# Best Hardware Wallet for Hyperliquid - Ledger vs Trezor > Which hardware wallet works best with Hyperliquid, how agent wallets keep your seed phrase offline while you trade, and the blind-signing trap to avoid. *Source: https://hyperliquidguide.com/guides/getting-started/best-hardware-wallet-for-hyperliquid* Most hardware wallet guides compare screen sizes and supported coin counts. For a Hyperliquid trader that is the wrong comparison, because the thing you actually worry about is not setup. It is whether a cold wallet wrecks your ability to trade quickly. It does not, and the reason is worth understanding before you spend anything. Hyperliquid's signing model was built around this exact problem. > **Key takeaway:** A hardware wallet on Hyperliquid does not mean confirming every order on a tiny screen. You approve a trading agent once, the agent signs your orders, and the device only wakes up for deposits, withdrawals, and re-approvals. That is a few button presses a month, not a few thousand. --- ## Why the Signing Model Matters More Than the Device Hyperliquid is [self-custodial](/guides/getting-started/is-hyperliquid-safe). There is no account to hack, no password to reset, and no support desk that can freeze a withdrawal on your behalf. Whatever key controls your wallet controls your balance, permanently. That puts the entire threat model on the machine you sign from. A browser extension holds its key in software. If your machine is compromised, whether by a malicious extension update or a fake Hyperliquid front-end you reached through a search ad, that key can be read or misused without you touching anything. A hardware wallet moves the key into a device that never exposes it and requires a physical press to authorize anything. The usual objection is speed. Nobody wants to confirm a scalp on a two-line display. That objection is based on a misunderstanding of how Hyperliquid actually works. ### Agent Wallets Do the Trading When you click "Enable Trading" on Hyperliquid, you are signing an EIP-712 typed data message that authorizes an **agent wallet**, also called an API wallet. From that moment, the agent signs your orders. Hyperliquid's [API documentation](https://hyperliquid.gitbook.io/hyperliquid-docs/for-developers/api/nonces-and-api-wallets) describes them as permissioned signers that act on behalf of a master account. What they are not allowed to do is the important part: - Agent wallets **cannot withdraw** funds from the account. - Agent wallets **cannot transfer** assets to another address. - They can be created with a maximum validity of **180 days**, after which they expire and need re-approval. So the hot key that lives in your browser and signs hundreds of orders a day has no authority to move money. The cold key that can move money sits in a drawer and gets used a handful of times a year. That separation is the whole argument for a hardware wallet here, and it is cleaner than what most chains offer. > **Tip:** This is also why you should not panic if you have been trading through a browser extension all along. The agent wallet was already limiting your blast radius. Adding hardware upgrades the part that was genuinely exposed, which is the master key that can withdraw. --- ## How a Hardware Wallet Connects to Hyperliquid Hyperliquid does not ship its own hardware wallet connector. The path runs through a software wallet. ### The Blind Signing Trap This is the part that catches people, and it gets less attention than it deserves. Hyperliquid actions are EIP-712 typed data, meaning structured messages designed to be human-readable rather than an opaque hex blob. Ledger has shipped clear-signing support for specific EIP-712 schemas, but the coverage is incomplete, and Hyperliquid's schemas are not guaranteed to be among them on your firmware version. When the device cannot render the message, it refuses to sign unless you enable **blind signing** in the Ethereum app settings. Blind signing is exactly what it sounds like: approving something you cannot read. It is not automatically dangerous, but it does remove the second pair of eyes that a hardware wallet is supposed to give you. > **Warning:** If you have to enable blind signing, verify the chain ID and the contract address in your software wallet before approving, and confirm you are on the real Hyperliquid domain rather than a lookalike. Blind signing plus a phishing site is the combination that empties accounts. Our [security guide](/guides/getting-started/crypto-trading-security-guide) covers the wider set of habits worth building. --- ## Ledger vs Trezor for Hyperliquid Both have been shipping devices for over a decade, both sign what Hyperliquid needs, and both pair with MetaMask and Rabby. The differences that matter to a perps trader are narrower than the marketing suggests. | | Ledger | Trezor | |---|---|---| | **Firmware** | Closed-source secure element | Open-source, auditable | | **Mobile signing** | Bluetooth on Nano X and Flex | USB only, desktop-oriented | | **MetaMask / Rabby** | Longest-standing integration | Supported, occasionally rougher | | **EIP-712 clear signing** | Partial coverage, may need blind signing | Partial coverage, may need blind signing | | **Price range** | $79 to $399 | $49 to $169 | | **Best for** | Traders who sign from a phone | Traders who want auditable firmware | ![Ledger's product page showing the hardware wallet range and Ledger Wallet app](/images/shared/partners/ledger-homepage.webp) ### When Ledger Is the Right Call Buy [Ledger](https://www.ledger.com/) if you trade from your phone. The Nano X and Flex sign over Bluetooth, which turns mobile confirmation from a cable-juggling exercise into a tap. Given how much Hyperliquid activity now happens on [mobile](/guides/getting-started/hyperliquid-mobile-trading), that is not a small convenience. Ledger also has the longest track record with MetaMask, which matters because most connection problems on Hyperliquid trace back to the software wallet layer rather than the exchange. If something breaks, more people have hit it before you. The counterargument is firmware. Ledger's secure element is closed-source, and after the 2023 recovery-service announcement a section of the community stopped trusting the company's posture on key extraction. Nothing has been exploited in the wild. If you find that argument persuasive anyway, no feature list will change your mind. ### When Trezor Is the Right Call Buy [Trezor](https://trezor.io/) if you want firmware you can read. It is fully open-source, the Safe models pair that with a secure element, and the company has been consistent about it for over a decade. On a self-custodial exchange, where the whole premise is not trusting an intermediary, extending that logic to your signing device is at least coherent. ![Trezor homepage highlighting open-source hardware wallet design](/images/shared/partners/trezor-homepage.webp) Trezor is also cheaper at the entry point. The Safe 3 covers everything a Hyperliquid trader needs, and there is no functional reason to spend more unless you want the touchscreen. The trade-off is mobile. Without Bluetooth, signing from a phone means cables and adapters, which in practice means you will do your withdrawals from a desktop. That is probably where you should be doing them anyway, but it is worth knowing before you buy. **Open-Source Firmware, Under $70** — The Trezor Safe 3 covers what a Hyperliquid trader needs: EIP-712 signing, MetaMask and Rabby pairing, and firmware anyone can audit. [See Trezor Devices](https://app.hyperliquid.xyz/join/Concept211) --- ## What About the Other Devices? The two above dominate for a reason, but they are not the only options. **Keystone** and **OneKey** are legitimate alternatives, air-gapped and open-source respectively, with smaller ecosystems. Both work through MetaMask, and if you already own one there is no reason to switch. **Tangem** cards are genuinely convenient and genuinely limited: the card format has no screen to verify a transaction on, which removes most of the benefit for EIP-712 signing. **Multisig setups** like Safe are the right answer above a certain balance, but Hyperliquid's agent model does not map onto them cleanly yet, so most traders running serious size use a hardware wallet on the master account and keep position sizing conservative instead. --- ## Mistakes That Cost People Money > **Warning:** **Buying from a marketplace.** Buy directly from Ledger or Trezor, or from an authorized reseller listed on their own site. Supply-chain tampering on hardware wallets is not theoretical, and a device that arrives with a pre-filled recovery sheet is a scam every single time. **Typing a seed phrase into anything.** No legitimate process ever asks for your 12 or 24 words in software. Not Hyperliquid, not MetaMask, not a support agent in a Discord DM. The device exists precisely so those words never touch a keyboard. **Letting the agent expire mid-trade.** Agents last a maximum of 180 days. When one expires, orders stop signing until you re-approve with the hardware wallet. If you are travelling without the device, that is an unpleasant surprise. Re-approve before long trips. **Treating the hardware wallet as the whole plan.** It protects your keys. It does not protect you from a bad approval, a phishing domain, or 50x on an [illiquid market](/guides/trading/liquidation-explained). The device stops one category of loss, and that category is not the most common one. --- ## Which One Should You Actually Buy If you trade from a phone, buy the Ledger Nano X. If you want firmware you can audit and you mostly sign from a desktop, buy the Trezor Safe 3 and keep the difference. If you are still deciding whether you need one at all, the honest threshold is this: once your Hyperliquid balance exceeds what you would be upset to lose to a browser compromise, the $60 device has already paid for itself. For most people that number arrives sooner than they expect. Whichever you pick, the setup is the same. The hardware wallet holds the master key, the agent wallet does the trading, and you sign a handful of times a year. The rest of what sits around a Hyperliquid account, including [tax software](/guides/trading/best-crypto-tax-software-perps-traders) and portfolio tracking, is covered in our [trader's stack](/tools/toolkit). **Secure the Account, Then Cut the Fees** — A hardware wallet protects your balance. Our referral link takes 4% off every trading fee for the life of the account, which compounds faster than most people assume. [Start Trading - Save 4%](https://app.hyperliquid.xyz/join/Concept211)