Ledger Live, the companion app for Ledger hardware wallets

A hardware wallet on its own has no internet connection and no way to know what the blockchain looks like. Ledger Live supplies that missing half. It queries indexing services for balances and transaction history, formats the result into something readable, assembles unsigned transactions when you ask it to, and passes them to the device over USB or Bluetooth. The device does the one thing Ledger Live cannot do, which is apply a private key.

The connection between the two is deliberately narrow. When you add an account, the device exports an extended public key for the relevant derivation path. That public material lets Ledger Live derive receive addresses, scan the chain, and calculate balances indefinitely without the wallet being plugged in. Nothing in that exchange can be reversed into a private key, which is why you can open Ledger Live on a plane and still see your holdings.

Signing works in the opposite direction. Ledger Live serializes a transaction, sends it to the device, and waits. The device parses the payload with the blockchain app installed on it, renders the amount, destination and fee on its own screen, and only releases a signature after you press the buttons. If the request that reached the device does not match what the Ledger Live window claimed, the device screen is the one telling the truth. This is the whole point of the design, and it is the reason you should always read the small screen rather than the big one.

Keys are generated inside a certified secure element when you first set the device up, from entropy produced on the chip. They are protected by a PIN, they never leave the chip, and Ledger Live has no API for extracting them. A general description of wallet types is useful background if you are new to the distinction between a key store and an interface.

Ledger Live also runs an authenticity check. On connection, it asks the device to prove, through a cryptographic challenge against Ledger infrastructure, that its secure element carries a genuine attestation. A device that fails this check is flagged before you are allowed to proceed. It is a meaningful control against tampered or counterfeit units bought through unofficial channels, though it does not replace the habit of setting up a brand new device yourself and never accepting a pre-filled recovery sheet.

Much of the Ledger Live codebase is published publicly, so the way the app builds transactions and talks to the device can be inspected rather than taken on faith. That transparency matters more for an interface layer than it might seem, because the interface is exactly where a malicious change would try to hide a swapped destination address.

An account in Ledger Live is a slice of your wallet dedicated to one blockchain, derived from your recovery phrase along a standard path. Adding one requires the device and the matching blockchain app to be open on it. Ledger Live then scans forward, finds any addresses that already have history, and offers to import them along with one fresh empty account. This is why users who restore a phrase on a new device usually recover their full history within a few minutes rather than having to remember what they owned.

Multiple accounts on the same chain are normal and useful. Ledger Live lets you rename each one, so you can keep long-term holdings separate from a spending account or from funds you connect to web3 applications. The separation is real at the address level, not cosmetic, though everything still traces back to the same recovery phrase unless you are using a passphrase-protected hidden wallet.

Tokens behave a little differently. On account-based chains, tokens live inside the parent account, so a token appears in Ledger Live under the coin that pays its fees. If a token you hold is not listed, it is usually because it is not in the supported catalog rather than because it is gone. The balance remains visible on a public block explorer and remains spendable through a compatible third-party wallet driven by the same device.

The portfolio screen aggregates every account into a single value in your chosen counter-value currency, with a chart over selectable time ranges and a breakdown by asset. Ledger Live pulls the rates from market data providers, so the fiat figure is an estimate for orientation rather than an executable price. Balances themselves come from chain data and are exact.

Once accounts exist, Ledger Live can refresh and display them without the hardware wallet attached, because reading only needs public keys. Plugging the device back in is required the moment you want to sign, add a new account, or verify a receive address on the trusted screen.

Every blockchain your device can sign for needs a small application installed on it. The manager section of Ledger Live is where that catalog lives. You search for a network, install its app, and from then on the device can parse and display transactions for that chain. Ledger Live handles the transfer over the same cable or Bluetooth link it uses for everything else.

Device storage is finite and varies by model, so at some point the manager will refuse to install another app. Removing one is safe. Blockchain apps hold no keys and no funds, they are just parsers and signers, and everything they touch is derived from the recovery phrase. You can uninstall an app in Ledger Live, reinstall it a year later, and the accounts reappear with their full balance and history.

Firmware updates are the other half of the manager. Ledger Live checks for a new release, explains what changed, and walks through the installation. Firmware is signed by Ledger and verified by the secure element before it runs, so the device rejects an image that does not carry a valid signature. Keeping firmware current is what unlocks support for new networks and new transaction formats.

Two habits make updates uneventful. Confirm that your recovery phrase is written down and verified before starting, because a rare interruption can require restoring the device. And do not disconnect mid-flash. If an update does stall, the device typically boots into recovery mode and Ledger Live offers to resume, which is the normal path back rather than a sign of loss.

The manager view also reports device details such as firmware version and free storage, each shown next to a plain label. Ledger Live re-runs the authenticity check whenever it opens this section, so a genuine-check failure here deserves attention before you continue.

Receiving starts in Ledger Live but must finish on the device. The app generates an address and asks the hardware wallet to display the same string on its screen. Comparing the two and confirming on the device is not a formality, it is the defense against malware that rewrites addresses in the clipboard or in the window. Once confirmed, the address is safe to share, and Ledger Live shows it as a QR code as well as text.

Sending follows the reverse path. You pick an account, paste a destination, set an amount, and choose a fee level. Ledger Live builds the unsigned transaction and hands it to the device, which shows the recipient, the amount, the network fee, and any relevant extra fields. Nothing is broadcast until you approve on the hardware.

Fee handling is more granular than the three preset speeds suggest. For Bitcoin-style chains, Ledger Live exposes custom fee rates and coin control options, along with replace-by-fee where the network supports it, so a transaction stuck in the mempool can be bumped instead of abandoned. For EVM chains it exposes gas parameters and the nonce, which is what you need when you have to replace or cancel a pending transaction.

Contract interactions raise a real question about what the device can actually show you. Where a transaction type is understood, the device renders human-readable details, which is the safest case. Where it is not, the device may only be able to display raw data, and approving it means trusting the interface that produced it. Ledger Live and the device both warn you when you enter that territory, and the correct response is to slow down rather than to click through.

After broadcast, Ledger Live tracks confirmations and files the operation into the account history with its hash, fee, and status. Every entry links out to a public block explorer, so you can verify independently that what Ledger Live reports matches what the network recorded.

Ledger Live is not an exchange. What it offers instead is a set of integrations with regulated third-party providers for buying, selling, and swapping, presented inside the app so that the delivery address is always one your device controls. When you buy, the provider handles payment and compliance, and the coins land directly in a Ledger Live account rather than sitting on a platform balance.

Because those providers are independent businesses, availability differs by country, by payment method, and by asset. Identity verification is generally required, and it is performed by the provider under its own terms, not by Ledger Live. Fees are set by the provider too, and are shown in the quote before you commit.

Swapping works the same way. Ledger Live requests quotes from integrated exchange partners, shows the rate and estimated output, and asks the device to sign the transfer that funds the swap. The proceeds are delivered to a destination account you already hold. Rates move while you decide, so treat a quote as indicative until it is confirmed.

The practical benefit of routing these services through Ledger Live is custody. Funds spend as little time as possible under someone else's control, and the endpoint is always an address whose key sits in your secure element. The trade-off is that pricing and limits will not always beat a large exchange, so for very large orders it is worth comparing before you transact.

Several proof-of-stake networks can be staked directly from Ledger Live, either natively through the chain's own delegation mechanism or through an integrated staking provider. The flow mirrors a normal transaction. You choose an amount and a validator or provider, Ledger Live prepares the operation, and the device displays and signs it.

Delegating does not hand over your coins. In native delegation the assets stay in your account and the validator only gains the right to use their weight in consensus. What you do accept is network-level risk, including lock-up or unbonding periods that can run for days, variable reward rates, and slashing on chains that penalize validator misbehavior. Ledger Live shows the relevant terms before you confirm, and they are worth reading because they differ sharply between networks.

Rewards accrue according to each protocol's rules and appear in the account, with claiming handled either automatically or through an explicit transaction depending on the chain. Which assets are stakeable through Ledger Live changes as support is added, so the earn section in the app is the accurate list at any given moment.

Ledger Live includes a gallery for NFTs held by your accounts on supported networks, with metadata and the option to send an item to another address, again with device confirmation. Support depends on the network and the token standard, so a collection that does not render in the gallery may still be perfectly intact on chain.

Beyond your own holdings, Ledger Live carries a catalog of third-party applications and services that can operate against your accounts from inside the app. These range from staking and lending front-ends to portfolio and tax tools. They run within Ledger Live but they are built and operated by their publishers, and the usual rule applies. The signing prompt on your device is the boundary, and anything on the far side of it is somebody else's software.

For applications hosted on the open web, Ledger Live can act as the wallet a site connects to, so a decentralized exchange or marketplace can request a signature that your hardware wallet then approves or rejects. This keeps the key in the secure element while still letting you use the wider ecosystem.

Token approvals deserve one specific warning. Granting a contract permission to spend a token is a signature like any other, and an unlimited allowance stays active until revoked. Approve what the interaction actually needs, keep experimental activity in a separate Ledger Live account, and revoke allowances you no longer use.

Ledger Live runs as a native desktop application on Windows, macOS, and Linux, and as a mobile app on iOS and Android. The same account data model is used everywhere, so switching platforms means re-adding accounts with the device rather than migrating a file. There is no browser version and no account with Ledger Live that syncs your holdings to the cloud by default.

Connection method depends on the model you own. Devices with Bluetooth pair wirelessly with Ledger Live on mobile, while USB-C is the standard route on desktop. On Linux, USB access usually requires the udev rules that grant your user permission to talk to the device, which is the single most common reason Ledger Live fails to see a wallet on that platform.

Only ever install Ledger Live from the official download channels or the platform app stores. Fake wallet apps are a recurring problem across app marketplaces, and a counterfeit build asking for a recovery phrase is the most effective attack in this category, precisely because it looks like the real onboarding screen.

The two builds of Ledger Live cover the same ground, but they are not identical, and most people end up using both. Desktop is the better place for setup, long sessions, and anything involving advanced settings. Mobile is better for checking a balance, receiving funds, or signing on the move with a Bluetooth device.

The table below summarizes the differences that actually affect daily use. Exact availability varies with your device model, your region, and the version of Ledger Live installed, so the app itself is always the definitive answer.

Account data in Ledger Live lives locally on the machine where the app is installed. There is no server-side wallet, and deleting the app deletes only that local cache. On desktop you can set a password that encrypts the stored data at rest, which is worth doing on any shared or portable computer, and mobile offers a passcode or biometric lock for the same purpose.

Reading the blockchain, however, requires talking to somebody. By default, Ledger Live queries indexing infrastructure operated on Ledger's behalf, which means your extended public keys and your IP address are visible to that backend as it answers. This is a privacy consideration rather than a custody one, since none of it enables spending, but it is real and you should know about it.

Users who want to reduce that exposure have options. A VPN or Tor changes the network picture, and the advanced settings in Ledger Live on desktop expose network and explorer configuration for people who prefer to route data differently. Analytics and bug reporting are separate toggles in the settings, and both can be switched off.

Ledger also offers an optional, paid recovery subscription that can be enabled through Ledger Live for eligible devices. It is opt-in and involves identity verification with the service providers involved. Nothing changes for users who do not subscribe, and the standard model stays exactly as described on this page, with the 24-word phrase you wrote down as the only backup.

The single rule that matters most is that Ledger Live will never ask for your 24-word recovery phrase. Not during setup, not during an update, not during a support conversation, and not in a pop-up. Any screen, email, chat message, or phone call requesting those words is an attempt to steal your funds, no matter how convincing the branding looks.

Second, verify on the device. Confirm receive addresses on its screen, read the destination and amount before approving a send, and cancel anything that does not match what Ledger Live displayed. Malware that swaps addresses is common, and this one habit neutralizes it.

Third, control the software supply chain. Install Ledger Live from official sources, keep the app and the firmware updated, and be sceptical of any download link arriving by email or social media. Phishing campaigns built around fake wallet apps and fake support agents follow every major crypto news cycle, and reporting from outlets such as Reuters technology coverage is a reasonable way to stay aware of active scam patterns.

Finally, protect the backup rather than the app. Your recovery phrase, stored offline and off-camera, is what restores everything. A stolen laptop with Ledger Live installed is an inconvenience. A photographed recovery sheet is a total loss.

Device not detected is the most frequent complaint, and it is almost always physical. Try the original cable, plug straight into the machine rather than through a hub, unlock the device with its PIN, and open the required blockchain app before retrying in Ledger Live. On Linux, install the udev rules. On mobile, forget the pairing and pair again from a clean Bluetooth state.

A balance that looks wrong is normally a synchronization issue. Ledger Live keeps a local cache, and clearing it forces a fresh scan from chain data. Nothing is at risk during this, because the cache is derived information. If a balance still differs, check the same address on a public explorer to see whether the discrepancy is in the app or on chain.

A missing account after restoring a phrase usually means the derivation path in use is not the default one Ledger Live scans first, or that the relevant blockchain app was not installed at the time of the scan. Install the app, re-add the account, and let Ledger Live scan again before concluding anything is lost.

A stuck outgoing transaction is a network condition, not an app failure. Ledger Live shows the operation as pending until miners or validators include it. Depending on the chain you can accelerate it with a higher fee or cancel it by replacing it, both of which are available from the pending operation itself.

When a swap or purchase stalls, remember who is responsible for what. Ledger Live triggered the order, but the provider is executing it, and provider support holds the order reference and the compliance status. Have the transaction hash from Ledger Live ready when you contact them, since it is the fastest way to locate a payment.

A first-time setup takes about twenty minutes if you are not rushed, and rushing is the main cause of later problems. Do it at a desk, alone, with a pen and the recovery sheet that came in the box, and with no camera or screen share running.

The sequence below assumes a brand new device. If you are restoring an existing wallet, the only difference is that you enter your existing phrase on the device instead of writing down a new one, and Ledger Live then rediscovers your accounts.