Ledger Flex; Reviewed & Scored | The Block Note
Hardware Wallet Review · Updated August 2026

Ledger Flex:
the best screen Ledger has ever shipped, on firmware you still can't verify yourself.

We tore apart Ledger's mid-range touchscreen hardware wallet across seven weighted categories; from a genuinely top-tier EAL6+ secure element and a trusted E Ink display that closes off a whole class of screen-spoofing attacks, to closed-source firmware, the Ledger Recover controversy, and two real customer data breaches spanning 2020 and January 2026; and landed on a score the marketing page won't show you.

Type Hardware Wallet Touchscreen Yes (2.84" E Ink) Price $249 Discount Offer None
ledger
Flex
Verified on device
Bluetooth · USB-C

Our take, up front: the Ledger Flex is genuinely the best hardware Ledger has shipped: a 2.84" E Ink touchscreen driven directly by the secure element (closing off a real class of display-spoofing attacks), a CC EAL6+ certified secure element, and an interface that finally replaces two-button PIN entry with actual tapping. That's real, substantive engineering. What keeps this from an easy top score is just as real: Ledger's firmware remains closed-source, meaning you're trusting their code rather than verifying it yourself, a trust model made more uncomfortable by the 2023 Ledger Recover controversy, where Ledger confirmed a code path existed on every device that could extract an encrypted seed-phrase fragment, a real reframing of years of "your keys never leave the device" marketing. Layer on two separate, dated customer data breaches, 270,000 users in 2020, and a January 2026 incident via payment processor Global-e, and this is a device whose hardware security is excellent but whose company-level trust record carries real, documented scars. We weighted all of it below.

The Flex is built around an ST33K1M5 secure element chip with CC EAL6+ certification, the same certification tier used across Ledger's current lineup, and a genuinely distinctive feature: the 2.84" E Ink touchscreen is driven directly by the secure element itself, not a separate processor, which closes off a real class of display-tampering attacks other devices remain exposed to. Recovery relies on a standard 24-word Secret Recovery Phrase plus a 4-8 digit PIN. Set against that real hardware strength are two, harder-to-dismiss issues: Ledger's firmware remains closed-source, so independent researchers can't fully verify what's running on the device, and the 2023 Ledger Recover launch confirmed that a code path exists on every device capable of extracting an encrypted seed-phrase fragment, even for users who never opted in, a real, documented reframing of Ledger's own "your keys never leave the device" messaging. Two separate customer data breaches, 270,000 users in 2020 and a January 2026 incident via payment processor Global-e, exposed contact and order details (not keys, funds, or recovery phrases) but created real, elevated phishing risk for affected buyers.

Why this doesn't score higher despite genuinely excellent hardware: a trusted, secure-element-driven display and EAL6+ certification are real, top-tier engineering, but closed-source firmware, the Recover trust reframing, and two dated customer-data breaches are documented, substantive marks against the full security picture, not just the chip on the board.

Pros

  • CC EAL6+ certified secure element (ST33K1M5), among the highest assurance tiers sold to consumers
  • Trusted display: the E Ink screen is driven directly by the secure element, closing off a real display-spoofing attack class
  • No evidence either data breach exposed keys, funds, or recovery phrases

Cons

  • Closed-source firmware cannot be independently verified by researchers
  • Ledger Recover confirmed an extraction code path exists on every device, opt-in or not
  • Two separate customer data breaches (2020, January 2026) created real, elevated phishing exposure

Ledger Live natively lists support for 5,500-plus assets, with first-party coverage across Bitcoin, Ethereum, Polygon, BNB Smart Chain, Avalanche, Tron, Arbitrum, Base, and Optimism, plus Solana. Beyond the native list, hardware-secured signing extends to a long tail of additional networks through third-party wallet integrations (MetaMask, Rabby, and others), which is genuinely as much real coverage as any mainstream hardware wallet offers today. One independent reviewer notes a fair caveat worth repeating: rival spec sheets quoting larger four-digit asset counts are almost always counting the same way Ledger does, bundling every token on a supported chain rather than listing genuinely distinct integrations.

Why this scores among the highest in the category: genuinely broad native chain support combined with real hardware-secured signing through third-party wallets covers the overwhelming majority of what mainstream users actually hold, even if the specific "5,500+" figure inflates the picture the same way most competitors' numbers do.

Pros

  • Native first-party support across all major chains (Bitcoin, Ethereum, Solana, and more)
  • Hardware-secured signing extends to many more networks through third-party wallet integrations
  • Deep NFT and DeFi support through Ledger Live and connected apps

Cons

  • The "5,500+ assets" figure is counted the same inflated way most competitors count theirs

This is where the Flex genuinely earns its reputation: PIN entry, seed confirmation, and menu navigation now happen by tapping the touchscreen directly, replacing the old two-button, click-through-each-character flow that made every prior non-touchscreen Ledger device tedious to use. Multiple independent reviewers describe this as the single biggest usability upgrade in Ledger's lineup. Bluetooth 5.2 makes mobile pairing cable-free, and Ledger rates battery life at roughly ten hours of active use or about 150 transactions, though we couldn't independently verify that vendor figure ourselves.

Why this scores among the highest in the category: the shift from button-clicking to actual tapping is a real, substantive interface improvement independently confirmed across many hands-on reviews, not just a marketing claim.

Pros

  • Tap-based PIN entry and navigation, a genuine upgrade over button-based Ledger devices
  • Full address and transaction verification readable on-device without scrolling
  • Bluetooth 5.2 for cable-free mobile pairing alongside USB-C

Cons

  • Ledger's ~10 hour / ~150 transaction battery claim is a vendor figure we couldn't independently verify

The touchscreen is protected by Gorilla Glass, a real, meaningful durability choice for a device meant to be handled and tapped regularly rather than kept sealed in a drawer. The E Ink display itself is inherently low-power and durable compared to a standard LCD. The compact form factor ships with a USB-C cable, recovery sheets for the 24-word backup, and a quick-start guide. No widespread durability complaints turned up in our research.

Pros

  • Gorilla Glass protects the touchscreen, a real consideration for a device you tap regularly
  • E Ink display is inherently durable and low-power compared to standard LCD screens
  • No widespread durability complaints found in independent reviews

Cons

  • Electronics-based device, not built to the seed-plate level of physical durability some Bitcoin-only tools offer

Ledger has operated since 2014, over a decade of continuous operation, with more than 6 million devices sold across 200-plus countries. The company sells exclusively through official channels, a real, deliberate anti-counterfeiting measure worth noting. Set against that scale is a real, repeat pattern: the January 2026 Global-e breach is the second major customer data exposure after 2020's, and Ledger's own handling of the 2023 Recover rollout was independently characterized as a self-inflicted PR crisis, with the company pausing the feature and committing to publish its code only after significant public backlash.

Why this scores at the midpoint: a genuinely long operating history and official-channel-only sales are real trust signals, but a repeat data-breach pattern and a documented history of underestimating how customers would react to trust-relevant changes are real, substantive marks against reliability.

Pros

  • Over a decade of continuous operation (founded 2014) and 6 million-plus devices sold
  • Sells exclusively through official channels, reducing counterfeit-device risk

Cons

  • Second major customer data breach in six years (2020, then January 2026)
  • 2023 Ledger Recover rollout was independently described as a mishandled, self-inflicted trust crisis

At $249, the Flex is genuinely well positioned within Ledger's own lineup, delivering most of the Stax's touchscreen experience at $150 less, and multiple independent reviewers call it "a smarter buy than the Stax" specifically. But real open-firmware competitors sit meaningfully lower: the Trezor Safe 5 at $169 and the Foundation Passport at $199 both offer verifiable, open-source firmware with comparably strong hardware for less money, a real, direct trade-off buyers weighing the closed-source model should factor in.

Why this scores at the midpoint: the Flex is genuinely good value against Ledger's own more expensive Stax, but it's not the best value in the broader market once open-firmware alternatives at lower price points are considered.

Pros

  • $150 cheaper than the Ledger Stax while retaining most of its touchscreen experience
  • No annual or subscription fee required for core wallet functionality

Cons

  • Real open-firmware competitors (Trezor Safe 5, Foundation Passport) undercut it on price
  • No wireless charging, unlike the pricier Stax

Passphrase protection (a real "hidden wallet" feature) is available for users who want it, alongside NFT management and direct staking and DeFi access through Ledger Live and connected apps. Ledger Recover is offered as an optional, subscription-based extra ($9.99/month), which we count here as a real but genuinely controversial feature rather than a clean positive, given the trust concerns detailed in the Security category above.

Pros

  • Optional passphrase protection for a genuine hidden-wallet layer
  • NFT management and DeFi/staking access through Ledger Live

Cons

  • Ledger Recover is a real, available extra, but a genuinely controversial one given its trust implications
Where to buy

Buy only through Ledger's official store.

Ledger sells exclusively through official channels for a reason: third-party marketplace listings are a real, documented vector for tampered devices. Confirm you're on Ledger's own site before entering any payment details.

0/ 100

The best hardware Ledger has built, still asking you to trust the code you can't read.

Taken purely as hardware, the Flex is genuinely excellent: an EAL6+ secure element, a trusted E Ink display that closes off a real attack class, and an interface that finally makes daily use pleasant rather than tedious. That's not marketing, it's independently confirmed across a wide range of hands-on reviews. What keeps this from scoring in Trezor Safe 7 territory is the company-level picture surrounding that hardware: closed-source firmware that can't be independently verified, a 2023 controversy that genuinely reframed what "your keys never leave the device" meant, and two separate customer data breaches spanning 2020 and January 2026. None of that means your funds are at risk today. It does mean the trust you're extending goes beyond the chip itself.

Best forMainstream users who want Ledger's ecosystem and are comfortable with a closed-source trust model
Not forBitcoin-only holders or anyone who treats self-custody as elimination of third-party trust entirely
Score Ledger
ledger flex · 7 line items
01Security21.9
02Assets18.0
03UX13.05
04Build8.0
05Support6.0
06Value6.0
07Extras3.5
TOTAL76.45
≈ 76 / 100; Great chip, closed code

The scorecard above is deliberately general. Whether the Ledger Flex is right for you depends heavily on which of these you already are.

Best fit

The mainstream, multi-chain holder who wants a genuinely better daily interface

You hold assets across several chains, already accept Ledger's ecosystem and closed-source trade-off, and want the touchscreen experience that makes daily use dramatically less tedious than a Nano.

Good fit

The Ledger Stax shopper on a tighter budget

You want Ledger's premium touchscreen experience but don't need the Stax's wireless charging; the Flex delivers most of it for $150 less.

Workable fit

The NFT and DeFi user who wants clear, on-device transaction verification

The E Ink touchscreen makes it genuinely easier to verify what you're actually signing, a real, practical benefit for anyone regularly interacting with DeFi and NFT contracts.

Poor fit

Bitcoin-only holders or anyone who treats self-custody as full elimination of third-party trust

Closed-source firmware and the Ledger Recover trust reframing are real, disqualifying factors if your security model requires independently verifiable code.

The scorecard covers the headline judgment calls. These four tables cover the specifics we didn't want to bury in prose; what the Ledger Recover controversy actually changed, a timeline of both data breaches, the Flex against the rest of Ledger's own lineup, and how it compares against the other hardware wallets we've reviewed.

What Ledger Recover actually changed

Before Recover (marketing claim)After Recover (confirmed reality)
Where keys live"Your keys never leave the device"An encrypted seed fragment can be extracted via a code path present on every device
Who can access itNot applicable; extraction was framed as impossibleOnly if the user opts in and subscribes ($9.99/mo)
CustodiansNot applicableSplit three ways: Ledger, Coincover, and a third independent party

Recover itself is opt-in. What sparked the real backlash was learning the extraction code path exists in firmware on every device regardless of whether a user subscribes.

Ledger's two customer data breaches

DateSourceWhat was exposedKeys / funds affected?
2020E-commerce/marketing database (Shopify)Names, emails, phone numbers, addresses for ~270,000 customersNo
January 2026Payment processor Global-eNames, addresses, emails, phone numbers, order detailsNo

Neither breach compromised device security, private keys, or funds directly, but both created real, elevated phishing risk since attackers gained exactly the personal details needed for convincing, targeted scam attempts.

Ledger Flex vs. the rest of Ledger's lineup

DevicePriceTouchscreenNotable trade-off
Ledger Flex$249Yes (2.84" E Ink)No wireless charging (unlike Stax)
Ledger Stax$399Yes (E Ink)$150 more for wireless charging and a larger form factor
Ledger Nano X€99NoBluetooth, but back to two-button navigation
Ledger Nano S Plus$79NoNo Bluetooth; the most budget-focused option

Within Ledger's own catalog, the Flex is the clearest value pick if you want a touchscreen without paying the Stax's full premium.

How it compares to other hardware wallets we've reviewed

WalletFirmwareSecure elementPriceNotable trade-off
Ledger FlexClosed-sourceCC EAL6+ (ST33K1M5)$249Recover controversy, two customer data breaches
Trezor Safe 5Open-sourceEAL6+ equivalent$169Independently verifiable code, lower price
Foundation PassportOpen-sourceSecure element$199Open firmware, smaller ecosystem than Ledger's
Coldcard MK4Open-sourceDual secure elements$157Bitcoin-only; no altcoin support

If independently verifiable firmware is your top priority, real open-source alternatives exist at a lower price than the Flex; Ledger's advantage is ecosystem maturity and asset breadth, not code transparency.

We don't just want to hand you our number; we want to show you how it sits next to what other review desks and comparison sites have published. Coverage of the Ledger Flex is genuinely extensive, and scores vary meaningfully depending on how heavily each outlet weighs the closed-source firmware trade-off. No source we found publishes a clean numeric score on our 100-point scale, so every entry below is our conversion of that outlet's published verdict, clearly flagged as an estimate.

The Block Note (us)N/A / 100
Industry averageN/A / 100

Our score lands modestly below the aggregated industry average; several sources treat the closed-source firmware as a minor footnote rather than a structural trust question, and don't weight the Recover controversy or the two customer data breaches as heavily as we do given how directly they bear on the company-level trust picture, separate from the hardware itself.

SourceScoreType

Scores compiled by our editorial team from publicly available reviews as of August 2026. "Editorial estimate" means the outlet didn't publish a single numeric score, so we converted their published verdict and sentiment into a comparable 100-point figure. Verify current figures directly with each source before citing them elsewhere.

A physical device that stores your private keys offline, helping protect your crypto from malware, phishing, and other online attacks that target software-only wallets.

In 2023, Ledger launched an optional, subscription-based seed-phrase recovery service. The backlash centered on a real, confirmed detail: the code path that makes this possible exists in firmware on every device, whether or not a user subscribes, which contradicted years of Ledger's own "your keys never leave the device" messaging. Ledger paused the rollout and committed to publishing the relevant code before relaunching.

No. Both breaches (2020, via an e-commerce database, and January 2026, via payment processor Global-e) exposed customer contact and order information, not private keys, recovery phrases, or funds. The real risk from both incidents is targeted phishing, not direct fund loss.

A secure chip only protects you as well as the code running on it. With closed-source firmware, independent researchers can't fully verify what that code actually does, meaning you're trusting Ledger's own claims rather than being able to check them yourself. Open-source competitors like Trezor and Foundation let anyone inspect the code directly.

No wallet is completely immune, but hardware wallets significantly reduce attack vectors by isolating private keys from internet-connected devices. Physical access, supply-chain tampering, and user error (like approving a malicious transaction) remain the main realistic risks.

Both use E Ink touchscreens and the same core security architecture. The Stax costs $150 more and adds wireless charging and a larger form factor; multiple independent reviewers call the Flex the smarter buy unless wireless charging specifically matters to you.

No. The touchscreen interface was specifically designed to make setup, PIN entry, and transaction verification more approachable than older button-based Ledger devices, though there's still a learning curve for anyone entirely new to self-custody.

Only through Ledger's own official store. Third-party marketplace listings are a real, documented vector for tampered devices; buying direct is the only way to be confident you're receiving a genuine, unmodified unit.

Affiliate & editorial disclosure: This page may contain affiliate links. If you buy through one, we may earn a commission at no extra cost to you. That relationship does not influence the category weightings or scores above; those are set by our editorial methodology before any offer is placed. Hardware wallets reduce but do not eliminate risk; physical loss, supply-chain tampering, and user error remain possible. Nothing here is financial advice.
Specs, pricing, and security details verified against public sources as of Aug 2026; always confirm current terms directly with Ledger.

More Reviews