Ledger Nano S Plus Wallet Review

The Nano S Plus fits a specific and common profile: the holder who wants maximum chip security for minimum money and signs from a desk.

• Buy it if you want cold storage for long-term holdings, you sign at a computer or Android phone, and you would rather put the $40–$90 saved versus other Ledgers into the assets themselves.
• Buy it if you plan to pair a hardware signer with MetaMask or similar for occasional DeFi, accepting the small-screen approval flow.
• Skip it if you use an iPhone or iPad. It will never connect to one.
• Skip it if you sign transactions daily or read complex contracts on-device. The Nano X buys mobility and the Flex buys a readable screen, and heavy users will feel why.
• Skip Ledger entirely if the closed SE firmware or the company's breach history is disqualifying for you. Fully open alternatives exist and that preference is legitimate.

The Nano S Plus is Ledger's 2022 refresh of the original Nano S, and it fixed that device's two real complaints: the micro-USB port became USB-C, and app capacity jumped to roughly 100 installable device apps at once, so a multi-chain user no longer has to delete Bitcoin to install Solana. The screen stayed a 1.1-inch, 128 x 64 monochrome OLED driven by two physical buttons.

Ledger SAS is a French company and the largest hardware wallet maker by unit sales, with a product ladder that now runs from this device up through the Nano X to the touchscreen Flex and Stax. Its in-house Donjon security lab publishes physical-attack research against rival devices, which cuts both ways as a trust signal: the company clearly employs serious attackers, and its own record still includes the incidents covered below.

Because this is non-custodial hardware, there is no account, no KYC, and no geo-gate. The device is sold worldwide, including the US, and works the same everywhere.

The load-bearing fact, and the one most buyers get backwards: the $59 Nano S Plus carries a higher-certified secure element than the pricier Nano X. Its ST33K1M5 chip is certified to Common Criteria EAL6+, the same tier as the flagship Flex and Stax, while the Nano X runs the older ST33J2M0 at EAL5+. On raw chip assurance, the budget device out-certifies its bigger sibling. The cheaper Ledger is not the less secure Ledger.

Keys are generated inside that secure element and never leave it during normal use. Every transaction must be verified and approved on the device's own screen with the physical buttons, so a compromised computer cannot silently redirect funds — though the 128 x 64 display shows dense contract data a few characters at a time, which in practice pushes users toward approving what they cannot fully read. For plain sends and holds that is a non-issue. For heavy DeFi signing it is a real friction.

The attack surface is deliberately small. No Bluetooth means no radio to attack, and no battery means the device is only powered, and only exposed, while plugged in over USB-C. That subtraction is a security feature, and it is worth being clear that the 7.0 score is not capped by any of this — the cap comes from what the same subtraction costs in usability.

Open-source status, stated precisely: the app layer is open, the secure element firmware is closed and proprietary. Ledger's position is that the SE vendor's confidentiality requirements force this. The practical consequence is that “keys never leave the device” is a claim you trust Ledger on rather than one the community can fully verify from source, and the Recover episode below shows why that distinction is not academic.

Track Record

Ledger's device security record is clean — no Ledger hardware wallet has been remotely drained through a flaw in the device itself. The company's record around the devices is not clean, and a 2026 review has to name three things.

The July 2020 e-commerce Breach

Ledger's marketing database was breached, and the leak ultimately exposed roughly 270,000 customer home addresses alongside names, phone numbers, and emails. For most companies a marketing-data leak is a phishing problem. For a company whose customers are self-identified holders of physical crypto vaults, published home addresses created a physical-safety problem, and the leak fueled a years-long wave of phishing and threat campaigns against Ledger owners. Funds on devices were never at risk. The people holding them arguably were, and anyone buying any Ledger device should use a freight-forward or PO box rather than a home address.

The 2023 Ledger Recover Controversy

Recover is an optional paid subscription that shards an encrypted version of the seed off the device to three custodians. When it launched, the backlash was less about the product than about what it revealed: firmware could be updated to extract seed material from the secure element, and Ledger's own support account conceded that this had always been technically possible. That directly undercut the absolute “keys never leave the device” framing many customers had bought into, and the closed SE firmware means users cannot independently audit the boundary. Recover remains opt-in, nothing is extracted unless a user subscribes and approves it on-device, but the honest framing is that Ledger's security model includes trusting Ledger's firmware signing key, not just the chip.

The January 2026 Global-e Incident

Order data was exposed through Global-e, a third-party e-commerce processor. Smaller in scope than 2020, and disclosed by Ledger, but it lands on a sore spot: twice now, buying a Ledger has been the risky part of owning one.

All three incidents apply to the entire Ledger family equally, so they do not make the S Plus riskier than a Nano X or a Flex. They cap how high any Ledger can score on trust, and they are why device-side excellence lands this product at 7.0 instead of pushing past it.

Ledger's headline number is 15,000+ coins and tokens, and it needs unpacking. Around 500 assets are natively supported inside the Ledger Wallet app, where you can manage accounts, send, receive, and see balances without leaving Ledger's software. The rest of the 15,000+ figure is ecosystem-wide: assets you can secure with the device while managing them through compatible third-party wallets such as MetaMask paired to the hardware. The keys stay in the secure element either way, but the day-to-day software experience for a long-tail token is a third-party wallet's, not Ledger's.

For the major chains — Bitcoin, Ethereum and its L2s, Solana, and the other large ecosystems — native support is comprehensive, and the ~100-app capacity means a genuinely multi-chain portfolio fits on the device at once. Single-chain users lose nothing here, and multi-chain users get one of the widest hardware-secured footprints available.

Usability is where this device gives ground, so the limits come first. There is no Bluetooth, so the device only works wired. There is no iOS or iPadOS support at all — iPhone users need a different device, full stop. Mobile use means Android over USB-C. The two-button, 128 x 64 screen handles PIN entry and simple confirmations fine but turns long addresses and contract payloads into a scrolling exercise.

Within those limits, the experience is mature. Ledger Wallet is polished portfolio software on desktop and Android, onboarding walks a first-time user through seed generation carefully, and the buttons-plus-screen approval flow is simple to learn.

Recovery is the standard done right: a 24-word BIP39 phrase generated on-device, with an optional passphrase for a hidden wallet. Because it is standard BIP39, the seed is portable — if Ledger disappeared tomorrow, the phrase restores into other compatible wallets. Ledger Recover exists as an opt-in subscription alternative for people who fear losing a paper backup, with the trust implications covered above. Skipping it costs nothing.

Ledger Wallet builds exchange-style features on top of the cold storage, all through third-party integrations. Swaps work in-app via integrated providers, with the provider setting the rate and fee shown at quote time. A fiat on-ramp is available the same way, again with provider pricing. Staking is limited to a set of supported chains and runs through integrated services. None of this compromises custody — everything still requires on-device approval — but feature depth is a step behind software-first wallets, and the small screen discourages exactly the kind of active DeFi use those features imply. Treat the S Plus as a vault with conveniences, not a daily driver.

Pairing with third-party software is the feature that ages best. MetaMask and other major wallets treat Ledger as a first-class signer, which is how most advanced users bridge the gap between this device's storage security and a modern dApp interface.

The Nano S Plus lists at $59 excluding VAT, or €49 including VAT in Europe. That makes it the cheapest still-supported Ledger, roughly $20 under typical Nano X pricing, and it undercuts most EAL6+-class competitors.

There are no subscriptions required and no fees to hold or send from the device beyond network gas. Optional costs are exactly that: Ledger Recover is a paid subscription, and swap or on-ramp use carries the third-party provider's rate. The honest total cost of ownership is the device price plus whatever you choose to spend on those extras, which for a pure cold-storage user is zero.