Ledger Live, the companion app for Ledger hardware wallets

§ 01

What Ledger Live is

Strictly speaking, Ledger Live is not a wallet. A wallet, in the technical sense, is a set of keys, and those keys are generated and stored on the hardware device from a recovery phrase you wrote down during setup. Ledger Live is the window onto them. It knows your public addresses, it knows what the blockchain says about those addresses, and it knows how to assemble a valid transaction, but it has no ability to authorize anything by itself.

That distinction matters because it explains the app's whole shape. Everything in Ledger Live that only needs public information happens instantly on your computer or phone. Everything that touches money stops and waits for you to confirm details on the physical device. Uninstalling Ledger Live does not delete coins, and installing it on a new machine does not move anything; the app is a viewer that can be rebuilt at any time from the device.

Before applications like this existed, hardware wallet owners assembled their own toolchain: one program for Bitcoin, a browser extension for Ethereum, a block explorer bookmarked for anything unusual, and a spreadsheet to tie it together. Ledger Live collapses that into a single dashboard covering a large catalog of coins and tokens, with a consistent flow for adding an account, receiving, sending, and checking history.

It is also worth saying what Ledger Live is not. It is not an exchange account, and no balance shown in it is held by anyone on your behalf. It is not a browser extension, so it does not inject itself into web pages. And it is not a payment processor: when you buy, sell, or swap inside Ledger Live, independent partner services handle the trade, their own terms apply, and identity checks may be required.

§ 02

How Ledger Live works with the device

The division of labor

When you plug in or pair a hardware wallet, Ledger Live asks it for public information only: the extended public keys and addresses that correspond to the accounts you have added. With those, the app can watch the chain. To spend, Ledger Live builds an unsigned transaction, hands it to the device, waits while you read and approve it on the device screen, receives the signed version back, and broadcasts it. The secret key never crosses that boundary.

The same channel carries device maintenance. Ledger Live installs and removes the small per-coin applications that a Ledger device needs in order to understand a given blockchain, and it delivers firmware updates. These are the only tasks that genuinely require the official app rather than third-party software.

Where the balances come from

Ledger Live does not run a full node for every chain on your laptop. It queries indexing services that keep a searchable copy of blockchain history, asks them about your addresses, and caches the results locally so the portfolio loads quickly. That is why a fresh install has to scan for a while before your history appears, and why a stale cache is the usual explanation for a balance that looks wrong.

Because the account data is stored on your machine, Ledger Live can show your portfolio with the device unplugged. Read the numbers, review past transactions, check prices. The moment you want to send funds or display a receiving address you can trust, the device has to be connected and unlocked.

Why the device screen is the real interface

The screen on the hardware wallet exists precisely because the screen showing Ledger Live might be lying. Malware on a computer can alter what a window displays, swapping a destination address at the last moment. It cannot alter what the device renders from the data it was actually asked to sign. So the rule is simple: whatever appears in Ledger Live is a proposal, and whatever appears on the device is the truth. Approve only when the two match.

Ledger calls the readable version of this process clear signing, and it is what you want: recipient, amount, network, and fee spelled out in human terms on the device. Some smart contract interactions cannot be decoded that way and fall back to blind signing, where the device shows a hash instead of meaning. Ledger Live and the device both warn about this, and the warning deserves to be taken literally, because approving an opaque payload means trusting the software that produced it.

§ 03

Inside the app, section by section

Portfolio

The landing view totals everything Ledger Live is tracking, converted into a fiat currency of your choice, with a chart over a selectable period and a list of accounts underneath. It is a reporting view rather than a trading screen: no order books, no leverage, just what you hold and what it is worth at current market rates.

Accounts, sending and receiving

Each coin lives in one or more accounts. Adding one means letting Ledger Live scan the device's derivation paths for that chain and picking the accounts you want to follow. From there, sending asks for a recipient, an amount, and a fee level, then defers to the device for confirmation. Receiving generates an address in the app and then displays the same address on the hardware screen, which is the step people skip and should not.

Ledger Live also keeps a per-account history with links out to public explorers, supports memos and tags where a chain requires them, and lets you rename accounts so a portfolio with a dozen entries stays readable. Custom fee settings are available for chains where transaction pricing fluctuates.

Buy, sell and swap

These flows are integrations. Ledger Live shows quotes from partner providers, and if you accept one, that provider executes the trade and the assets settle to or from an address controlled by your device. Identity verification, regional availability, payment methods, and the spread all belong to the partner, not to Ledger Live. The advantage over doing the same thing on an exchange is that the coins land on hardware immediately instead of sitting in someone else's account.

Staking and rewards

For proof-of-stake networks that support it, Ledger Live can delegate holdings to a validator and display accrued rewards without the coins ever leaving your control. Every delegation, undelegation, and claim is a transaction you approve on the device. Lock-up periods, unbonding delays, validator commissions, and slashing risk are properties of the underlying network, so read what Ledger Live shows before confirming rather than assuming rewards are risk-free interest.

NFTs and connected apps

Collectibles held by supported accounts appear in a gallery view, and Ledger Live can send them like any other asset. A discovery area lists third-party web applications and services that work with the device, and a connection layer lets Ledger Live act as the signer for external decentralized apps. Everything routed this way still ends at the same checkpoint: the device asks you to approve, and the approval screen is the one that counts.

Device management

The device section of Ledger Live shows free storage, installed coin applications, firmware version, and a genuine check that verifies the hardware is authentic Ledger hardware rather than a tampered clone. Storage is limited, so on smaller models you will occasionally uninstall one coin application to make room for another. This is safe: applications are just interpreters, and removing one never deletes funds or accounts.

Settings worth visiting once

A password lock encrypts the local Ledger Live data so a casual snoop cannot open the app and read your holdings. Analytics and reporting can be switched off. Display currency, language, and theme sit here too, along with the cache-clearing tool that fixes most synchronization oddities. Spending five minutes in Ledger Live settings after installation is the cheapest configuration work you will ever do.

§ 04

Ledger Live on desktop and mobile

There are two builds. The desktop version of Ledger Live runs on Windows, macOS, and Linux and connects to the hardware over a USB cable. The mobile version runs on Android and on iOS and iPadOS, and pairs over Bluetooth with the models that have a Bluetooth radio; Android devices can also connect by cable using USB on-the-go.

Feature coverage is close but not identical, and the desktop build is generally the one to use for firmware updates and for the first-time setup of a new device, simply because a cable is more reliable than a wireless pairing when something goes wrong mid-update. Day to day, mobile Ledger Live is perfectly capable for checking a portfolio, receiving, and sending.

Each installation of Ledger Live keeps its own local database. Installing it on a laptop and a phone gives you two independent views of the same underlying keys, which is a feature rather than a problem, though it does mean account names and settings do not carry over automatically unless you enable synchronization.

§ 05

The security model, and its edges

The strong claim behind the product is narrow and worth stating precisely: private keys are generated inside a secure chip and never leave it, so software running on your computer, including Ledger Live itself, cannot read them. A compromised app could show you wrong numbers or propose a malicious transaction, but it cannot sign one. The device's PIN, entered on the device, gates every use, and a wrong PIN entered repeatedly wipes the hardware.

That leaves a specific attack surface, and it is almost entirely social. The recovery phrase you wrote down at setup is the whole wallet. Anyone who obtains it owns the funds, regardless of where the physical device is. This is why the single most important rule about Ledger Live is a negative one.

Phishing against this user base is industrial in scale, partly because a 2020 breach of the vendor's e-commerce and marketing database exposed customer contact details, which fed years of convincing fake messages and counterfeit installers. Treat unexpected communications about your wallet as hostile by default, and get the app only from the vendor's official channels or the official mobile app stores. A search advertisement for Ledger Live is not a source; a bookmark you created yourself is.

The second habit worth building is address verification. Before receiving a large amount, display the address on the hardware screen and compare it character by character with what Ledger Live shows. Before sending, read the device confirmation rather than clicking through it. These two checks defeat the clipboard-swapping and interface-tampering malware families that account for most real-world losses.

Firmware updates arrive through Ledger Live and are signed by the vendor; the device refuses anything that fails that check. Update on a stable connection, keep the recovery phrase within reach in case a restore is needed, and do not interrupt the process. The genuine check in Ledger Live is also the right first step for any device you did not buy directly from the manufacturer, alongside the flat rule that a device shipped with a pre-printed recovery phrase is a scam.

Finally, remember what the app password protects. Locking Ledger Live encrypts local data and hides your holdings from someone who opens your laptop, but it is not a second signature: it stops browsing, not spending. Spending is stopped by the PIN on the device, and by your finger on the confirm button.

§ 06

Privacy and what leaves your machine

To display a balance, Ledger Live has to ask a server about your addresses. That means the indexing services it queries can, in principle, associate a set of addresses with a network connection. This is true of nearly every lightweight wallet, but it is worth knowing rather than assuming that hardware storage implies anonymity. Blockchain addresses are public by design, and clustering them is a mature industry.

What does not leave your machine is anything secret. Ledger Live has no copy of your keys or recovery phrase to leak, and the account database it keeps locally can be wiped and rebuilt from the device at any time. Usage analytics and crash reporting are separate from that and can be turned off in settings.

The integrated buy, sell, and swap partners are a different matter entirely. When you use them through Ledger Live, you are dealing with regulated financial businesses that will collect identity documents and keep records under their own policies. If that is a concern, the trading features are optional; Ledger Live works perfectly well as a pure send-and-receive tool for coins you acquired elsewhere.

§ 07

What it costs to use

Ledger Live itself is free. There is no subscription for holding assets, no charge for adding accounts, and no fee for sending beyond what the network demands. The hardware is the purchase; the software is the thing that makes it usable.

Network fees are unavoidable and go to miners or validators, never to the app. Ledger Live shows an estimate before you confirm and, on most chains, lets you choose a slower and cheaper option or a faster and dearer one. On congested networks that estimate can move sharply between the moment you open the send screen and the moment you approve, which is another reason to read the figure on the device.

The optional services carry their own pricing. Swap and purchase partners earn from spreads and service fees, staking validators keep a commission on rewards, and the vendor also sells a separate optional recovery subscription that is not required to use Ledger Live. Everything of that kind is disclosed in the flow before you commit, so the honest summary is that Ledger Live is free to run and the extras cost what the third party says they cost.

§ 08

Ledger Live compared with the alternatives

The useful comparison is not between apps but between custody arrangements. Ledger Live sits in a particular spot: you hold the keys, a dedicated screen shows you what you are approving, and the interface is maintained by the hardware vendor. Other arrangements trade some of that away for convenience or for wider chain support.

Note that these options are not exclusive. Plenty of people use Ledger Live for portfolio management, long-term holdings, and firmware maintenance while pointing a specialist wallet at the same device for a chain or application Ledger Live does not cover.

Table 1 / Custody and confirmation compared. Background on the underlying concept: cryptocurrency wallets.

§ 09

Using Ledger Live on more than one machine

Because the account list is stored locally, a second installation starts empty and has to rediscover your accounts from the device. That is fine but tedious, so Ledger Live includes an optional synchronization feature that copies the account list and naming between your own installations in encrypted form. It moves bookkeeping, not keys; nobody along the path can read the contents or spend anything with them.

Several hardware devices can also be used with one copy of Ledger Live, which suits households or anyone separating a long-term stash from a spending wallet. The app follows whichever device is currently connected, and the accounts belonging to each remain distinct as long as their recovery phrases are different.

§ 10

Getting started with Ledger Live

The whole setup takes under an hour, and most of that hour is spent writing down words carefully. Do it somewhere private, unhurried, with the device you actually intend to keep.

1. 01

   Get the app from a source you chose

   Install Ledger Live from the vendor's own site or the official app store listing, typed or bookmarked rather than reached through an advertisement or a link in a message. Counterfeit builds are the most common way people lose funds, and they are convincing.

2. 02

   Set up the device and record the phrase

   Ledger Live walks you through choosing a PIN and generating a recovery phrase on the device. Write the words on paper or metal, never in a photo, a password manager, or a cloud note, and store the backup away from the device itself.

3. 03

   Run the genuine check and update firmware

   Let Ledger Live verify that the hardware is authentic and install any pending firmware. Do this on a cable connection and let it finish without unplugging.

4. 04

   Install coin apps and add accounts

   Add the applications for the chains you use, then let Ledger Live scan and create the matching accounts. Name them something you will still understand in two years.

5. 05

   Test with a small amount first

   Send a token amount, confirm it arrives, then send the rest. Verify the receiving address on the device screen against the one in Ledger Live both times. This habit costs a few cents and has saved a great many people from a very expensive typo.

One extra step is worth doing once the balance is real: rehearse a recovery. Wipe a spare device, restore it from your written phrase, and check that the accounts reappear in Ledger Live exactly as expected. A backup you have never tested is a hope, not a plan.

§ 11

Common problems and what usually fixes them

Almost every support thread about Ledger Live falls into one of a handful of categories, and none of them involve lost coins. The funds are defined by the blockchain and controlled by your recovery phrase, so a broken app is an inconvenience rather than a loss.

• The device is not detected

  Usually a cable that only carries power, a hub in the way, or another wallet application holding the connection. Try a different cable and a direct port, close browser extensions and other wallet software, unlock the device, and restart Ledger Live.

• A balance looks wrong or stale

  Check the transaction on a public explorer first. If the chain shows it and Ledger Live does not, clear the app cache in settings and let it resynchronize. The cache is derived data and rebuilding it is harmless.

• A coin app will not install

  Storage on the device is full. Uninstall an application you are not using and reinstall it later; accounts and history stay in Ledger Live and nothing on-chain is affected.

• A firmware update interrupted itself

  The device will typically come back in recovery mode and Ledger Live will offer to finish the job. In the worst case you reset the hardware and restore from the recovery phrase, which is exactly the scenario the phrase exists for.

• A swap or purchase is stuck

  These orders are processed by the partner service, so the status shown in Ledger Live reflects what the partner reports. Identity checks, regional limits, and payment holds are resolved with that provider rather than with the app.

§ 12

Limits and honest criticism

Coverage is broad but not universal. New chains, unusual token standards, and specialist workflows such as multisignature coordination or advanced Bitcoin coin control are often better handled by dedicated software driving the same device. Ledger Live is designed for the common case, and it handles that well rather than trying to be every tool at once.

The trust question is real too. Ledger publishes much of the application code, but the firmware on the secure chip is not open source, so using Ledger Live means accepting the manufacturer's assurances about what the device will and will not do. The debate over an optional key-backup subscription announced in 2023 sharpened that discussion considerably, and people who reject the premise generally choose a fully open hardware stack instead. It is a legitimate disagreement about trust models, not a bug report.

There is also a commercial dimension worth naming. Buy, sell, swap, and staking modules inside Ledger Live are revenue-generating integrations, and their placement in the interface reflects that. None of it is hidden, but a portfolio dashboard that also suggests transactions is not a neutral instrument, and it deserves the same skepticism you would apply anywhere else.

Finally, the app cannot save you from yourself. Ledger Live will not recover a lost recovery phrase, cannot reverse a transaction sent to the wrong address, and cannot undo an approval you granted to a malicious contract. Self-custody moves the failure modes from a company to a person, and the person is you.

§ 13

Questions people ask