wrong PIN three times and restore it from your written phrase, then reopen Ledger Live and confirm the same accounts and balances return. If they do, your backup is proven rather than assumed. That is the difference between a recovery phrase you hope works and one you know does.

10 / Diagnostics

Common problems and what they usually mean

Most support cases fall into a few repeating shapes. Connection failures are the frequent one, and the cause is nearly always mundane: a charge-only USB cable with no data lines, a hub in the way, an unlocked PIN screen, or another program holding the device. Close other wallet software, use the cable that came in the box, plug straight into the machine, and restart Ledger Live before assuming anything is broken.

A balance that looks wrong is usually a synchronization issue rather than a missing coin. Ledger Live keeps a local cache of account history, and if that cache is stale or corrupted the totals drift. Clearing the cache from settings forces Ledger Live to rebuild each account from the chain, which takes a few minutes and destroys nothing, because the underlying data is public and the keys are elsewhere. If an asset still fails to appear, check whether it needs its own account type or a parent chain account rather than assuming a fault.

Stuck transactions belong to the network, not the software. A transfer sent with too low a fee sits unconfirmed until conditions change, and Ledger Live can only report the status it observes. On chains that support it, the app offers a way to speed up or cancel a pending transaction by replacing it with a higher fee. Otherwise the honest answer is to wait, and to pay attention to the fee estimate the next time. Nothing about a pending transaction puts your keys at risk.

11 / Questions

Frequently asked questions