Hardware wallet companion app
Ledger Live is the free desktop and mobile application that Ledger publishes for its hardware wallets. It is where you set up a new device, add accounts, watch balances, send and receive coins, stake supported assets, reach third-party services and install firmware updates. What matters just as much is what Ledger Live does not do: it never holds your private keys, and it cannot move funds unless the physical device confirms the transaction on its own screen.
This page covers how Ledger Live works under the hood, what each part of the interface is for, which devices and operating systems it runs with, how fees and third-party providers fit in, and the habits that keep an account out of trouble. You do not need to own a device to read it, though Ledger Live only becomes genuinely useful once one is connected.
Strictly speaking, Ledger Live is an interface, not a wallet. Your wallet is the set of keys derived from the 24-word recovery phrase generated by your hardware device, and those keys stay inside the device's secure chip for their whole life. Ledger Live is the piece of software that reads the blockchain on your behalf, shows you what those keys control, and prepares transactions for the device to approve.
Open the app and the first thing you see is a portfolio view: a total in the currency you chose, a value graph over a selected period, a list of accounts and a feed of recent operations. Everything Ledger Live displays there is assembled from public blockchain data, so the numbers reflect the network rather than an internal balance sheet kept by a company. Delete the app tomorrow and the coins are still exactly where they were.
It is worth being clear about the boundaries. Ledger Live is not a custodian, not an exchange and not a bank. When you buy, sell or swap inside the app, a third-party provider handles that trade under its own terms and its own identity checks. Ledger Live arranges the introduction and hands the resulting transaction to your device for signing; the provider does the rest.
Who is it for? Anyone holding assets on a Ledger device, from a single Bitcoin account to a portfolio spread across a dozen chains. Beginners use Ledger Live mostly for setup, balances and the occasional transfer. Heavier users lean on it for staking, account organization and firmware maintenance, while still signing their decentralized finance activity in other interfaces with the same hardware.
The application is published for Windows, macOS, Linux, iOS and Android, it costs nothing, and the source code for Ledger Live is publicly available for review. Downloads should only ever come from the official Ledger website or the two official mobile app stores, because counterfeit builds of Ledger Live are a favorite trick of phishing campaigns.
Background
Ledger was founded in France in 2014 and built its reputation on hardware: small devices with a secure element chip that keeps private keys isolated from the computer they are plugged into. For the first few years, using one meant juggling separate browser applications, roughly one per coin family, plus a standalone tool for installing firmware and coin apps.
Ledger Live arrived in 2018 to fold all of that into a single program. One dashboard replaced the per-coin applications, device management moved inside, and a mobile version followed so that a Bluetooth model could be driven from a phone. Since then Ledger Live has grown steadily: staking for a widening set of networks, an NFT gallery, integrated buy and swap providers, support for the touchscreen Stax and Flex devices, and an optional encrypted sync of the account list between installations.
That growth has not been uncontroversial. The 2023 announcement of an opt-in key recovery subscription drew heavy criticism from users who felt it sat awkwardly with the promise of keys that never leave the chip, and the company responded with more documentation and clearer opt-in language. It is a useful reminder that Ledger Live is an evolving commercial product, and that reading release notes before updating is time well spent. General background on the company behind it is available on Wikipedia.
The division of labor is the whole point of the design. Your hardware wallet stores the keys and performs the cryptography. Ledger Live handles everything that does not require a secret: talking to blockchain nodes, tracking balances, formatting transactions and broadcasting them once they come back signed.
When you add an account, the device hands Ledger Live an extended public key for that derivation path. From that single piece of information the app can derive every receiving address for the account and scan the chain for their history, which is why balances still appear when the device is unplugged. An extended public key can reveal a transaction history to whoever holds it, but it can never authorize a payment.
Sending works in the opposite direction. You enter a recipient and an amount, Ledger Live selects inputs or builds the call data, estimates the fee, and passes the unsigned transaction to the device over USB or Bluetooth. The device then prints the details on its own screen. That screen is the only source of truth: malware can change what a computer displays, but it cannot change what the secure chip shows you.
Press the buttons, or tap confirm on a touchscreen model, and the device returns a signature. Ledger Live broadcasts the signed transaction and starts tracking confirmations. Reject it instead and nothing was ever exposed, because the private key did not touch the computer at any point in the exchange.
For blockchain data, Ledger Live relies on nodes and explorer services, mostly operated by Ledger itself. That is convenient and works out of the box, but it does mean the backend can see which addresses your installation queries, in the same way any wallet backend can. Analytics reporting can be switched off in the settings, and privacy-minded users often pair the same device with third-party software pointed at their own node while keeping Ledger Live for maintenance.
Ledger Live can propose, but only the device can approve. Anything that asks you to type a 24-word recovery phrase into Ledger Live, into a website, or into any other software at all, is an attack in progress, no matter how convincing the wrapper looks.
Key takeaway
Interface tour
The layout is a left sidebar on desktop and a bottom bar on mobile. The sections below map to those entries in Ledger Live, and most of them do a single job well rather than trying to be an everything app.
The dashboard totals every account in the currency you choose and draws a value graph across a selected window. Accounts can be renamed, starred and reordered, which matters more than it sounds once a portfolio spans several chains. Ledger Live treats each derivation path as its own account, so a Bitcoin Native SegWit account and a Taproot account under the same device appear side by side rather than merged.
Receiving addresses are shown twice, once in Ledger Live and once on the device, and the app insists that you compare them. That habit defeats clipboard-hijacking malware, one of the most common ways people lose funds. On the sending side you pick a fee tier, set a custom fee where the chain allows it, and on Bitcoin accounts the desktop app lets you inspect which coins are being spent.
These are third-party integrations rather than features of Ledger Live itself. Card payments, bank transfers and sell orders are handled by payment partners who run their own identity verification, and swaps are routed through exchange partners that quote a rate before you commit. Ledger Live surfaces competing quotes where more than one provider covers a pair, and the asset always lands on an address your device controls. Availability and pricing vary by country.
Ledger Live can delegate or stake on a number of proof-of-stake networks straight from the account screen, including well-known ones such as Ethereum, Solana, Cosmos, Polkadot and Tezos. The mechanics differ per chain: some pay rewards continuously, some impose bonding and unbonding periods measured in days or weeks, and some route through a staking provider integrated into Ledger Live. Rewards are never guaranteed, and locked assets cannot be sold until they unbond.
Tokens held on Ethereum and Polygon appear in a gallery with their media, grouped by collection, and can be transferred from the same screen. Ledger Live is a viewer and a transfer tool here, not a marketplace. Buying and selling happens on external platforms, with the device signing whatever those platforms request.
Every Ledger device has room for a limited number of coin applications, and this panel is where you install and remove them. Removing an app never affects funds, because access is derived from the recovery phrase rather than stored in the app. Firmware updates are delivered here too, and Ledger Live checks the device's authenticity before it will work with it.
A directory of partner services sits inside Ledger Live, and connections to external decentralized applications can be opened through WalletConnect. Signing still routes back through the hardware, so the security model is unchanged, but the transaction details originate with a third-party site. This is exactly where reading the device screen carefully pays for itself.
An optional encrypted sync keeps the account list consistent between a computer and a phone, so an account added in one place shows up in the other. Note what travels: account metadata, never keys. The settings pane also holds the display currency, language, an app lock, and the analytics toggles that control what Ledger Live reports back.
Ledger Live is built to be used with a Ledger hardware wallet, and the pairing options depend on the model you own. Bluetooth is what makes iPhone use possible, because iOS does not expose the kind of direct USB access the wired models rely on.
| Model | Connection | Screen | Desktop | Mobile |
|---|---|---|---|---|
| Nano S Plus | USB-C | Small monochrome | Yes | Android, by cable |
| Nano X | USB-C + Bluetooth | Small monochrome | Yes | iOS and Android |
| Ledger Flex | USB-C + Bluetooth | E Ink touchscreen | Yes | iOS and Android |
| Ledger Stax | USB-C + Bluetooth | Curved E Ink touchscreen | Yes | iOS and Android |
| Nano S (discontinued) | USB micro-B | Small monochrome | Legacy support | Limited |
On the desktop side, Ledger Live is distributed for 64-bit Windows, macOS and Linux, where an AppImage is the usual route. Minimum supported operating system versions move forward over time, so a machine that once worked can eventually fall off the list after an update. The mobile builds live in the Apple App Store and Google Play and want reasonably recent versions of iOS and Android.
Only one application can hold the connection to a device at a time. If a browser tab or another wallet has already claimed it, Ledger Live will report the device as busy or simply fail to see it at all. Closing the other program is normally the entire fix.
There is no requirement to use Ledger Live for every task. The same device works with a range of third-party wallets and interfaces, and plenty of people keep Ledger Live for setup, firmware and staking while signing everything else elsewhere. Coin applications and firmware, however, can only be installed through Ledger Live.
Security
Two secrets protect a Ledger device. The PIN, entered on the hardware itself, defends against someone picking the device up; a few wrong attempts and it wipes. The 24-word recovery phrase is the wallet itself, and anyone who reads it owns the funds in any compatible software, forever. Neither secret is ever typed into Ledger Live.
The signing screen is the second pillar. Because Ledger Live runs on a general-purpose computer that can be compromised, the design simply assumes the computer might be hostile and pushes the final check onto hardware you can trust. Verify the recipient and the amount on the device, every single time, even when it feels tedious.
Where the model stops is authorization you grant willingly. A device will happily sign a token approval that drains a wallet weeks later, if you approve it. Ledger Live cannot know that a contract is malicious, which is why newer firmware and app releases work hard to decode transactions into readable terms instead of an opaque blob, and to flag the risky ones. Read what is displayed before you confirm.
The most productive attack against Ledger Live users is not technical at all. Fake emails, fake support agents, counterfeit downloads and rogue browser extensions all converge on the same request: enter your 24 words to restore, migrate, validate or secure your wallet. Ledger Live will never ask for a recovery phrase, and no legitimate support process ever will. A 2020 breach of the company's e-commerce customer database handed scammers a long list of names and addresses to work from, so the phishing has been persistent and sometimes unnervingly well informed.
Supply chain risk deserves naming too. Buy hardware from the manufacturer or an authorized reseller, never second hand, and let the device generate its own recovery phrase. A device that arrives with a phrase already printed on the card is a trap. Ledger Live runs a genuine-hardware check during onboarding, which helps, but a clean purchase path is still the first line of defense.
Finally, the optional recovery subscription. It is an opt-in paid service that keeps an encrypted, split backup of the seed and restores it after identity verification. Some owners see reasonable insurance, others reject it on principle. The point for this page is that it is a deliberate choice made inside Ledger Live, not something that happens by default.
The computer proposes. The chip in your hand decides. Everything else in a hardware wallet setup is a detail of that one sentence.
Choosing where to keep crypto is really a choice about who holds the keys and where the confirmation happens. The table below sets Ledger Live plus a hardware device against three common alternatives.
| Criterion | Ledger Live with a device | Software wallet only | Exchange account | Third-party app with a device |
|---|---|---|---|---|
| Who holds the keys | Secure chip | Host machine | The exchange | Secure chip |
| Where you confirm | Device screen | On screen | Web or app | Device screen |
| Firmware and coin apps | Managed in app | Not applicable | Not applicable | Needs Ledger Live |
| Recovery route | 24 words | Seed phrase | Support ticket | 24 words |
| Cost to start | Device purchase | Free | Free, trading fees | Device purchase |
The trade is convenience for control. An exchange account can be recovered with an email and an identity document; a self-custodied wallet can be recovered only with a recovery phrase, which is why so much of the guidance around Ledger Live is really guidance about writing 24 words on paper and storing them somewhere sensible.
Using a third-party interface with the same hardware is not a competing choice, it is a complement. Ledger Live and an external wallet can address the same accounts at the same time, because both are only views onto keys the device controls.
Pricing
The application itself is free. There is no subscription for the core functionality of Ledger Live, no account to register, and no charge for holding assets or watching balances. The money goes into the hardware, bought once.
What you do pay is network fees. Every transaction Ledger Live broadcasts carries the fee the underlying blockchain demands, paid to validators or miners rather than to the app. Ledger Live estimates it, usually offers slow, medium and fast tiers, and lets you override the estimate where the protocol allows a custom value.
Third-party services carry their own pricing. Card purchases include a provider fee and a spread, swaps embed a margin in the quoted rate, and staking through an integrated provider usually involves a commission on rewards. These costs are disclosed in the flow before you confirm, they are not something Ledger Live conjures invisibly, but they are real and they vary between providers.
The one genuinely optional paid item is the recovery subscription mentioned earlier, billed monthly or annually and entirely separate from using Ledger Live day to day.
A first setup takes about twenty minutes if you do not rush the part that actually matters, which is the recovery phrase.
Get Ledger Live from the official Ledger website, the Apple App Store or Google Play. Never install a build linked from an email, an advertisement or an unfamiliar search result.
Choose a PIN on the hardware and let it generate a 24-word recovery phrase. Write the words on the supplied cards, check them one by one, and store them offline. No photos, no password managers, no cloud notes.
Ledger Live verifies that the hardware is genuine and confirms the firmware version before it lets you continue. Let it finish rather than skipping ahead.
Pick a coin, install its app on the device if required, and let Ledger Live scan for existing accounts or create a fresh one for you.
Move a small amount first. Verify the receiving address on the device screen, confirm that it arrives, and only then transfer the rest.
From there the routine is unremarkable: open Ledger Live, connect the device when a signature is needed, and update the firmware when the release notes explain why it is worth doing.
If the device is not detected, work through the boring causes first. Use the cable that shipped with the hardware or another known data cable, since charge-only cables are a frequent culprit. Close any other program that might be holding the connection, unlock the device with its PIN, open the relevant coin app, and restart Ledger Live.
A balance that reads zero after a restore is almost always an address-type mismatch rather than lost coins. Bitcoin accounts come in legacy, SegWit, Native SegWit and Taproot flavors, and Ledger Live keeps each as a separate account, so adding the other types usually brings the funds back into view. Clearing the app cache in settings forces a full rescan when data looks stale.
Devices with limited storage will refuse to install another coin application once they are full. Uninstalling the ones you are not using frees space without touching balances, because Ledger Live rebuilds account access from the device keys rather than from the app you removed.
Interrupted firmware updates look alarming and rarely are. The device usually reboots into recovery mode and Ledger Live offers to resume where it stopped. Keep the cable connected, avoid a laptop that might fall asleep halfway through, and remember that even a bricked device is only a hardware loss as long as the recovery phrase is safe.
For Bluetooth pairing trouble, forget the device in the phone's system settings and pair it again from inside Ledger Live. If the account list differs between phone and computer, the encrypted sync feature has to be switched on in both installations; without it, each copy of Ledger Live maintains its own list independently.
Practical guidance
Treat the 24 words as the only thing that truly matters. Metal backup plates survive fire and water where paper does not, and splitting a backup across two locations reduces the chance that one accident ends the story. Never digitize the phrase in any form, not even briefly.
Verify addresses on the device screen every time, for receiving as well as sending. Those five extra seconds are the entire reason the hardware exists, and skipping them hands the advantage back to malware that Ledger Live has no way of seeing.
Consider a passphrase for larger holdings. It creates a completely separate set of accounts layered on top of the same 24 words, and those accounts appear in Ledger Live only when the passphrase is entered. Forget it and the funds are unreachable, so it suits people who will manage it methodically rather than casually.
Keep the app and firmware current, read the release notes, and review the token approvals you have granted to smart contracts from time to time. Stale approvals are a standing invitation, and revoking them costs only a small network fee. Above all, be suspicious of urgency: any message pressing you to act immediately about your wallet is far more likely to be a scam than a genuine notice from Ledger Live.
Yes. Downloading and using Ledger Live costs nothing and there is no account or subscription behind its core features. You pay for the hardware wallet, for blockchain network fees when you transact, and for third-party services only if you choose to use them.
In practice, yes. Ledger Live can be installed and explored on its own, but adding accounts and signing anything requires a supported hardware wallet, because that is where the keys live.
No. Coins exist on their blockchains, and access to them comes from keys held inside the hardware. Ledger Live is a window onto that, which is why uninstalling it puts nothing at risk.
Never. Not during setup, not during an update, not during a support conversation. Any prompt to type 24 words into Ledger Live, a website, an email or a chat window is an attempt to steal the wallet.
Yes. The same device works with many third-party interfaces, and the accounts stay identical because they derive from the same recovery phrase. Coin applications and firmware updates still have to be installed through Ledger Live.
Nothing happens to the coins. The 24-word phrase follows the widely used BIP39 standard, so the wallet can be restored in other compatible software or hardware without Ledger Live being involved at all.
Thousands of coins and tokens across dozens of chains, including the major networks and their token standards. A handful of assets are reachable only through third-party wallets connected to the device rather than natively inside Ledger Live, and the in-app list is the authoritative one because it changes with each release.
Update when the app prompts you, and read the notes that accompany firmware releases. Newer versions of Ledger Live tend to carry security improvements and clearer transaction display, both of which matter more than any headline feature.