Is There A Hidden 'Backdoor' in Ledger Wallets? What's Going On + How to Keep Your Crypto Safe (2024)

Recently, there has been a lot of discussion and concern within the crypto community regarding a new feature added to Ledger hardware wallet devices. The feature in question is Ledger Recovery, a service that allows users to back up their private seed phrase through an ID-based private key recovery system.

While the update is optional, it has raised questions about the security of Ledger devices…

Learn more

Crypto Community Concerns: Ledger’s Update

A seed phrase is a list of words that serves as a backup for recoveringcryptocurrencystored in a hardware wallet. Remembering these phrases can be challenging, so people often write them down or store them on external devices. Ledger Recovery offers a way to back up seed phrases directly to users’ personal identities through three different custodians, at a cost of $9.99 per month.

Ledger has emphasized that this service is voluntary, and users can continue to back up their seed phrases themselves. However, some Ledger owners are concerned about the potential security implications for the company’s hardware wallets.

Ledger denies the existence of any backdoor on its devices and maintains that this is an entirely opt-in service. According to Nicolas Bacca, co-founder of Ledger, nothing will happen without the user’s consent, and the update does not increase the attack vectors on Ledger wallets. Nevertheless, there has been a heated debate on Twitter about whether opting into the service creates its own security risk.

The controversy arises from the fact that users need to connect their crypto seed phrases to their passports or national identity cards to confirm their identities for the Ledger Recovery service. Some argue that this connection could pose risks if the private key material is compromised or if there are software bugs that leak sensitive information. Critics are essentially accusing Ledger of disregarding customer safety.

In response, Anatoly Yakovenko, co-founder of Solana, suggests the level of trust. Users had in Ledger before the update should remain the same. If users trusted the company not to access their private keys previously. They should continue to trust them when the feature is turned off.

Learn More

How to Keep Your Crypto Safe

Deciding whether to switch wallets depends on each individual user’s knowledge of private key management. Also, their sense of personal responsibility. Hardware wallets, including Ledger, and alternatives like Trezor, CoolWallet, and KeepKey. They are considered secure options for storing large amounts of crypto. Paper wallets and mobile-first solutions are also popular choices.

Ultimately, the decision rests with the user. Ledger’s new update is optional, and those who opt-out will not experience any changes in their seed phrase management. It is crucial for crypto enthusiasts to conduct thorough research. Choose a wallet that aligns with your security preferences and needs.

Hardware wallets, such as Ledger devices, are widely recommended by security experts as the safest way to store cryptocurrencies. These physical devices store private keys offline, providing an additional layer of protection against potential hacks or online vulnerabilities.

Ledger has stated that their aim is to provide security and self-custody options for their customers. While the recent update has caused some concern, Ledger remains committed to ensuring the safety of users’ funds.

Is There A Hidden 'Backdoor' in Ledger Wallets? What's Going On + How to Keep Your Crypto Safe (2024)

FAQs

Do Ledger wallets have a backdoor? ›

Ledger denies the existence of any backdoor on its devices and maintains that this is an entirely opt-in service. According to Nicolas Bacca, co-founder of Ledger, nothing will happen without the user's consent, and the update does not increase the attack vectors on Ledger wallets.

Is it safe to keep crypto in Ledger? ›

Ledger crypto wallet is safe to use, as it does not expose your private keys or seed phrases to the internet, even when using Bluetooth.

How do I make sure my Ledger is safe? ›

Check for factory settings

Ledger never provides a PIN code in any way, shape, or form. Always choose the PIN code yourself. If a PIN code is included in the packaging or instructions to get one elsewhere, or if the device requires a PIN code the first time you use it: the device is not safe to use.

Is it possible for Ledger to get hacked? ›

The breach originated when a hacker accessed the NPMJS account of a former Ledger employee through a phishing attack. NPMJS is a platform for hosting code packages for developers. The crypto community raised concerns over why a former employee retained access to such critical company data​​.

Can my crypto be stolen from Ledger? ›

Segregate Your Assets

Ledger devices can only protect you so far. If you sign a malicious transaction with your Ledger, your funds will still be at risk. To avoid someone stealing your crypto, the best thing you can do is segregate your assets correctly.

Can the government access my Ledger? ›

Blockchain transactions are recorded on a public, distributed ledger. This makes all transactions open to the public - and any interested government agency.

What are the disadvantages of Ledger wallet? ›

Insufficient Interaction:Compared to software wallets, Ledger wallets offer limited interaction with decentralized applications (DApps), despite their superior storage capabilities. 4. Physical Deficiency:Even though Ledger wallets are safe from online threats, they can still be stolen, damaged, or lost.

Do I lose my crypto if I lose my Ledger? ›

As long as you have your recovery phrase, you will always be able to regain access to your crypto assets. You can restore any Ledger device from your recovery phrase to recover the wallet configuration and access your funds.

What happens to my crypto if Ledger goes bust? ›

How Would I Regain Access to My Crypto? In the worst-case situation where Ledger or Trezor are shut down, the retrieval process is the same as if your device had been lost or stolen. This is because neither operates in a closed system where your private keys are locked into a single device.

Is Ledger 100% secure? ›

All Ledger crypto wallets are powered by an industry-leading Secure Element chip, together with Ledger's proprietary OS that protects your crypto & NFTs from sophisticated hacks.

How do you tell if your Ledger has been tampered with? ›

Simply connect your Ledger device to the 'My Ledger' section within Ledger Live. Each time you connect, a silent genuine check will automatically run, similar to the initial check during setup.

How to make a Ledger more secure? ›

Safety tips for our users:
  1. First time sending crypto to a new address? ...
  2. Have trust in the information on the Ledger device's screen. ...
  3. Only interact with Ledger support throughout on our official support pages. ...
  4. Be cautious of scams falsely promoted as Ledger endorsem*nts. ...
  5. Never share your 24-word seed phrase with anyone.
Jun 4, 2024

Can you get scammed with a Ledger? ›

While we are confident that Ledger devices are designed to withstand all known vectors of attack, scammers are continually finding ways to use social engineering, phishing, and fraud tactics to trick crypto users to separate them from their hard-earned money.

Can Ledger block your crypto? ›

Losing Your Ledger Device Does Not Mean Losing your Crypto

Your PIN – which only you can ever know – prevents anyone else from using the device. Then, your recovery phrase keeps you linked with your precious blockchain addresses. Nobody can access your crypto – and you still can.

Does Ledger track your IP? ›

Data collected by third parties accessible from Ledger Live

You use our partners' services: information (like your name, date of birth, postal address and IP address) can be collected by our partners (or by Ledger on their behalf) to meet their anti-money laundering and customer-identification obligations.

Can Ledger wallets break? ›

Obtain a new Trezor, Ledger, or Coldcard.

If your hardware wallet is broken, you will most likely need to purchase a replacement. It's generally best to purchase devices directly from the manufacturer. See the full list of hardware wallets that Unchained supports.

Does the government have access to the Ledger? ›

Cryptocurrency wallet Ledger's new update allows governments to access users' seed phrases via subpoena, said Pascal Gauthier, the chief executive officer of Ledger.

Does Ledger have access to my private key? ›

You must write down your 24-word recovery phrase precisely and in the correct order before storing it securely. Never enter your recovery phrase on any other device. Anyone who gets your recovery phrase can take your crypto assets. Ledger does not store your private keys, nor ever asks for it.

Top Articles
Latest Posts
Article information

Author: Barbera Armstrong

Last Updated:

Views: 6639

Rating: 4.9 / 5 (79 voted)

Reviews: 86% of readers found this page helpful

Author information

Name: Barbera Armstrong

Birthday: 1992-09-12

Address: Suite 993 99852 Daugherty Causeway, Ritchiehaven, VT 49630

Phone: +5026838435397

Job: National Engineer

Hobby: Listening to music, Board games, Photography, Ice skating, LARPing, Kite flying, Rugby

Introduction: My name is Barbera Armstrong, I am a lovely, delightful, cooperative, funny, enchanting, vivacious, tender person who loves writing and wants to share my knowledge and understanding with you.