Ledger Application Layout: Portfolio, Accounts, Discover and My Ledger

Ledger application is the everyday name for Ledger Live, the desktop and mobile companion that sits next to a Ledger hardware wallet. It is easy to think of it as the wallet itself, yet the app holds no private keys. Its screens are a control panel: they read public blockchain data, build transactions and manage what is installed on the device, while the secure element chip inside the Ledger does the signing.

The interface is split into a handful of main sections. Portfolio summarizes balances, Accounts lists every account the user has added, Discover opens third-party services, and My Ledger acts as the device manager for firmware and on-device apps. Settings, notifications and features such as Ledger Sync sit around these core areas. Exact labels and menu positions can shift between releases, so the official Ledger support pages remain the reference for the current layout.

What matters more than the menu names is how each section relates to the hardware. Some screens work with the device unplugged because they only display information. Others cannot finish a single action until the device is connected, unlocked with its PIN and shown the details on its own screen. Knowing which is which helps a user spot when the app is behaving normally and when something is trying to skip the physical check.

This guide walks through each section in turn, explains what the Ledger device does at every step, and closes with the security rules that apply no matter which part of Ledger Live is open.

How the Ledger Live Interface Divides Work Between App and Device

Ledger Live and the Ledger device split responsibilities along a clear line. The app handles everything that can safely be public: fetching balances, showing transaction history, estimating network fees, drawing charts and offering menus. The device handles everything that involves a secret: generating keys from the recovery phrase, deriving addresses and producing signatures. The private keys never travel across the USB cable or the Bluetooth link.

When the app needs something only the device can produce, it sends a request and waits. The request might be an address to display, a transaction to sign or a command to install a device app. The device shows the relevant details on its screen, and nothing happens until the user approves with the buttons or the touchscreen. If the user rejects, the app receives a refusal and the action ends there.

This design has a clear benefit: malware on a computer or phone can see balances and history, but it cannot move funds without the physical approval. The matching risk is that the approval is only as good as the attention behind it. A user who presses confirm without reading the device screen gives up most of the protection the hardware offers.

Why many sections work without the device

Because balances and history are public on the blockchain, Ledger Live can show them using the extended public keys it stored when each account was first added. That is why Portfolio and Accounts open normally with the device in a drawer. The trade-off is privacy: anyone with access to the computer or phone can view those balances unless the optional app password lock in Settings is turned on. That lock protects the interface only; it does not guard the funds, which remain tied to the device and the recovery phrase.

The Portfolio Screen: Balances Built From Public Blockchain Data

Portfolio is usually the first screen after Ledger Live opens. It adds up every account into a single total in the chosen display currency, draws a chart of how that total has moved, and lists recent operations across all accounts. It is a reading tool rather than an action tool.

The figures on this screen come from blockchain explorers and price feeds that Ledger Live queries in the background. The coins are not inside the app and not inside the device either; they exist on their networks, and the device holds the keys that control them. If the app shows a balance that looks wrong, the cause is usually a sync delay, a network node issue or an account that has not been refreshed, not a change in actual holdings.

Reading the Portfolio without the hardware connected

Portfolio does not ask for the Ledger to be plugged in. This convenience lets a user check holdings on a phone during the day without carrying the device. The risk is that a convincing fake version of Ledger Live can show an equally convincing balance. A familiar total on screen proves nothing about whether the app is genuine, which is one reason the source of the installer matters so much.

Hidden tokens and display settings

Portfolio can hide small or unwanted tokens and change the counter-value currency. Hiding a token only removes it from view. It does not delete or move anything on-chain. Unknown tokens that appear unexpectedly are often linked to scam airdrops designed to lure the owner to a malicious website; they are best left alone and never interacted with.

The Accounts Section: Adding, Receiving and Sending on Each Account

Accounts is where the relationship with the device becomes active. Each entry represents one account on one blockchain, derived from the recovery phrase stored on the Ledger. Ledger Live can hold several accounts on the same network, which helps separate long-term holdings from day-to-day activity.

Adding an account requires the matching device app

To add an account, Ledger Live needs the device connected, unlocked and running the app for that blockchain, for example the Bitcoin app or the Ethereum app. The device derives the public key and passes it to Ledger Live, which then scans the network for existing activity. The general flow looks like this:

1. Install the relevant blockchain app on the Ledger through the My Ledger section.
2. Open the Accounts section in Ledger Live and choose the option to add an account.
3. Select the asset, then connect and unlock the device with its PIN.
4. Open the matching app on the device when Ledger Live asks for it.
5. Let Ledger Live synchronize and list any existing accounts it finds for that recovery phrase.
6. Name the new account and confirm, so it appears in both Accounts and Portfolio.

Removing an account from Ledger Live later only removes the local view. The funds remain on the blockchain and can be shown again by adding the account once more with the same device.

Receiving with on-screen address verification

When the user chooses to receive, Ledger Live displays an address and asks the device to show the same address. Comparing the two, character by character, is the single most important habit in the whole app. Malware can replace an address on a computer screen or in the clipboard, but it cannot change what the Ledger displays. If the addresses differ, the receive should be abandoned.

Sending from an account

Sending starts in Ledger Live, where the user enters the recipient address, amount and fee level. The app builds an unsigned transaction and passes it to the device. The device screen shows the recipient, amount and network fee, and only a physical confirmation produces the signature. The benefit is that the final say belongs to the hardware; the risk is that a transaction sent to the wrong address cannot be reversed once broadcast.

Discover and Partner Services Inside Ledger Live

Discover gathers third-party apps and services that can be used without leaving Ledger Live. Depending on region and release, this can include services for buying, selling, swapping, staking or interacting with decentralized applications. These services are run by outside providers, not by the device, and their availability, terms and identity checks are set by those providers.

How partner services connect to the device

A partner service inside Discover works through Ledger Live’s interface. When an action requires a signature, the request is routed to the Ledger, which shows what is about to be signed. When crypto is delivered to the user, the receiving address should be verified on the device screen in the same way as a normal receive. The convenience is fewer copy-and-paste steps; the risk is that a provider’s own conditions, delays or failures sit outside the control of Ledger Live and the device.

Token approvals and blind signing

Decentralized applications often ask for token approvals, which give a smart contract permission to move a token from the account, sometimes without a limit. A malicious or compromised contract can use that permission later to drain the token. Blind signing is a related concern: it happens when the device cannot decode a transaction into readable fields and shows only a hash or partial data. Ledger has worked to show clear signing details for more transactions, but where the device cannot display meaningful information, the user is trusting the dApp completely. Reading every field on the device screen before confirming, and refusing anything that cannot be understood, is the main defense.

My Ledger: The Device Manager for Firmware and Apps

My Ledger, sometimes still called Manager, is the section that speaks most directly to the hardware. It shows the device model, its firmware status, the storage available for apps and the list of apps that can be installed. Every action here requires the device to be connected and unlocked, and most require an explicit approval on the device screen before Ledger Live is allowed to manage it.

Installing and uninstalling device apps

Device apps are small programs that let the Ledger handle a specific blockchain. Installing one adds support for signing on that network; uninstalling it frees space. Uninstalling an app does not delete any coins or accounts, because the keys come from the recovery phrase, not from the app. Reinstalling the app later restores the ability to sign. The trade-off is limited space on some models, which can mean swapping apps in and out.

Firmware updates delivered through My Ledger

Firmware updates are offered inside My Ledger and must be approved on the device. Ledger signs its firmware, and the device checks that signature before installing, so a tampered package should be refused. Before updating, the recovery phrase should be available and verified, since a rare interrupted update might require restoring the device. An update prompt that arrives by email, text message or social media is a phishing sign; genuine firmware is delivered inside Ledger Live.

The genuine check

When a device connects to My Ledger, Ledger Live performs a genuine check. The secure element proves cryptographically that it was produced by Ledger, and the result appears in the app. A failed or skipped genuine check is a strong signal to stop and contact official Ledger support through ledger.com.

Settings, Ledger Sync and Other Supporting Areas

Around the main sections sit Settings and a few supporting features. Settings controls display currency, language, theme, notifications, the optional app password lock, experimental features and tools such as clearing the local cache. Clearing the cache wipes locally stored account data and forces Ledger Live to re-sync from the blockchain; it does not affect funds or the device.

Ledger Sync across a user’s own installs

Ledger Sync keeps the list of accounts aligned between a user’s own Ledger Live installations, such as a laptop and a phone. It is approved through the Ledger device and is designed so that account data is encrypted end to end. The benefit is not having to add the same accounts on every install. The limit is that it synchronizes the app’s view of accounts only. It does not copy private keys and is not a backup of the recovery phrase.

The table below summarizes each section and how it relates to the device.

Section	What it does	Device needed?	What the device confirms	Main risk to watch
Portfolio	Totals balances and shows recent activity	No	Nothing, display only	Fake apps can show realistic balances
Accounts	Adds accounts, receives and sends	Yes, for adding, receiving and sending	Addresses, recipients, amounts and fees	Address substitution by malware
Discover	Opens third-party services and dApps	Yes, for any signature	Transaction details and approvals	Unlimited token approvals and blind signing
My Ledger	Manages firmware and device apps	Yes, always	Access to the manager and firmware installs	Fake update messages outside the app
Settings and Ledger Sync	Preferences, local lock, account sync	Only for enabling Ledger Sync	Approval of Ledger Sync	Confusing sync with a backup

Security Rules That Apply to Every Section of the Ledger Application

Ledger Live has no account login or password that controls the funds. Access comes from unlocking the device with its PIN and opening the app on a trusted computer or phone. Everything else rests on the 24-word recovery phrase, which can restore the keys on a new Ledger if the original is lost or damaged. If both the device and the recovery phrase are lost, there is no way to recover the funds, and Ledger cannot help.

The rules below hold whether the user is looking at Portfolio, adding an account or approving a firmware update:

• The recovery phrase is written on paper or a metal backup during setup and entered only on the Ledger device itself, never typed into a computer, phone, website, form or chat.
• The recovery phrase is never photographed, scanned or stored in cloud notes, email or password managers.
• Ledger never asks for the recovery phrase, and any “support” agent who requests it by phone, email or private message is a scammer.
• Devices should be bought only from the official Ledger store or authorized resellers, and a new device must arrive uninitialized; a pre-filled recovery sheet or a pre-set PIN means the device is compromised.
• The genuine check in My Ledger should pass before any funds are received.
• Every receiving address is verified on the device screen, not just in the app.
• Ledger Live is downloaded only from the official ledger.com website, since fake Ledger Live apps appear in app stores and on lookalike domains.
• Emails announcing urgent updates, security incidents or free airdrops are treated as phishing until confirmed inside Ledger Live or on ledger.com.

Each benefit of the app comes paired with a risk. Viewing balances without the device is convenient but exposes privacy on a shared computer. Partner services save steps but bring third-party terms and smart contract risk. Firmware updates improve the device but are a favorite disguise for phishing. A user who keeps these pairs in mind uses every section with the device as the final authority.

Questions & Answers:

Which sections of Ledger Live work with the device disconnected?

Portfolio, account histories and most of Settings open without the device because they rely on public blockchain data and stored public keys. Adding accounts, receiving with verification, sending, signing in Discover and anything in My Ledger require the device connected and unlocked.

Does deleting an account in the Accounts section remove the crypto?

No. Removing an account only hides it from Ledger Live on that install. The funds stay on the blockchain under keys derived from the recovery phrase, and the account can be added back with the same device at any time.

Why does My Ledger ask for approval on the device before it opens?

The approval stops a compromised computer from silently installing or removing apps or pushing firmware. Only a person holding the unlocked device can let Ledger Live manage it, which keeps the device in control of its own software.

Is it safe to uninstall a blockchain app from the device to free space?

Yes, uninstalling a device app does not touch the funds or the keys. The keys come from the recovery phrase. Reinstalling the app later through My Ledger restores the ability to sign on that network.

Are the services in Discover run by Ledger?

Discover is an entry point to third-party providers. Their terms, identity checks, availability and reliability are set by those providers. Signatures still go through the device, so transaction details and receiving addresses should be checked on its screen.

Is Ledger Sync a backup of the recovery phrase?

No. Ledger Sync aligns the list of accounts between a user’s own Ledger Live installs. It never copies private keys or the recovery phrase, so the written 24 words remain the only way to restore access on a new device.

What should happen if a section shows an address different from the device screen?

The operation should be cancelled on the device. A mismatch suggests malware or a tampered app. Checking the computer, reinstalling Ledger Live from ledger.com and contacting official support through the website are sensible next steps.