Ledger Nano X: Inside the Hardware: Which Chip Holds Keys and How Signing Works

Ledger Nano X Crypto Storage Review – this appraisal covers the Bluetooth-capable signing device, the chip that holds keys, the cell and screen that carry it, and the recovery routine that decides whether funds survive a lost unit. Buy it if you sign from a handset and move balances between venues weekly; choose the cabled sibling if you sign twice a year at a desk and want to pay less. Every figure that can move is published on the maker’s official pages rather than fixed here.

Inside the hardware: which chip holds the keys and how a signature leaves it

The unit stores a 24-word recovery phrase inside a certified secure element that never exposes the keys, and it signs a transaction only after you confirm the amount and destination on its own screen. Bluetooth carries the finished signature to a paired phone; the secrets stay on the chip.

Two chips share the work: element and microcontroller

Two chips split the work: a certified secure element holds the seed and performs the signing, while a general-purpose microcontroller drives the screen, buttons and radio. The element enforces its own rules, so a flaw in the general chip’s code cannot simply export the phrase; the certification level and the element’s part number appear in the maker’s published documentation. The trade-off is opacity: because that chip’s internal behaviour is not readable by owners, the certification report and the maker’s statements are the evidence available, and nothing on the device lets a user inspect it independently.

What the radio actually transmits

Pairing sends nothing secret over the air. The companion application passes public addresses and unsigned transaction data to the unit, you check the amount and destination on the built-in screen, and only the finished signature travels back. Pairing itself uses a code shown on the device, and the phone keeps a list of units it can address. A compromised handset can therefore propose a payment but cannot forge a signature; the screen confirmation is the control that stops it, which is why comparing the destination address character by character matters more than how the phone looks.

How a lithium cell and USB-C charging behave over years

A small lithium cell lets the unit sign without a cable, and how you store it decides how long that cell lasts. Cells kept at full charge or left flat for months age faster than cells held around half charge, and the maker publishes its own storage and charging guidance. Charging runs over USB-C from a computer or a wall adapter, and the device works while plugged in. A flat cell does not destroy funds: the seed sits in the secure element, so a unit that will not boot can be replaced and restored from the written phrase.

Who gets real value from a phone-paired vault, and when is a cheaper route enough?

Buy it if you trade from a phone and move balances between venues several times a week, because the battery and the radio remove the cable. Skip it if you sign twice a year, hold everything on one venue, or your handset’s operating-system version sits outside the maker’s supported list.

Frequent movers who sign from a handset

People who shift balances between venues several times a week gain the most, because the battery and radio remove the desktop and the cable. Transactions are built in the companion app on the phone, then confirmed on the device screen, so the signing step happens wherever the handset has a connection. The cost is an extra pairing step and a second device to keep charged. Anyone who only ever moves coins from a laptop at a desk buys little with that convenience and pays for a radio they will not use.

Holders who sign a few times a year

Signing a handful of times a year does not need a radio. A holder who buys, parks coins and touches the device twice annually still needs a screen and a secure element, but the Bluetooth module, the cell and the paired-phone workflow add cost and one more component that can fail. The cabled sibling covers the same signing job from a desktop machine. The exception is a user with no computer at all, who works only from a handset and has no other way to approve a transfer.

Handsets outside the supported operating-system list

Bluetooth support depends on the handset, not on the device. The companion application lists minimum versions for iOS and Android, and those minimums move with each release; a phone that paired last year can drop off the supported list after a system update. A unit bought for an ageing handset can therefore end up usable only with a computer, which removes the reason many buyers chose the wireless variant. Check the current minimum versions on the maker’s official pages before ordering, not after.

How the wireless model compares with its cabled sibling, a phone wallet and venue custody

The wireless model fits people who sign from a handset and want a battery; its cabled sibling fits desk-bound users paying less; a phone hot wallet fits small daily sums; custody at a trading venue fits anyone who accepts that the venue controls withdrawals.

Four routes for holding the same coins are set side by side on where the keys live, the main limit each imposes, and the effort that setup demands. Prices, supported phone versions and firmware releases sit on the maker’s official pages and change between quarters, so the comparison rests on how each route is built rather than on today’s figures.

Read the table by situation rather than by rank. A handset-only user who trades weekly lands on the first row; a desk user who signs rarely lands on the second; sums small enough to lose belong in a hot wallet, and any venue balance should be money you have already written off if withdrawals freeze. One exception runs across all four rows: a person who cannot keep a written phrase private and off-network is worse off self-custodying, whichever box sits on the desk.

Where the cabled sibling covers the same job for less

The cabled sibling performs the same core function – offline key holding with on-screen confirmation – and drops the radio and the cell. Buyers who sign at a desk pay less and remove two failure points: no pairing list to manage and no battery to age. What it cannot do is sign while travelling with only a phone, and it needs a computer with the desktop application installed. For anyone whose signing happens at home, the difference is price and weight, not the protection around the keys.

What venue custody takes out of your hands

Coins held at a venue sit under keys the venue controls. You see a balance, you can usually trade instantly, and withdrawals work while the venue’s rules and solvency allow it; a freeze, a breach or an insolvency filing turns that balance into a claim against the company. Setup takes minutes and nothing needs backing up, which is exactly why people drift into leaving too much there. Treat any venue balance as money already spent, and move the remainder to a device whose phrase you wrote yourself.

Failure modes, reseller risk and mistakes that end in lost coins

Coins are lost through the recovery phrase, not the hardware: photographing it, typing it into a browser, or buying a resealed unit from a marketplace seller. A passphrase that is forgotten or mistyped puts the same funds permanently out of reach, and no support desk can reverse a transfer signed with the wrong words.

Resealed units sold through marketplaces

A sealed box is the only evidence that the phrase inside was generated by you and not by someone else. Marketplace sellers, including ones with strong ratings, can open a unit, initialise it, record the words and reseal it; the buyer then funds addresses the seller can empty at leisure. Buy through the maker’s store or a seller the maker lists as authorised, inspect the seal and packaging on arrival, and reject any unit that arrives already initialised or with a printed word card in the box.

The recovery phrase in a photograph or a browser field

The phrase is the coins, and any camera or keyboard that touches it becomes part of the attack surface. A photo syncs to a cloud account, a screenshot sits in a shared album, and words typed into a browser extension or a note-taking app are readable by whatever else runs on that machine. Written copies on paper or stamped metal, stored where no networked device reaches them, are the only copies that stay out of reach. No support agent ever needs those words, and any request for them is an attack.

Passphrase typos and money that cannot be recovered

An optional passphrase, a word or string added to the twenty-four, derives a different set of accounts. Nothing on the device reveals a mistyped passphrase: the unit accepts the wrong string as valid and opens an empty wallet, which looks exactly like a fresh setup. Funds sent to the real passphrase account then sit there while you cannot reach them. Write the passphrase as carefully as the phrase itself, store it separately, and test the restore before moving meaningful sums into it.

How do you verify a new unit and its recovery phrase before sending funds?

Verify a new unit and its backup before any coin moves: confirm the seller is authorised, inspect the seal, let the device generate its own phrase, write the words on paper, and restore them once to prove the copy matches. Have the maker’s official page and a pen within reach.

Step 1: Confirm the seller is authorised

Confirm that the seller appears on the maker’s authorised list before money changes hands. Marketplace resellers, including highly rated ones, are the standard route by which a pre-initialised unit reaches a buyer, and the seller’s name is the one fact you can verify in advance.

Step 2: Inspect the seal and the body

Inspect the box seal, the packaging and the device body for signs of opening or substitution. A resealed unit may already hold a phrase someone else recorded, so physical evidence at unboxing is the first filter you control.

Step 3: Generate the phrase on the device

Initialise the unit through its own menus so the recovery phrase is generated inside the secure element. Words printed on a card, supplied by an application, or read aloud by a seller are a known attack rather than a shortcut, and only on-device generation keeps the seed off any other system.

Step 4: Write the words by hand, off-network

Write the twenty-four words by hand, in order, and store the copy away from cameras and networked devices. A photograph, a cloud note or a password-manager entry turns a paper backup into a copy that anyone with account access can read.

Step 5: Restore once before funding

Wipe the unit and restore the recorded words to prove the backup matches before funding it. A restore that returns the same accounts confirms every word; a mismatch found now costs nothing, whereas one found after a transfer costs the balance.

What stays unsettled about firmware, audits and battery service

Independent checking is partial. The secure element carries a certification, while the firmware driving the screen and radio is not fully open, so owners lean on the maker’s published audits and on the screen as the final confirmation. Battery service terms, supported phone versions and update policy are published on the official source and shift between releases.

Closed firmware and what outside auditors can confirm

Certification covers the secure element, not the whole product. An outside laboratory can test the chip that holds keys and assign a level, and the maker publishes those reports; the firmware running the screen, buttons and radio sits outside that scope and is not released for public inspection. Owners therefore rely on the maker’s published audit summaries and on the on-screen confirmation as the check they can actually perform themselves before approving a transfer.

Who signs a firmware update and what a bad one could do

Firmware arrives signed, and that signature is the whole defence. The unit accepts an update only if it carries a key the maker holds and the device recognises; a leaked, coerced or stolen signing key would let a malicious build travel the normal update path to every unit, and the visible check left to an owner is the version number on the screen. Release notes accompany each version on the maker’s official site, and reading them before updating is the only informed step available.

A swollen cell and the repair route

A cell that swells or stops holding charge does not endanger the seed, but it does change how the unit is serviced. Repair terms, warranty length and whether a device is replaced rather than repaired are set by the maker and published on the official source; those terms have changed between product generations. Because the phrase restores the same accounts on a compatible replacement, a dead unit is an inconvenience rather than a loss – provided the written backup exists and was tested.

Ledger Nano X Crypto Storage Review – the section below examines the silicon, radios, screen and firmware that determine how this pocket-sized signer protects private keys. It separates what is fixed at manufacture from what a firmware revision can alter, and it flags every figure that the vendor publishes rather than fixing it here.

What Hardware and Security Features Does the Ledger Nano X Include?

A Common Criteria EAL5+ certified secure element that holds keys and performs signing, a 128×64 monochrome OLED display, two confirmation buttons, Bluetooth Low Energy, a USB-C port and a rechargeable cell. The certified chip is the component that protects assets; the radio and the screen only carry and display what the chip approves.

The Certified Secure Element and What It Guards

Keys never leave the certified die: the host sends an unsigned transaction, the chip checks it against your button presses and returns only a signature. EAL5+ certification means an independent laboratory tested that chip’s resistance to physical probing, side-channel leakage and fault injection to that level; it is not a rating of the finished product. The element also tracks failed PIN entries and wipes stored keys after a set number of them, a counter the host software cannot reset.

Radios, Ports and Physical Controls

Bluetooth Low Energy lets the signer talk to a phone without a cable, and the session key is negotiated with the chip, so a nearby listener sees ciphertext. USB-C carries the same instructions when the radio is switched off, which is the route to choose on shared or borrowed machines. The screen and the two buttons exist to break relay attacks: an address or fee that the host tries to substitute has to match the display before you press both buttons. That display is small, so long contract data is harder to verify visually than a plain transfer.

Signed Firmware and the Operating System Layer

Every firmware image is signed by the vendor, and the chip refuses to boot one whose signature fails, so a modified download cannot run even if it installs cleanly on a computer. The operating system isolates each asset application from the others and from the manager, which keeps a bug in one app from exposing keys held for another. Applications are added on demand and each consumes part of the internal memory, so how many stay resident together depends on firmware and app size, and the manufacturer’s official product pages carry the current numbers.

Who Gets the Most From a Bluetooth-Enabled Signer?

It suits holders who sign a few times a month from a phone and a desktop, and who will write a recovery phrase on paper and keep it offline. It fits poorly if you approve dozens of contract calls daily, or if your workplace forbids wireless pairing on the machines you use.

Long-Term Holders Who Sign a Few Times a Month

Someone who buys and holds, moves coins between their own addresses a few times a year and never touches a decentralised exchange gets the most from the radio, because the device can sit in a drawer and still sign from a phone on the day it is needed. The trade-off is that a rarely used device is also a rarely checked one: firmware updates, app updates and the condition of the written phrase backup go unverified for months. Set a calendar reminder to reconnect every quarter and confirm the unit still powers on and reports the expected version.

Phone-First Users Who Trade Away From a Desk

The wireless link matters most when the only computer available is a phone, which is the case for many people who check balances on a commute or sign while travelling. Pairing is bound to one handset at a time, so a second phone requires a fresh pairing, and the connection drops when the signer’s battery runs down. That battery is the practical limit for long sessions: keep the cable in the bag, because a depleted unit cannot sign until it charges.

When Wireless Pairing Is the Wrong Tool

Some workplaces, some regulated environments and some personal threat models treat any radio as an unnecessary surface, and there the cable is the better default. A signer that never pairs cannot be reached by a nearby attacker who has already compromised your phone’s operating system, and it cannot be woken by a stray notification. If you need both, use the cable for large balances and switch the radio on only for a deliberate signing session.

How This Signer Compares With Other Ways to Hold Keys

It sits in the middle of the range: more convenient than a cable-only signer because of its radio, and less isolated than an air-gapped unit that never touches a networked host. Against a phone wallet or an exchange balance, it removes the host machine from key handling altogether.

Five routes cover almost every way people hold keys today. They are compared on where the private key physically lives, how the device reaches the host, and which situation each route suits; setup effort and price are left out because both move with vendor promotions and regional availability.

The wireless signer fits anyone who signs from more than one kind of host; it does not fit a user who must never expose a radio, and it is overkill for a balance small enough to lose. Cable-only units suit a single trusted desktop, air-gapped units suit large, rarely moved holdings, and a phone wallet stays reasonable for spending money you would not miss. An exchange balance is the one option here that removes self-custody entirely, which is a different decision from a hardware choice.

Why a Wireless Link Changes the Threat Model

A radio does not hand over keys; it widens the number of ways an attacker can reach the signing prompt. The pairing handshake is authenticated, so an unknown device cannot simply connect and request a signature, but a compromised phone can still display a false address while asking for approval. The defence is unchanged: read the screen and press the buttons only when the details match what you intended. Treat every unexpected signing request as an attack, and reject it on the device rather than on the host.

Where Cable-Only and Air-Gapped Routes Win

A cable-only signer removes the radio from the attack surface at the cost of tethering you to a computer that must be trusted. An air-gapped unit goes further: data crosses by camera or QR code, so the signing device has no port a networked machine can drive. The price is friction – every transaction becomes a manual, multi-step exchange – and firmware updates on such units often need their own careful procedure. Choose isolation when holdings are large and rarely moved, and accept the extra minutes per signature as the cost.

Risks, Limits and Mistakes That Break the Protection

Three failures cause most losses: a recovery phrase copied into a photo, a note or a cloud folder; a unit that arrived with a phrase already filled in; and an address approved on the screen without comparing it to the host. None of these is defeated by the chip.

A Recovery Phrase Photographed, Typed or Kept in the Cloud

Anyone who holds the phrase holds the funds, on any compatible wallet, without needing the physical device. A photo in a phone’s gallery syncs to a backup, a text note lands in a search index, and a password manager entry depends on that manager’s own security. Write the words on the supplied card or on metal, store two copies in separate physical locations, and never type them into a website, a chat window or a support form. No legitimate vendor, support agent or update process asks for them.

Tampered Packaging and Pre-Filled Phrase Cards

A second-hand or intercepted unit can arrive with a phrase the seller already knows, and the screen will look and behave normally. That is why the first check after unboxing is whether the device offers to generate a phrase or asks you to enter one – only the first is correct. Resealed boxes, missing seals and sellers who offer to set the device up for you are the warning signs. Buy from the manufacturer or an authorised reseller, and treat any discount on a sealed unit as a reason to inspect harder.

A Pairing Left Open Around Strangers

Bluetooth pairing persists until it is removed, so a signer left paired to a phone that is later lost or resold stays reachable by whoever holds that handset. The device still requires physical confirmation for every signature, which is the reason a lost phone does not mean lost coins, but the attacker gains a direct channel to prompt you. Unpair before selling or discarding a handset, keep the signer’s screen covered in public, and decline signing requests you did not initiate.

How Do You Verify the Device Is Genuine Before You Trust It?

Work through five checks – packaging, attestation, PIN and phrase generation, address matching, and a signed firmware update – before moving a meaningful balance. Have the sealed box, the official companion application and a computer or phone with a working connection ready, and keep the recovery phrase away from every networked device.

Step 1: Inspect the seal and the box contents

Inspect the tamper-evident packaging and the seal before you power anything on. A broken seal, a resealed box or a recovery card that arrives already filled in means the unit passed through other hands, and no later check can undo that.

Step 2: Run the vendor’s authenticity check in the official application

Launch the official companion application and run its device authenticity check. The check reads a cryptographic attestation from the secure element, so a counterfeit board cannot produce a valid response even if it looks identical from the outside.

Step 3: Confirm the display asks you to create your own PIN and phrase

Confirm that the display asks you to pick your own PIN and to write down a phrase the chip generates on the spot. Any unit that arrives with a phrase already printed, or that asks you to type a phrase the seller supplied, is compromised by definition.

Step 4: Match a receive address on the screen against the host

Open a receive address in the companion application and compare it character by character with the address shown on the device display. Malware on the host can swap a clipboard address, and only the on-screen confirmation reveals the difference before funds move.

Step 5: Install the firmware update through the official application

Update the firmware through the official application and check the version string it reports on the display. Signed images are verified by the chip before they run, so an update the device refuses is a warning rather than a glitch.

What Stays Unsettled and What Readers Commonly Get Wrong

Firmware revisions add asset support, adjust the app manager and occasionally change how pairing is confirmed, while the certified chip and the recovery-phrase model stay the same. Prices, app capacity and supported networks are not fixed here; the vendor publishes them, and they differ by region and by companion-app release.

Firmware Revisions Versus the Silicon Underneath

Updates change the app manager, add asset support and occasionally alter how a pairing is confirmed, and they can be installed only from the official application because the chip validates the signature. The certified element, the button-confirmation model and the phrase-based backup do not change with a release. Anyone quoting a feature list should therefore state the firmware version it came from, because a screen or menu described in an old article may no longer exist. Check the version string on the display before following an older walkthrough.

Regional Rules and Vendor-Published Figures

Prices, shipping restrictions, supported networks and the availability of certain applications differ by country, and the companion application’s listings reflect those differences. Regulatory treatment of self-custody software is also moving in several jurisdictions, which can change what is distributed where. Because those facts shift, this page does not fix them; treat the manufacturer’s own documentation as the reference and re-check it before you rely on a number you read elsewhere. Any figure that cannot be confirmed there should be treated as unverified.

Q&A:

Is Bluetooth on the Nano X risky? Could someone nearby drain my wallet without my approval?

Bluetooth adds a wireless path, but it does not let someone move coins by itself. Private keys stay on the Nano X. A transaction must be signed on the device, and you confirm it by pressing the buttons. A nearby attacker could try pairing requests or a firmware flaw, but they still need your physical approval unless you leave the device unlocked and approve a malicious transaction. Turn Bluetooth off when not using it, set a strong PIN, and keep firmware current.

How many coins and tokens can I hold on one Nano X? Do I have to delete apps to add more?

You can manage many assets with one Nano X, but the device has limited app storage. Ledger Live shows accounts for each blockchain, and you install the matching coin app on the hardware wallet. If storage fills up, remove an app and install another later. Removing an app does not delete your coins or keys; your recovery phrase restores access to every account. Some large apps take more space, so the exact number varies. For a long list of assets, expect to swap apps occasionally.

What happens if my Nano X is lost, stolen, or the battery dies? Do I lose my crypto?

Not if you have your recovery phrase. The Nano X holds private keys, but the recovery phrase is the backup that rebuilds those keys on a replacement Ledger or another compatible wallet. If someone steals the device and does not know your PIN, they cannot access your accounts. If the battery fails or the screen breaks, your funds remain on the blockchains; you restore the recovery phrase on a working device. The main danger is a lost, copied, or photographed recovery phrase. Keep it offline, never type it into a website, and never share it with anyone.

Can I use the Nano X with only my phone, or do I need a computer?

You can use it with only a phone for many tasks. Ledger Live mobile supports iOS and Android over Bluetooth, so you can check balances, receive funds, send crypto, and manage accounts without a laptop. Some features, third-party wallet connections, and desktop-only apps may still need a computer and a USB-C cable.

Is the Nano X worth the higher price compared with the Nano S or Nano S Plus?

It depends on how you plan to use it. The Nano X adds Bluetooth, a battery, a larger screen, and more app memory. Those help if you trade or check accounts from a phone often, or if you install many coin apps. The Nano S Plus has more memory than the older Nano S but no battery or Bluetooth; it costs less and works well with a computer. The Nano X battery will age over time, and the device is bigger. If you need wireless mobile use, pay for the X. If you only need USB desktop access and a few assets, the S Plus can save money.