Quick summary
This article compares Bluetooth, USB, and NFC connectivity for the Ledger Nano X and similar hardware wallets, focusing on real-world security trade-offs. I’ve been testing hardware wallets since 2018 and have used the Nano X in daily and cold-storage workflows. What I’ve found: Bluetooth adds convenience but increases the attack surface; USB ties you to a host but reduces radio-based threats. Read on for step-by-step pairing notes, a feature comparison, practical mitigations, and clear guidance on when to use which connection.
(If you want the full review, see the broader Nano X review. For setup instructions see first-time setup and firmware update steps.)
Connectivity options: Bluetooth, USB, NFC — what they mean
- Bluetooth: Wireless connection (Low Energy) used primarily for mobile apps. Convenient for on-the-go transactions.
- USB: Wired connection (USB-C on many newer models). Requires a cable and a host computer or phone adapter.
- NFC: Near-field communication used by some wallets for tap-to-pay style pairing. The Nano X does not include NFC; I mention NFC only to compare approaches.
Short sentence. Bluetooth is convenient. But convenience has costs.
How to pair Ledger Nano X Bluetooth — Step by step
This is a practical, safety-first pairing checklist. The exact text on your screens may differ by firmware version, so follow prompts carefully.
- Update firmware first. If you haven’t updated yet, follow firmware-update.
- Enable Bluetooth on your phone and open the companion mobile app (install only from official app stores).
- Turn on the Nano X and open the specific app inside the device (e.g., the Bitcoin app if you plan to use Bitcoin).
- In the mobile app choose the device to pair. The app and the hardware wallet will each show a pairing code.
- Verify the codes match on the Nano X screen and in the app, then confirm on the device. This step prevents blind pairing.
- Complete any PIN confirmations on the device. The wallet will establish an encrypted Bluetooth link.
Important: confirm every transaction on the Nano X screen. Never accept a transaction based only on the mobile or desktop UI.
If you want a guided walk-through of the full hardware setup (including creating your PIN and backing up your seed phrase), see Nano X setup.
Bluetooth vs USB vs NFC: security trade-offs (comparison)
| Feature / Threat |
Bluetooth (Wireless) |
USB (Wired) |
NFC (Tap-based) |
| Convenience |
High (mobile-first) |
Medium (needs cable) |
High (tap to connect) |
| Attack surface |
Higher (radio + host) |
Lower (no radio; host only) |
Medium (short range radio) |
| Air-gapped signing compatible? |
No (wireless link active) |
Possible (with offline host) |
Possible (QR workflows exist on some wallets) |
| Battery impact |
Uses device battery |
No (when connected) |
Low |
| Mitigations available |
Pairing verification, disable Bluetooth when idle |
Use trusted host, verify transactions on device |
Verify on-device UI |
Image: Bluetooth pairing screen (placeholder)
This table is a general guide. In my testing the biggest practical difference is that Bluetooth gives attackers another vector (radio), while USB concentrates risk on the host machine.
Practical attack scenarios and mitigations
What are the realistic attacks here? Three common scenarios:
- Host compromise: malware on your phone or PC submits malicious transactions. Mitigation: always verify details on the device screen and keep firmware up to date (firmware-update).
- Pairing spoof or man-in-the-middle: an attacker tries to pair or intercept Bluetooth traffic. Mitigation: confirm pairing codes on both sides and disable Bluetooth when not in use.
- Physical attacks: theft or tamper. Mitigation: use a strong PIN, consider a passphrase (passphrase-usage), and store seed backups on metal plates (seed-phrase-management).
Remember: the hardware wallet’s secure element stores private keys. Transactions must still be confirmed on the device; that’s your final line of defense.
Air-gapped signing and alternatives
Is air-gapped signing possible with the Nano X? Air-gapped signing means the signer never has an active network connection while creating signatures. The Nano X supports Bluetooth and USB; it does not offer a native QR-only air-gapped signing flow. If you need true air-gapped signing you have two reasonable paths:
- Use a dedicated air-gapped signer that supports QR or SD-based PSBT workflows (different wallet models offer this).
- Adopt a multisig setup so that a compromise of one connected device doesn’t give an attacker full control (see multisig setup).
I believe multisig is one of the most practical defenses for large holdings because it reduces the impact of any single device compromise.
Who should use Bluetooth? Who should avoid it?
Who Bluetooth suits:
- Mobile-first users who need quick access to small-to-medium-value transactions.
- People who prioritize convenience and are disciplined about verifying transactions on the device screen.
Who should avoid Bluetooth:
- Long-term cold-storage holders who prefer air-gapped or wired workflows.
- Users holding large amounts of crypto who prefer multisig or hardware setups without radio links.
This comes down to personal threat model and operational habits. If you keep most funds in cold, a Bluetooth-enabled device is fine for occasional spends, but keep the bulk in a more isolated setup.
How to reduce Bluetooth risk — a checklist
- Keep firmware current (how-to-update-firmware-steps).
- Disable Bluetooth on the device when not in use (how-to-turn-off).
- Pair only via the official mobile app from the app store.
- Verify pairing codes and the transaction details on the device screen every time.
- Use a strong PIN and consider a passphrase (passphrase-usage).
- For high-value holdings, consider multisig (multisig-setup) or an air-gapped signer.
And yes, that includes double-checking the receiving address on the device screen (not only in your wallet UI).
FAQ
Q: Is Bluetooth safe for a hardware wallet?
A: Bluetooth is safe enough for many users if you follow strict procedures: update firmware, verify pairing codes, and always confirm transactions on the device screen. For very large holdings or institutional custody, wired or air-gapped setups (or multisig) are generally preferred.
Q: Can I recover my crypto if the device breaks?
A: Yes — as long as you have your seed phrase (recovery phrase) backed up correctly. See seed phrase management for options like metal backups and SLIP-39.
Q: What happens if the company goes bankrupt?
A: Your crypto belongs to you if you control the private keys via a non-custodial hardware wallet and you have a valid recovery phrase. Company insolvency affects support and firmware updates but not your on-chain ownership. See company-bankrupt for more detail.
Q: Is air-gapped signing possible with the Nano X?
A: The Nano X doesn’t provide a built-in QR-only air-gapped workflow. If you require that model, look at devices designed for fully offline signing or use a multisig approach (multisig-setup).
Conclusion & next steps
Bluetooth on the Nano X offers everyday convenience with an increased attack surface compared to USB. For small, frequent transactions it's fine when paired securely and used with good habits. For large holdings, consider wired, air-gapped, or multisig strategies. What I've found in testing is that the device screen and firmware discipline are where most security gains come from — not the radio choice alone.
Want to read more? Check the full Nano X review, the setup guide, or the firmware update instructions. If you plan to store significant value, consider reading our multisig setup guide next.
