Topic: Ledger, safe or not? (Read 485 times)

Ledger is absolutely not safe because they know everything about your wallet because they have your xPub key.

Also, if you're not generating your own seed phrase, you're trusting that the one they generated for you is truly random and that they don't have a copy of it.

I avoid Ledger like the plague and never refer anyone to use that garbage spyware product.

The only hardware wallets I recommend are ColdCard, SeedSigner, and Foundation Passport. Some others are good but these are the only wallets that enable you to generate your own seed phrase in a completely air-gapped environment.

If you want the most comprehensive resource on Hardware wallets, check out this one from Athena Alpha: https://www.athena-alpha.com/crypto-wallets/compare/

Stay safe out there.

I agree with that. Totally unplugged and air gapped hardware wallet sending unencrypted and readable transactions are the only 100% safe wallets unless you bother to check each transaction before putting it into the connected device for broadcasting the transaction. No need to have even an open source code if you are able to verify what the hardware or cold wallet is transmitting.

@jerry0, I suggest you reduce your paranoia a little, and then watch a video posted by a forum user. I'm not saying that you should do the same with your device, but if by any chance it occurs to you, it would be good to send your coins to another wallet first

Eclipse - F*ck Ledger     

Are you saying then that for someone that uses a nano ledger s plus but did not update the firmware for recover, as long as they don't do any transactions and just is holding and thus not updating any firmware, they are okay compared to someone updating their firmware with recover then?


Is this person the same risk as the person with a nano ledger s where that person can't even update to firmware that has recover? 

jerry0, what is it with you? You're asking basically the same things all over again. Can't make up your own decision? Need some folks to tell you how to wipe your ass? (And still ask again, how to...)

What do you not understand with any Ledger firmware that is closed-source?

No Ledger customer or user is able to know what the firmware does or what it doesn't. Ledger lied for years, telling their customers, your secrets can't leave the device, can't be extracted from it. The new service implemented by Ledger itself allows exactly that. There is a programmed way to retrieve your wallet's seed for the infamous Ledger Recovery subscription service (and if you want it and have a capable Ledger hardware for it, you pay a monthly subscription, how funny is that?).

At some point of time you won't be able to refuse to install a current firmware version, because Ledger Live will force you to do it. To my knowledge (I don't ever use Ledger hardware, though) you can install coin/token apps only via Ledger Live for your Ledger crap. What will you do when Ledger Live refuses to install apps on your Ledger crap until you update the firmware?
(Rhetorical question, I don't need your response as I normally ignore what you post, don't need to waste my time with your agnostic all over again asking the same shit as if we're stuck in a time loop. I deliberately made an exception to respond here because I'm in the mood to do.)

So very few people then use ledger as their cold wallet for long term storage then?


Are there people here that feel comfortable with it still?

I think it's still safe as long as you call it in the shop directly, never buy at the second or third party because there is a possibility that there is a bad potential for your assets and you will lose the money you have in your wallet, I suggest not to believe in the second party or third for Crypto asset storage transactions.

After everything thats been going on and all the issues, it seems folks have lost some faith in Ledger as a company, even if the devices themselves remain secure.  From what Ive seen, people I know still rely on their Ledger hardware wallets daily.  But if someone asked them today for a good cold storage recommendation? Cant say Ledger would top their list anymore.

What do you mean the seed phrase can be extracted from the device and how?  What about people with the nano ledger s then?  What about people with ledger s plus or x but did not update to the firmware with the recover option?


So it doesn't matter what firmware version you are on?  The seed phrase extraction could happen if they introduce another new firmware then? 


They say that you still have to opt in to recover.  And if you don't opt in, there is no issue.  But you are saying that isn't true? 

This is an old topic, there is no need recycling it with questions you have prolly asked a hundred times in other topics. I don't trust ledger, and so many people don't as well, but there are still many people who buy ledger devices, maybe because they have been around for a long time or their PR, or they just don't know how much ledger has fucked up.

The ledger recover is optional, but the thing is that the seed phrase can indeed be extracted from the device, when ledger said it wasn't possible.

So it seems very few people seem to trust ledger after this?  They say the recover is an option but people think they it's more than that?

A few hundred dollars can now turn into several thousand over time, so people want to save even small amounts of money until the time when the contents of their wallet can be sold for a significant profit.

With respect to any service provider (providing services related to money) who screwed up at least once (in the case of ledger, this happened more than once, both in terms of incidents and exposure of their lies), you should reconsider your attitude and look towards alternative solutions (competitors without such fiascos).

No business owner will speak badly about his business / products. This applies to any public figures associated with ledger. They will all only publicly praise their products, therefore, what they say cannot be perceived objectively. The truth can be found out thanks to indirect signs from "unpleasant incidents" and independent experts.

Maybe send an e-mail to their CEO and ask him what he thinks about everything? I personally wouldn't feel safe after all the failures and lies, but that's still a matter of choice for each individual. For those who have coins worth a few hundred $, it doesn't matter anyway, right?

Do people feel safe with it still or is it still overblown?

If you care about how your wallet is generating seed phrase, if you can care about your privacy, do not use Ledger Nano again. Bitcoin is not close source, that is why it is not good to use it on a close source wallets.

Probably other people, because I can not use a wallet that has a close source secure element, or a wallet that breach their buyers information to bad people to make use of.

I have ledger nano S, despite all the fiasco lately I consider it to be more attack proof than at least software wallets, so am still using it.


Recovery service was opt-in, people were more worried about it being closed source and having a backdoor. Recovery thing just threew light on it's weaknesses which were prior overlooked.

There have been reports of ledger hack, anti privacy, ledger recovery which is a security issue, etc!
What is a private wallet? However Ledger is closed source and even though it is non-custodial, ledger recovery proves that it is possible for your seed phrase to leave the 'secure element', so that will definitely be a problem for any customer who is conscious of their security.
Exactly, there are so many better alternatives, and Ledger is popular because it was one of first hardware wallets that quite a lof of people bought and recommended.

It is more or less known that Ledger is a good wallet but no one can guarantee it 100% that there will be no problems. Since it is a wallet there will be some risk but there have been no reports of Ledger hardware wallet. And huge amount of users are seen using this wallet and they are using it very happily and carefree. Hardware wallet is a private wallet and you will have full access to it so there is not much risk involved there. So you can use it to store your bitcoins there if you want. Hope it will give you a good satisfaction. However, since there are many alternative hardware wallets in the market, you can research them and use the one that you feel is the most secure. however, Ledger wallet is still very popular in the market

The old version still works perfectly and good thing that it isn't supported by the recovery feature. But for those that are thinking that they should buy a new hardware wallet, you're free to do it as that feature they've added really sucks and is against the community's liking.
Before this feature came out, I had plans to buy the X version because of its feature that allows you to view your portfolio on mobile, I haven't tried yet with S version. But when they've released the recovery part, that's where I have removed that plan.

I would not use and trust that crap at all, and it's not only because of ledger recover service.
They are pretty much trying to be shitcoin wallet that don't care about customer privacy for a long time, they leaked private information, they have terrible battery for model X, and they have worst quality control ever.
It's just junk made in China, than later assembled in some French village garage, and graveyard of old ledger wallet models is getting bigger every day.
I would not be surprised if they have some hidden government backdoor code with bunch of signed NDA's, but this is just my speculation.