Ledger Live, the companion app for Ledger hardware wallets

Ledger Live is a free application published by Ledger, the French company that has been making hardware wallets since 2014. It runs on Windows, macOS, and Linux as a desktop program, and on Android and iOS as a mobile app. Both versions share a layout and most features, and both do the same core job: talk to a Ledger device over USB or Bluetooth, read public data from blockchains, and present it as a portfolio you can act on.

Before Ledger Live existed, managing a device meant juggling separate browser applications, one per coin family, plus a manager for firmware. Ledger Live merged all of that into a single program with one account list, one settings screen, and one update path. That consolidation is the main reason Ledger Live matters: it is the supported, first-party way to reach a Ledger device without stitching together third-party tools.

What Ledger Live is not is a wallet in the sense most people mean. It never generates, stores, or transmits private keys. Delete Ledger Live from your laptop and your coins are unaffected, because they were never inside the app. The keys that control them sit in the secure chip of your device, and the balances sit on public blockchains. Reinstall Ledger Live, plug the device back in, and the same accounts reappear.

That distinction shapes everything else here. When Ledger Live shows a balance, it is reporting what indexing services say about addresses derived from your device's public keys. When Ledger Live sends a transaction, it is relaying bytes your device signed. The app is a well-built control surface, and it is only ever as trustworthy as the confirmation you read on the hardware screen. If you want the underlying concept in general terms, the idea of a cryptocurrency wallet as a keyholder rather than a container is the piece worth internalizing.

The division of labor is simple to state. Your device holds the seed and every private key derived from it, and it performs signing. Ledger Live holds no secrets and performs everything else: discovering accounts, fetching balances and history, estimating fees, assembling unsigned transactions, and broadcasting signed ones to the network.

When you set up a device, it generates a 24-word recovery phrase offline, inside the secure element. That phrase never touches Ledger Live, your computer, or any server. From the seed the device derives an effectively unlimited tree of keys, and it exports only public keys to the app so addresses can be computed and watched.

Adding an account is that export in practice. Ledger Live asks the device for the public key at a given derivation path, scans the chain for activity on the resulting addresses, and stops when it finds a long enough gap. The accounts you end up with are a local index, rebuildable at any time from the same device, which is why moving Ledger Live to a new machine is a low-stress operation rather than a migration project.

Sending is where the two halves meet. Ledger Live prepares an unsigned transaction with recipient, amount, and fee, then pushes it to the device over USB or Bluetooth. The device parses it, prints the human-readable details on its own screen, and waits. Nothing is signed until you approve on the hardware. If malware had rewritten the recipient inside Ledger Live, the device would still display the attacker's address, and you would catch it there.

Once you approve, the device returns a signature. Ledger Live assembles a valid transaction around it and broadcasts it through a node. After that the network takes over, and Ledger Live simply tracks confirmations the way any block explorer would.

This is why the hardware screen matters more than the app window. A laptop or phone can be compromised in ways that leave no visible trace. A device with its own display and physical confirmation gives you a second, independent channel for checking what you are actually authorizing, and that redundancy is the entire point of the product. The signing itself rests on ordinary public-key cryptography, with the private half locked inside the chip.

Ledger devices support a long list of blockchains, and Ledger Live supports a large subset of them natively, with the remainder reachable through compatible third-party wallets that use the device for signing. Native support in Ledger Live means the app can create accounts, read balances, build transactions, and in many cases handle staking or token standards for that chain without any outside software.

For each supported chain, the device needs the matching coin app installed through My Ledger. That app is a small program which knows how to derive keys and parse transactions for one network. Device storage is finite, so people who hold many chains rotate apps in and out. Uninstalling a coin app never deletes funds or accounts, because the keys come from the seed, and reinstalling restores access immediately.

Tokens follow their parent chain. ERC-20 tokens on Ethereum, for instance, live inside an Ethereum account, so you install one Ethereum app and Ledger Live lists the token balances beneath that account. If a token is not recognized by the app, the balance still exists on chain: that is a display gap in Ledger Live, not a loss, and it is usually resolved by a later release or by viewing the address in an explorer.

NFTs behave the same way on supported chains, with a gallery view in Ledger Live for browsing and transferring them. Because the media is fetched from external hosts, images sometimes fail to load even when ownership is perfectly intact, which is a rendering problem rather than an ownership one.

Every outgoing transaction in Ledger Live has the same shape: pick an account, enter a recipient, set an amount, choose a fee, review the details on the device, confirm. The consistency is deliberate, because a predictable flow makes an unexpected screen easy to notice.

Fees are network fees, not Ledger Live fees. Ledger Live estimates a rate for the chain you are on and generally offers slow, medium, and fast presets alongside a custom option for people who prefer to set gas or a fee rate by hand. The money goes to the miners or validators who include your transaction. Ledger Live takes nothing from a plain send, on any supported network.

Address verification deserves to be a habit rather than an occasional precaution. When receiving, display the address on the device and compare it, character group by character group, against what Ledger Live shows on screen. Address-swapping malware is one of the few attacks that still works against an otherwise careful user, and this comparison is the countermeasure.

On smart contract chains, what you approve may be a contract call rather than a simple transfer. Ledger devices attempt to decode these into readable terms, a practice usually described as clear signing. Where decoding is not available, the device falls back to showing raw data and Ledger Live warns that blind signing is required. Treat that warning as a stop sign unless you genuinely trust the contract you are interacting with.

Stuck and pending transactions are a network matter, not an app defect. Ledger Live can show an operation as pending for a long time when the fee was set too low, and the remedy depends on the chain: replace-by-fee, a speed-up, or simply waiting for congestion to clear. Ledger Live cannot cancel a transaction that the network has already confirmed, and no wallet interface can.

Ledger Live bundles third-party financial services so you do not have to leave the app to acquire or convert assets. It is worth being precise about what is first-party here and what is not, because that distinction decides who you talk to when something goes sideways.

Buying with a card or bank transfer runs through regulated on-ramp providers integrated into Ledger Live. They handle identity verification, payment processing, and pricing, and the coins are delivered straight to an address controlled by your device rather than to an account you have to withdraw from later. Ledger Live shows the quote, the provider name, and the total before you commit to anything.

Swapping follows the same pattern. Ledger Live queries integrated exchange partners for a rate, you choose one, and that partner executes the swap while your device signs the outgoing leg. Rates include the provider's spread and they differ noticeably between providers, so comparing two quotes before confirming is usually worth the extra few seconds.

Selling to fiat, where offered, depends on the provider and your country. Availability inside Ledger Live varies by region and changes over time, which is why the app checks eligibility at the moment of the request instead of publishing a fixed promise.

Staking is the one service that keeps you closest to the protocol itself. For supported proof-of-stake networks you delegate to a validator from inside Ledger Live, keys never leave the device, and rewards accrue on chain. Ledger Live surfaces lock-up periods, unbonding times, and reward history, but the rules belong to each network: unstaking is rarely instant, and slashing or validator downtime remain real risks that no interface can remove.

None of these integrations turn Ledger Live into a custodian. Funds move between your addresses and a provider's, and the provider's terms govern that leg of the trip. If a purchase stalls or a swap arrives short, the counterparty is the provider, and support conversations normally start there.

My Ledger inside Ledger Live is where the hardware itself gets maintained, and it is the only place that maintenance should ever happen. Anything asking you to update from a web page, an email link, or a chat message is not part of this process.

Firmware updates arrive periodically and are installed through Ledger Live over a cable. Each update is cryptographically signed and verified by the device before it is applied, so a tampered image is rejected by the hardware rather than trusted on faith. Keep the device connected and unlocked for the whole procedure, since interrupting an update can leave the device needing a full restore, which is only survivable if you still have the recovery phrase.

Installing and removing coin apps is routine and harmless. Ledger Live shows how much storage is in use and lets you queue several installations at once. Because these apps hold no state, removing one never removes an account from Ledger Live and never touches funds on the chain.

The genuine check runs automatically whenever a device connects to Ledger Live. It uses an attestation key written at the factory to confirm the hardware is authentic rather than a clone or a modified unit. A failed check is a reason to stop and investigate, particularly if the device came from somewhere other than the official channel or an authorized reseller. Buying second-hand hardware and trusting a preloaded recovery phrase printed on a card is the classic way people lose everything at once.

The design assumes your computer is hostile. The secure element is a tamper-resistant chip of the family used in payment cards and passports, and it runs an operating system that isolates each coin app from the others. Ledger Live, running on an ordinary consumer OS full of browsers and downloads, is deliberately kept outside that trust boundary and given no secrets to leak.

What that buys you is real but bounded. Ledger Live paired with a device protects against malware stealing keys, against remote attackers draining accounts, and against phishing sites that can only ever obtain a signature you decline to give. It does not protect against approving a malicious transaction you never read, and it cannot protect a recovery phrase you typed into a website because a convincing page told you to.

Phishing is the dominant real-world threat for Ledger Live users, far ahead of anything exotic. Fake apps, fake update prompts, fake support chats, and fake browser extensions all exist, and every one of them converges on the same request: enter your 24 words. Nothing legitimate ever needs them. Download Ledger Live only from the official source, and treat unexpected messages about your wallet as hostile until proven otherwise.

Physical security is the other half of the picture. A PIN protects the device against someone who simply picks it up, and three wrong entries wipe it. The recovery phrase is what genuinely needs guarding: kept offline, ideally stamped in metal, never photographed, never stored in a password manager, never typed into a screen of any kind. Ledger Live has no mechanism to help you once that phrase has leaked.

Ledger also offers an optional paid service called Ledger Recover, built with third-party providers, which stores an encrypted, fragmented backup of the seed and allows identity-based restoration. It is opt-in and subscription-based, and its 2023 announcement drew heavy criticism from users who felt that any exportable backup weakened the original promise of a key that cannot leave the chip. Whatever your position, it is a deliberate choice you make yourself, and Ledger Live does not enroll a device on its own.

One more piece of history is worth knowing. In 2020, a breach of Ledger's e-commerce and marketing database exposed customer names, email addresses, and in many cases postal addresses, which then circulated publicly. No keys or funds were involved, but that leaked contact data fueled years of targeted phishing, fake hardware shipments, and extortion messages aimed at Ledger Live users. If threatening or urgent mail about your wallet arrives at an address you only ever used once, that history is the likely explanation.

• 01Verify every receive address on the device screen, not only in Ledger Live.
• 02Read all fields on the device before approving, including the network and the fee.
• 03Keep firmware and Ledger Live current, updating only from inside the app itself.
• 04Turn on the password lock so local Ledger Live data is encrypted at rest.
• 05Never enter your 24 words anywhere except the device during a restore.
• 06Buy hardware through official channels and let the genuine check complete.

Ledger Live stores its account index, account names, and settings locally on your machine, encrypted once you set an app password. Balances and transaction history are fetched from indexing services, which means those services observe requests tied to your addresses, the same trade-off almost every wallet interface makes.

For Bitcoin, Ledger Live includes an option for advanced users to point the app at their own full node instead of the default explorer, which removes that third party from the loop entirely. It takes setup effort and hardware most people will not bother with, but the option exists for anyone who treats address-level privacy as non-negotiable.

Analytics and crash reporting are toggles in settings, off or on at your discretion. Ledger Live also offers an optional encrypted synchronization feature for keeping the account list consistent between a desktop and a phone, and what travels is account metadata rather than keys. The seed stays where it started, on the device, in every configuration.

Ledger Live itself is free. There is no license, no premium tier for basic wallet functions, and no fee for sending, receiving, adding accounts, installing coin apps, or updating firmware. Downloading Ledger Live without owning a device is possible, though there is little to do with it until hardware is connected.

Costs appear at the edges. Network fees are paid to the chain on every transaction, and third-party providers charge for buying, selling, and swapping through their own spreads and processing fees, which Ledger Live displays as part of the quote before you approve anything.

Beyond that, the hardware is a one-time purchase whose price depends on the model, and the optional Ledger Recover service is a paid subscription that nobody is required to take. Someone who buys a device, uses Ledger Live for storage and staking, and never touches the on-ramp integrations pays exactly nothing beyond the hardware and the network fees they would owe with any wallet.