Ledger Flex Review

The Flex fits an active self-custody user on major chains who transacts often enough to want a real verification screen and mobile-first convenience, and who accepts closed firmware from a certified vendor.

• Good fit: holders signing regularly across Bitcoin, Ethereum, and Solana, DeFi users who want readable contract signing, anyone upgrading from a Nano for the screen.
• Poor fit: buyers who require open or reproducible firmware, users who want an air-gapped QR signer with no radios, and long-term holders who transact rarely and would be better served by a cheaper device.
• Order note: whichever Ledger you buy, assume your purchase details may leak. Use a mail drop or PO box if the vendor knowing your home address concerns you, because for this vendor that exposure has happened twice.

The Ledger Flex is a $249 touchscreen hardware wallet, the mid-range device in Ledger's current lineup between the button-driven Nano models and the flagship Stax. Its defining hardware choice is the 2.84-inch monochrome E Ink secure touchscreen, which turns transaction verification from squinting at a two-line OLED into reading a document-sized display, and its defining spec is the ST33K1M5 secure element with a CC EAL6+ certification.

Ledger SAS is a Paris-based company founded in 2014 and the commercial leader of the hardware wallet category. That scale cuts both ways. The engineering resources are real, including Ledger Donjon, an in-house attack lab that has published exploits against rival devices. So is the customer database, which has now been exposed twice. Both halves of that record belong in a buying decision, and this review covers both.

The Flex is fully non-custodial. Private keys are generated inside the ST33K1M5 secure element and never leave it during normal operation. Signing happens on the chip, the PIN is entered on the device's own touchscreen, and the 24-word phrase is displayed only on the E Ink panel. CC EAL6+ is among the highest Common Criteria assurance levels found in consumer devices, the same class of silicon used in passports and payment cards.

The display is the second pillar. Ledger's Clear Signing program renders transaction details in human-readable form on the device itself, so what you approve is what the chip signs, and EVM Transaction Check flags known-malicious contract interactions before you confirm. On a screen this size, checking a full address and the actual amount is a five-second habit instead of a chore, which is exactly the behavior a signing device exists to encourage.

Two structural facts temper the picture. First, the Flex is a connected device, not an air-gapped one. It talks over USB-C, Bluetooth 5.2 LE, and NFC, three live radios and a cable where a QR-based rival exposes none. Keys stay in the secure element either way, but the attack surface is honestly larger than an air-gapped signer's. Second, the open-source status is partial and should be stated precisely: the Ledger Wallet app and the device's coin apps are open, while the secure element firmware is proprietary and closed. You cannot independently audit the code that touches your seed. You are trusting Ledger's word, the EAL6+ certification, and the Donjon public bug bounty. That trust structure held for years until 2023, when it was tested in public. That story is below.

July 2020, The e-commerce Breach

Attackers extracted Ledger's marketing and order database and later published it, exposing names, emails, phone numbers, and the home addresses of roughly 270,000 customers. For most companies that is a spam problem. For a hardware wallet vendor it told criminals which physical addresses probably hold crypto, and the fallout matched: a sustained phishing and extortion wave, ransom emails threatening home invasion, counterfeit “replacement device” mailings built to steal seed phrases, a class action, and 171 phishing-site takedowns in the first two months alone. No device or key material was touched, but the physical-safety dimension is why this breach still gets cited in 2026.

January 2026, the Global-e Breach

Customer data was exposed again, this time through Global-e, a third-party payment processor in Ledger's checkout flow. The scope was narrower than 2020, but a second customer-PII exposure in six years is a pattern, not an accident, and buyers should treat their purchase data (not their keys) as likely to be phished against.

May 2023, Ledger Recover

Ledger announced an optional paid subscription that encrypts the seed into three fragments and sends them off the device to three separate custodians. The backlash was one of the largest in hardware wallet history, because the announcement contradicted years of “keys never leave the device” marketing and proved the firmware is capable of exporting seed material when instructed. Recover is opt-in, and no one is forced to use it. The lasting damage is what it revealed about the closed firmware: since the code cannot be independently audited, users cannot verify for themselves that extraction requires their consent. Some later reviews list Recover as a flexibility perk. It is more accurate to call it a convenience feature for people who fear losing their seed, purchased at the cost of the strict self-custody model, and a permanent asterisk on the closed-source question for everyone else.

None of these events resulted in coins being taken from a Ledger device through a device flaw. That distinction is real and it is why the score stays high. But a 2026 review that omits them would be hiding exactly the risk information a hardware wallet buyer needs.

Ledger Wallet natively supports around 500 coins and tokens, covering the major chains most holders actually use, including Bitcoin, Ethereum and its ERC-20 tokens, and Solana. Ledger's marketing figure of 5,500+ assets is technically defensible but counts the wider ecosystem: thousands of those assets are managed by pairing the Flex with a compatible third-party wallet rather than inside Ledger Wallet itself.

Read the smaller number as the more truthful spec, not the weaker one. Rival spec sheets quoting four-digit counts are almost always counting the same way Ledger's marketing does. What the Flex actually delivers is native, first-party support for the major chains plus hardware-secured signing for a long tail of networks through external wallet integrations, which is about as much genuine coverage as any mainstream hardware device offers in 2026.

Setup runs through Ledger Wallet on mobile or desktop. The touchscreen does the work that used to be the worst part of Ledger ownership: PIN entry, seed confirmation, and menu navigation happen by tapping instead of clicking through characters with two buttons. Bluetooth makes the mobile pairing cable-free, and the battery is rated by Ledger at roughly ten hours or about 150 transactions, a vendor claim we have not independently timed.

Recovery follows the standard done right. The 24-word BIP39 phrase is portable, so the seed can be restored into other BIP39-compatible wallets and you are never locked into Ledger hardware. An optional passphrase adds a hidden-wallet layer. Beyond the paper backup, Ledger sells two alternatives: the Ledger Recovery Key, an NFC card that stores an encrypted backup you keep physically, and Ledger Recover, the subscription service covered above. The card keeps the backup in your hands. The subscription moves seed fragments to third parties, and you should read the track-record section before deciding that convenience is worth it.

Ledger Wallet is the hub for everything beyond storage. Buying crypto with fiat, swapping between assets, and staking all run through third-party providers integrated into the app, with each provider setting its own fees and spreads, so compare the quoted rate against an exchange before committing to an in-app conversion. Portfolio tracking covers accounts across chains in one view.

For DeFi and dApps, the Flex signs for third-party wallet front ends, which is how most of the long-tail chain support works in practice. Clear Signing extends into this territory too, and it is the feature that ages best: as contract interactions get more complex, a device that can actually display what you are signing is worth more each year.

The device is $249, the app is free, and the real recurring costs are the provider fees baked into in-app buys and swaps plus the optional Recover subscription. At this price the Flex is a premium purchase. Buyers who only need offline key storage for one or two chains can get a certified secure element from Ledger's own Nano S Plus for a fraction of the price, and the Flex's extra spend buys the touchscreen, the battery, Bluetooth, and NFC rather than more security. Whether that is worth it depends entirely on how often you transact.