Blog ·

Oct 22, 2026 · 5 min read

Is a Ledger or Trezor wallet quantum safe?

A hardware wallet drawn in white dots: a thick slab with rounded corners, a screen showing a line of text and an amount, a round button beside it and a loop for a key ring.

People buy a hardware wallet, the small device from companies like Ledger and Trezor, because they want the safest place they can find for their crypto. So it’s unsettling to read that quantum computers will one day “break Bitcoin”, and then to see new wallets advertised as “quantum-ready”. If the newest model is ready, it’s natural to wonder whether the one in your drawer has become the weak link.

It hasn’t, though for an uncomfortable reason. A quantum computer that could steal bitcoin wouldn’t need to get anywhere near your wallet, so no wallet, old or new, can stop it. To see why, it helps to look at what a hardware wallet actually protects.

What a hardware wallet protects

Every bitcoin is locked with a pair of numbers. The private key is secret, and whoever holds it can spend the coin. The public key can be shown to anyone, and it lets the rest of the network check that a payment really came from the owner.

It works like an old-fashioned wax seal. Only you own the metal stamp, which is your private key. Everyone knows what the imprint of your seal looks like, which is your public key, so anyone can check that a letter really came from you. Nobody can look at the imprint and carve a copy of your stamp. (Okay, people did forge real wax seals, so it isn’t a perfect metaphor, but go with us.)

A hardware wallet is a safe for the stamp. It keeps the private key on a device that never connects to the internet on its own, so a virus on your laptop or a hacked exchange can’t copy it. When you send bitcoin, the payment goes to the wallet, you check it on the wallet’s own screen and press its button, and the wallet stamps the payment without the key ever leaving the device.

That protects you well against the thieves that exist today, who need to steal the stamp itself.

A quantum computer would copy the stamp from the imprint

A large enough quantum computer could do the one thing an ordinary computer can’t: look at the imprint and carve the stamp. Running Shor’s algorithm, it could work out a private key from its public key, and then sign your coins over to itself.

The imprint, though, doesn’t live in your wallet. It lives on the blockchain, Bitcoin’s shared record of every payment, where anyone in the world can read it. Your public key ends up there when you spend from an address, and some newer types of address show it from the start. Once it’s on the blockchain, it stays there for good, and no wallet, however new, can erase it.

That’s why the weak point is in Bitcoin itself. The fix is a new kind of signature that quantum computers can’t forge, and Bitcoin doesn’t have one yet. The proposal furthest along, called BIP-360, adds a type of address that keeps the public key out of view, but its authors say plainly that it doesn’t add the new signatures. As of October 2026 it is still a draft, and it hasn’t been switched on. Even after a fix arrives, owners will have to move their coins to the new kind of address themselves.

About a third of all bitcoin already has its public key on view, and which coins those are depends mostly on how they have been used.

What “quantum-ready” means on Ledger and Trezor

Both companies are preparing, and both are honest about the limits.

In mid-2026 Ledger added the two new quantum-safe methods, ML-KEM and ML-DSA, to the tools that people use to build apps for its wallets. Ledger’s chief technology officer put the effect for owners in one sentence: “As long as Bitcoin doesn’t migrate, it doesn’t change anything from a user standpoint.”

Trezor’s newest model, the Safe 7, goes a step further, and that’s where the “quantum-ready” label comes from. When a hardware wallet switches on, it first checks that its software really came from the company that made it, so nobody can slip in a fake version. The part that does this check is built in at the factory and can never be changed. On the Safe 7, that built-in check already understands the new quantum-safe signatures, so Trezor will be able to send updates that use them. Trezor’s own guide says “these updates don’t exist yet.” Older wallets can’t learn to do the same, which matters for the wallet’s own updates years from now and not for the bitcoin it holds today.

So a “quantum-ready” wallet is a wallet that will be able to sign the new way once Bitcoin accepts the new way. Until then it signs exactly like the wallet you already have. Alexei Zamyatin, who builds software on Bitcoin, said paying extra for these wallets feels like “a bit of a fear tax,” and added that he “wouldn’t invest a lot of money into a quantum wallet right now.” We agree. Ledger says its current wallets will be ready before Bitcoin changes, so there’s no reason to replace a wallet today for a change Bitcoin hasn’t made.

Your recovery words matter more than which wallet you own

When you set up a hardware wallet, it shows you 12 or 24 words to write down. Those recovery words can rebuild every key the wallet holds, and they’re the part of this story that should get your attention.

Quantum computers don’t threaten the words themselves. A wallet turns them into keys using a different kind of math, the kind used to make the scrambled fingerprint of an address, and quantum computers barely speed up attacks on it.

The words may also turn out to be the way to rescue your coins. If Bitcoin ever has to switch off today’s signatures to stop a quantum attacker, people whose public keys are exposed would need another way to prove the coins are theirs. In April 2026 a Bitcoin developer showed a working prototype that lets owners prove a wallet was made from their recovery words without revealing the words. It isn’t part of Bitcoin, and nobody has proposed adding it yet, but the idea only works for people who still have their words.

Meanwhile, the thieves who exist today want the same words. Ledger customers have received fake “security update” emails and letters ever since a 2020 leak of customer names and addresses, and every one of those scams ends by asking for the recovery words. A quantum scare is an easy new story for the same trick. No real update, quantum or otherwise, will ever ask you to type your recovery words into a website, an app or an email.

Sources

Read next