Ledger Live, the Companion App for Ledger Hardware Wallets

What Ledger Live actually is

A hardware wallet on its own is a small computer that guards secrets and signs data. It has no idea what your balance is, cannot reach the internet, and cannot tell you that a payment arrived. Ledger Live supplies everything the device deliberately lacks: network access, blockchain data, a readable interface, price information, and transaction history. Put simply, the device is the vault and Ledger Live is the front desk, and Ledger Live is the half of the pair you actually look at.

Because of that split, Ledger Live is not custodial software. Ledger Live never takes possession of funds, there is no account to register, no email login, and no balance held on a server somewhere on your behalf. What Ledger Live stores locally is a database of public information: which accounts you added, their extended public keys, cached transaction history, labels you typed, and your display preferences. Delete Ledger Live and nothing on any blockchain changes.

There are two builds of Ledger Live. The desktop client runs on Windows, macOS and Linux and talks to the device over USB. The mobile build of Ledger Live runs on iOS and Android and connects either over Bluetooth, on models that support it, or over a USB cable on Android. Feature coverage is close but not identical between them, and some device operations such as firmware work are more comfortable on the desktop version of Ledger Live simply because the connection is more stable.

How the app and the device divide the work

Key separation

When you set up a device, it generates a random seed inside its secure element and shows you the recovery phrase once, on its own screen. Every private key for every supported chain is derived from that seed inside the chip. Ledger Live receives only derived public keys, which are enough to compute addresses and watch balances but useless for spending. That asymmetry, described in general terms in any primer on public-key cryptography, is the whole point of the architecture: a compromised computer running Ledger Live still cannot move coins.

The signing round trip

A payment travels a fixed loop. Ledger Live gathers the inputs or account state, calculates fees, and builds an unsigned transaction. Ledger Live then passes that payload over the cable or Bluetooth link to the device, which parses it and prints the important fields on its own display. You compare what the hardware shows with what you intended, approve physically with the buttons or touchscreen, and only then does a signature come back. Ledger Live broadcasts it and starts watching for confirmations. Nothing in that sequence can be completed by software alone.

Readable versus blind signing

For plain transfers the device can decode the payload and show recipient, amount and fee in full, and Ledger Live mirrors the same figures on the larger screen. For smart contract calls it depends on whether the contract's data can be translated into human language. Where it can, you see the action described; where it cannot, the device warns that you are approving data it cannot interpret. Ledger Live surfaces those warnings rather than hiding them, and the practical guidance is unchanged: Ledger Live cannot vouch for a contract the hardware is unable to decode, so do not authorize it until you understand what you are interacting with.

Where the data comes from

Balances and history are not magically known. By default Ledger Live queries indexing and node infrastructure operated by Ledger, which returns the chain data associated with your public keys, plus market data for the fiat values shown in the portfolio. Advanced users who do not want to rely on that path can point the Bitcoin side of Ledger Live at their own full node, which changes who learns which addresses you are interested in. Either way, the trust question Ledger Live raises here is about privacy and availability, not about custody.

Portfolio, accounts, and the layout of the app

The Ledger Live desktop window is organized around a left rail. Portfolio is the summary view, Accounts lists everything you have added, a device section handles firmware and installed apps, and further entries cover discovery of third-party services and earning features. Ledger Live puts the four verbs you use most along the top: send, receive, buy and swap. Mobile rearranges the same ideas into a bottom tab bar, so the vocabulary of Ledger Live carries over between the two clients without relearning.

The portfolio screen in Ledger Live aggregates every account into one balance in your chosen currency, with a value graph over selectable time ranges and an allocation breakdown by asset. It is worth remembering that the fiat figure Ledger Live shows is an estimate built from third-party price feeds, not a quoted price you can transact at. The discreet mode in Ledger Live blanks amounts with placeholder characters, which is the feature people use in offices, on trains, and during screen shares.

Because account data is local, a fresh installation of Ledger Live starts empty even if you have used the same device elsewhere. Ledger Live offers an encrypted synchronization option that copies the account list between your own installations so you do not have to re-add everything by hand. That sync moves metadata, never keys, and it is optional. You can equally keep each copy of Ledger Live independent and simply re-scan with the device whenever you set up a new machine.

Adding accounts and installing device apps

Each blockchain family needs a small application installed on the hardware to handle its signing rules, and Ledger Live is where you install it. Ledger Live manages that catalogue for you: pick a coin, and the matching app is pushed over the connection. Storage on the device is limited, more so on older compact models, so Ledger Live will eventually tell you that something has to go. Removing an app is safe. Uninstalling a device app deletes no keys and loses no funds, because everything is derived from the seed and can be regenerated by reinstalling.

Adding an account in Ledger Live is a scan. With the relevant app open on the device, Ledger Live requests the extended public key for a derivation path, generates the addresses under it, and checks the chain for activity. Any address with history becomes an existing account you recover; the next unused one becomes the new account it offers to create. Ledger Live lets you hold several accounts on the same chain, rename them for your own bookkeeping, and hide the ones you no longer watch.

Tokens behave differently from native coins, and Ledger Live shows an ERC-20 balance underneath its parent Ethereum account rather than as a separate wallet. It still needs a small amount of the native coin to pay gas before it can be moved. Ledger Live recognizes a broad token list automatically and lets you add many others manually; if a token still refuses to appear, the balance is on-chain regardless and can be viewed in a block explorer while you sort out display. Bitcoin-style accounts additionally come in address formats such as native SegWit, taproot and legacy, and Ledger Live keeps them as distinct accounts because they use distinct derivation paths.

Sending, receiving, and on-device verification

Receiving starts with the receive flow in Ledger Live, which shows an address and a QR code and then asks you to confirm the same address on the hardware screen. Do not skip that step. Clipboard-hijacking malware is common and cheap, and swapping a copied address for the attacker's is one of the oldest tricks in the field. Ledger Live asks for that confirmation precisely because the machine running Ledger Live might be lying, and the device is the one component that is not.

Sending asks for recipient, amount and a fee strategy. Ledger Live offers preset speeds derived from current network conditions plus an advanced option for setting fees yourself, which on account-based chains means editing gas parameters directly. Ledger Live also flags a common beginner error, which is trying to send the entire balance without leaving enough for the fee, and provides a send-max action that does the arithmetic for you. Everything Ledger Live builds is still only a proposal until the device signs.

Once broadcast, the operation appears in the Ledger Live account history as pending and updates as confirmations accumulate. Ledger Live expands each entry to show the amount, fee, counterparty address, date and transaction hash, with a link out to a public explorer for the authoritative view. If a transaction stalls in the mempool, remember that Ledger Live cannot cancel something the network has already seen; the remedies are the ones the protocol itself provides, such as fee replacement on chains that support it, or simply waiting for the backlog to clear.

Buy, sell, swap, stake, and app connections

The buy and sell panels in Ledger Live are storefronts for regulated third-party providers rather than an exchange run inside the app. You choose an asset and a provider, complete identity checks and payment on that provider's side, and the coins are delivered to an address belonging to your own account. Ledger Live is the place the quote is presented and the destination address is verified on the device; the commercial relationship, the fees and the customer support for that purchase belong to the provider you selected, not to Ledger Live.

Swapping works on the same principle for crypto-to-crypto trades, with Ledger Live comparing offers from integrated services and routing the trade while the funds start and end under your keys. Staking is different again: on supported proof-of-stake networks, Ledger Live builds the delegation transaction that the device signs, so your coins remain in your own account while participating in consensus through a validator. Read the specifics of each network before delegating through Ledger Live, because lock-up rules, unbonding periods, reward schedules and slashing conditions are set by the protocol and vary widely.

For decentralized applications, Ledger Live can connect to web apps through WalletConnect sessions, and the device remains the signer for every request that session generates. Approving a connection is not approving spending, but approving a token allowance is, and unlimited allowances are a recurring source of loss across the whole industry. Treat a connection request from a site you did not open yourself as hostile, and review what each prompt in Ledger Live is actually asking the device to sign. Ledger Live can only show you the request; the judgment is yours.

Firmware, genuine check, and device maintenance

The device section is where hardware maintenance happens. Every time a device is connected, Ledger Live runs an authenticity check, a cryptographic challenge that a genuine secure element can answer and a clone cannot. The same screen in Ledger Live reports firmware version, free storage, installed apps and battery state on models that have one, which makes it the first place to look when something behaves oddly. Ledger Live will refuse to proceed if that check fails.

Firmware updates are delivered through Ledger Live and are worth installing, since they carry security fixes and support for new chains. The routine matters: have your recovery phrase physically available before you start, use a reliable cable, and do not disconnect mid-update. Device apps are usually cleared during the process and reinstalled afterwards, which is normal housekeeping rather than data loss. In the rare case that a device needs a factory reset, the recovery phrase restores every account, and Ledger Live rediscovers them by scanning the chains again.

Optional paid services also appear in this part of Ledger Live, including a subscription-based key recovery offering that is opt-in and off by default. Whether that suits you is a personal judgment about backup risk versus third-party involvement, and nothing about it is required to use Ledger Live normally. A device set up with a self-managed recovery phrase and no extra services remains the baseline configuration.

Security model, privacy, and phishing

Be precise about what the design protects. The combination of hardware and Ledger Live defends well against remote attackers on your computer or phone, because a stolen file or a keylogger yields no signing capability. It defends against a lost or stolen device, because the PIN wipes the chip after repeated wrong entries and the recovery phrase restores elsewhere. Neither the device nor Ledger Live defends against you approving a malicious transaction on the device screen, against a leaked or photographed recovery phrase, or against physical coercion. Those are the failure modes that actually empty wallets.

Phishing is the dominant risk, and it usually imitates Ledger Live itself. Counterfeit installers advertised in search results, fake support agents in chat channels, and emails claiming your wallet must be re-validated all converge on one demand: type your 24 words into a screen. A 2020 leak of customer contact data from the vendor's e-commerce systems gave scammers a durable mailing list, and those campaigns have continued for years. The defense is a single sentence you should treat as absolute. Ledger Live will never ask for your recovery phrase, for any reason, in any version of Ledger Live, on any platform.

Privacy sits on a different axis from custody. Since Ledger Live asks remote infrastructure for the history of your public keys, that infrastructure can associate a set of addresses with a connecting network address, which is the same trade-off any lightweight wallet makes when it does not run its own node. Ledger Live lets you switch optional usage analytics off in the settings, a local password lock keeps the app's data at rest from casual snooping, and pointing Bitcoin accounts at your own node removes the third-party lookup entirely. If on-chain privacy is a serious requirement for you, it is worth reading a general reference on cryptocurrency wallets alongside the settings that Ledger Live exposes.

How this setup compares with the alternatives

The honest comparison is not app against app but custody model against custody model. Ledger Live paired with a device sits between an exchange account, where a company holds the keys, and a browser or phone wallet, where the keys live on an internet-connected machine. Each column below buys you something and costs you something, and Ledger Live occupies the middle position deliberately.

Many people use more than one of these at once, and that is reasonable. A small spending balance in a hot wallet, a trading balance on a platform, and long-term holdings behind Ledger Live and a device is a common arrangement, because it matches the friction of each tool to the value it guards.

Platforms and connection methods

Which connection Ledger Live uses depends on the device model and the operating system in front of you. Wired connections are generally the most reliable for long operations such as firmware work, while Bluetooth is what makes the mobile build of Ledger Live comfortable on a phone with no spare cable.

How to get started

The first run of Ledger Live follows a genuine sequence, and skipping ahead is where new users get into trouble. Work through it in order, with the device in front of you and no one watching your screen.

1. 01

   Install from a source you verified

   Get the installer from the official channel or the platform app store, typing the address yourself rather than following an advertisement. Counterfeit builds of Ledger Live are the single most common way people lose funds before they ever hold any.

2. 02

   Set up the device

   Choose a PIN and let the hardware generate a new recovery phrase. Write the words on paper or metal, in order, and never photograph them. Ledger Live guides the flow but the secret is created and displayed only by the device.

3. 03

   Run the checks

   Let Ledger Live perform the authenticity check and apply any pending firmware update, then confirm the backup quiz if your model offers one. Fix anything Ledger Live flags here before moving coins.

4. 04

   Install apps and add accounts

   Install the device app for each chain you use, then let Ledger Live scan and create the matching accounts. Name them clearly now; it saves confusion later when the account list in Ledger Live grows.

5. 05

   Test with a small amount first

   Send a token amount in, confirm that Ledger Live shows it arriving, then send a little back out so you have practiced the full loop while the stakes are trivial. Only after that round trip should larger balances follow. Many long-time users of Ledger Live also rehearse a restore onto a spare device, which proves the written phrase is correct rather than merely assumed.

Common problems and what they usually mean

Most support questions about Ledger Live fall into a short list, and almost none of them involve missing money. Balances live on the blockchain, not inside Ledger Live, so a display problem is a display problem. Work from the cheapest fix upward before assuming anything is wrong with the device.

• Device not detectedTry a different cable, since many are charge-only, then a different port, and close any other wallet software or browser tab holding the connection. On Linux the fix is usually the device access rules that Ledger Live can install for you.
• Balance shows zero or is out of dateForce a synchronization, and if that fails clear the local cache so Ledger Live rebuilds its history from the network. Check the transaction hash in a public explorer to confirm the chain agrees with you.
• Coins arrived but no account appearsUsually the funds were sent to a different derivation path or address format. Add the account again in Ledger Live choosing the alternative path, and the history should surface.
• Bluetooth pairing failsRemove the stale pairing from the phone's system settings as well as from Ledger Live, restart both, then pair again from scratch.
• Update interruptedReconnect and let Ledger Live resume; if the device is stuck in bootloader mode, the recovery procedure reinstalls firmware, and your recovery phrase restores the accounts if a reset proves necessary.

One rule governs all of them. Any solution that involves entering your 24 words into Ledger Live, a website, a spreadsheet, a support chat or a recovery tool is not a solution, it is the attack. Genuine troubleshooting in Ledger Live only ever touches cables, cache, settings and firmware.

Frequently asked questions