Ledger Live, the companion app for Ledger hardware wallets

Before a Ledger Live download can do anything beyond showing charts, it needs a transport layer to the wallet. On desktop that is USB, using the human interface device protocol so no special driver is required on Windows or macOS. On Android you can use a cable or Bluetooth Low Energy with a device that supports it; on iOS, Bluetooth is the practical route. Whichever transport is used, the traffic is command and response, not remote control: the computer asks, the device decides.

Each blockchain family is handled by a small application installed on the device itself, which is why a fresh Ledger Live download will often ask you to install a Bitcoin or Ethereum app before it can show that chain. The device app knows the derivation rules and transaction format for its chain; the desktop or mobile side knows the network and the interface. Neither works without the other.

When you add an account, the app asks the connected device for an extended public key at a standard derivation path, then scans the chain for activity under the addresses that key produces. Everything the Ledger Live download displays afterwards is derived from that public material, which is why balances still appear when the device is unplugged and locked in a drawer.

Signing follows a fixed sequence, and Ledger Live Download recommends memorizing it, because every phishing attempt on the planet tries to break it. The app assembles an unsigned transaction, sends it to the device, and the device parses and displays the destination, amount and fee on its own screen. You approve with the physical buttons or touchscreen, the device returns a signature, and only then does the app broadcast it. The private key never enters the memory of the Ledger Live download at any point in that chain.

Network data comes from indexing services and node infrastructure operated by Ledger by default. That means your Ledger Live download is asking Ledger's backend about your addresses rather than querying a full node you run yourself, which has real privacy implications discussed further down this page.

Disconnect the wallet and the software degrades gracefully rather than breaking. The Ledger Live download stays usable as a read-only portfolio and history browser; the moment anything needs a signature, it will wait for the device.

The application ships as separate packages for each operating system, and each Ledger Live download targets a specific platform and processor family. Picking the wrong one is the most common reason an installer refuses to open, so check whether your machine is Apple silicon or Intel, and whether your system is 64-bit, before you start. Ledger Live Download lists what each package contains below.

On Windows, the Ledger Live download arrives as a signed installer executable for 64-bit systems and behaves like any other desktop installer. On macOS it comes as a disk image containing the application bundle, which you drag into the Applications folder. On Linux the Ledger Live download is distributed as an AppImage for x86_64, a single portable file that you make executable and run directly, with no package manager involvement.

Linux deserves one extra note. Ordinary users often cannot access USB hardware without permission rules in place, so a udev rules file is needed before the wallet will be detected. Ledger provides a script for this; without it, the Ledger Live download runs perfectly but never sees the device.

Mobile works differently. There is no file to fetch and no checksum to compute, because installation goes through the Apple App Store or Google Play and the store handles package signing. The equivalent of a careful Ledger Live download on mobile is checking the publisher name on the store listing and refusing to sideload an APK from anywhere else. Ledger Live Download treats store installation as the only acceptable mobile path.

Hardware requirements are modest. Any reasonably current 64-bit computer runs a desktop Ledger Live download comfortably; the parts that consume time are the initial account synchronization and firmware transfers, both bandwidth-bound rather than processor-bound. Leave enough free disk space for the application and its local cache, and use a data-capable USB cable rather than a charge-only one.

There is one sourcing rule and it does not bend: a Ledger Live download must come from Ledger's own domain or from the official mobile app stores. Not from a mirror, not from a file locker, not from a link in an email, not from a message that says support sent it, and not from a torrent. Ledger Live Download states it that bluntly because every documented case of a fake wallet application depended on someone relaxing the rule for a moment.

Search results are the weakest point in the chain. Typosquatted domains, paid ads sitting above the real result, and lookalike pages that copy the official layout pixel for pixel have all been used to serve malicious installers. Type the address by hand or use a bookmark you created yourself on a day when nothing was going wrong, and treat any Ledger Live download that arrives through an advertisement as hostile until proven otherwise.

Mobile stores are safer but not immune. Impostor listings appear periodically, usually with a slightly wrong publisher name, a handful of generic reviews, and a recent publication date. Before installing, read the developer field rather than the app title. A counterfeit Ledger Live download on a phone is particularly dangerous, because it will happily present a recovery phrase entry screen that the real app never shows.

File names follow a predictable pattern that includes the product name, a version number and a platform identifier, and Ledger Live Download treats that pattern as a sanity check rather than as proof: anyone can name a file convincingly. The only real proof is the cryptographic verification described in the next section, which is why every Ledger Live download deserves five minutes with a hash command before it is executed.

Once the transfer finishes, resist the reflex to double-click immediately. Ledger Live Download suggests a short pause: confirm the file size looks sane, confirm the extension matches the platform you meant to install for, compute the checksum, and only then run it. A browser that silently redirected mid-transfer will not announce itself, but a mismatched hash will.

Verification answers a narrow question with a definitive yes or no: is the file on my disk byte for byte the file the publisher produced? It does not tell you whether the software is good, only whether it is unaltered. For wallet software that narrow question happens to be the important one, which is why Ledger Live Download gives it more space than any other step.

A SHA-256 hash is a fixed-length fingerprint of a file. Change one bit anywhere in a Ledger Live download and the resulting hash changes completely and unpredictably. So you compute the hash locally, compare it to the value the publisher lists, and either the two strings match exactly or they do not. There is no partial credit and no rounding.

The commands below print the fingerprint of a Ledger Live download sitting on your disk. Substitute the real file name, which will include the version number you received; the placeholders are deliberate, because quoting a specific version here would go stale within weeks.

First launch of a fresh Ledger Live download walks through a short onboarding flow that asks whether you are setting up a new device, restoring an existing recovery phrase onto a device, or connecting a wallet you already configured. Choose accurately, because the paths diverge; a Ledger Live download cannot undo a device initialization performed under the wrong assumption.

The genuine check runs early. The app asks the connected wallet to prove, cryptographically, that it holds an attestation from Ledger's factory keys. This detects tampered or counterfeit hardware and is a good reason to complete setup with the software from a verified Ledger Live download even if you intend to use a different interface day to day. A failed check on a device bought from a marketplace reseller is a signal to stop entirely.

After that the sequence is short, and Ledger Live Download breaks it into five steps where each one matters more than the last.

Step five is the one people skip and later regret. A small test transaction costs a network fee and proves the entire path end to end: the account derivation, the address display on the device, the broadcast, and the arrival. That single confirmation validates your whole setup far better than any inspection of the Ledger Live download that produced it.

If you are moving to a new computer, there is nothing to migrate in the classic sense. Install a fresh Ledger Live download, connect the device, add the accounts again, and the chain supplies the history. Ledger Live Download stresses this because it is genuinely reassuring: your position on the network lives in the seed and on the blockchain, not in an application folder.

Mobile setup follows the same order, with pairing replacing cabling on iOS. Bluetooth pairing exchanges no secret key material of consequence, and transactions still require confirmation on the device screen exactly as they do in a desktop Ledger Live download.

An account here is a derivation path plus its discovered history, not a login. When you add one, the software walks the standard path for that chain, finds addresses with activity, and stops when it hits a run of empty ones. That is why a restored wallet sometimes needs accounts added manually: the scan is conservative by design, and a Ledger Live download will not guess at unusual paths without being asked.

Naming accounts properly is unglamorous and pays off constantly. Ledger Live Download recommends labels like cold storage, tax lot 2024 or shared household, which turn a wall of hexadecimal into something you can act on quickly and reduce the risk of sending from the wrong place under time pressure.

The portfolio view aggregates every account into a chosen fiat currency using market data fetched by the Ledger Live download. Those totals are for orientation, not for accounting; exchange rate snapshots vary between sources. For records that need to survive scrutiny, export operation history to CSV and reconcile it against block explorer data rather than trusting the display.

Local data written by a Ledger Live download consists of account metadata, cached balances, settings and labels. It contains no private keys, which is the whole point of the architecture, but it does reveal which addresses you watch. An optional application password encrypts that data at rest and locks the interface; it protects your privacy on a shared machine and does nothing to protect your coins, since the coins are protected by the device PIN instead.

Account synchronization between desktop and mobile is offered as an optional encrypted feature, and Ledger Live Download notes that it moves account structure and labels, never keys. If you skip it, adding the same accounts on a second Ledger Live download produces exactly the same result, only by hand.

The device manager is the part of the application with no third-party replacement, and Ledger Live Download calls it the one irreplaceable job. From here you install and remove blockchain apps, see how much space remains on the device, and apply firmware updates, which is why many people who prefer another interface still keep a Ledger Live download on one trusted machine.

Removing a blockchain app does not remove funds. Keys are derived from the seed, so uninstalling the Bitcoin app and reinstalling it later reproduces the same addresses and the same balances. This matters on smaller devices with limited storage, where rotating apps in and out through a Ledger Live download is normal practice rather than an emergency.

Firmware images are transferred by the Ledger Live download and verified by the device against Ledger's signing keys before installation, so a corrupted or forged image is rejected by the hardware itself. Have your recovery sheet physically present before starting an update. Interruptions are rare, but the correct response to a failed update is a restore, and a restore is impossible without the phrase.

Updates occasionally require reinstalling blockchain apps afterwards, and you will be prompted when that happens. Let a firmware transfer finish without unplugging, closing the window, or letting the machine sleep; the Ledger Live download reports clearly when the process has completed. Ledger Live Download also recommends closing any other wallet software that might compete for the device during the transfer.

The hardware wallet model assumes your computer might already be compromised. Ledger Live Download starts from that assumption too, which is why a Ledger Live download is treated here as untrusted software running on an untrusted machine, with the device acting as the one honest party in the room.

Rule one: the recovery phrase is never typed into any software. Not into the app a Ledger Live download installs, not into a browser, not into a support form, not into a spreadsheet, not into a password manager. The phrase is entered on the device keypad or touchscreen and nowhere else. Every large theft from hardware wallet users traces back to this rule being broken, usually after a convincing message that arrived at exactly the right moment.

Rule two: verify on the device screen. A computer display can be manipulated by malware that swaps a destination address at the last instant. The device screen is driven by firmware the device itself verified. When the device screen and the Ledger Live download disagree, the device wins and you cancel.

Rule three: understand what you are approving. Simple transfers show a destination and an amount. Smart contract interactions can request broad permissions, and blind signing, where the device cannot decode the payload into readable terms, removes your ability to check what you agreed to. Ledger Live Download recommends keeping blind signing off unless a specific, understood task requires it, then turning it back off afterwards.

Phishing is the dominant attack, not exotic hardware exploits. After Ledger's e-commerce customer database was breached in 2020, contact details for many buyers circulated publicly, and a long wave of convincing emails, letters and text messages followed. Those campaigns typically push a fake update, a fake security notice or a counterfeit Ledger Live download, and they all funnel toward the same request for a recovery phrase. Ledger Live Download repeats this because the pattern has not changed in years.

Related to that: no legitimate support channel initiates contact asking for a phrase, a PIN, remote access to your screen, or a test transaction to a safe address. Anyone who does is an attacker, regardless of how much they know about your order history, your device model, or the version of your Ledger Live download.

Physical possession of the device without the PIN gains an attacker very little; the secure element wipes after repeated wrong entries. Physical possession of your recovery sheet gains them everything, and no Ledger Live download can help you once that sheet walks out of the house. Store it as you would a bearer instrument, consider a metal backup for fire and water resistance, and never photograph it. Background reading on the general category is available in the Wikipedia entry on cryptocurrency wallets.

Keep the machine that runs your Ledger Live download reasonably clean: current operating system, few browser extensions, no cracked software, and a healthy suspicion of anything that arrives as an attachment. The device protects your keys even on a bad machine, but a bad machine makes every interaction more dangerous than it needs to be.

Custody and privacy are different properties, and a Ledger Live download is much stronger on the first than the second. Your keys stay on the device, but by default your addresses are queried through Ledger's infrastructure, which means the backend can associate a set of addresses with the network connection making the request.

Balances, transaction history and market rates are all fetched over the network. That traffic is unavoidable for a synchronized portfolio, but it is the main reason privacy-focused users route their Ledger Live download through a VPN or Tor, or prefer a wallet interface that can talk to a personal full node.

Analytics and crash reporting are separate from that and can be switched off in the settings of any Ledger Live download. Turning them off does not disable balance queries, since those are functional rather than optional, but it does reduce what is sent about how you use the interface.

Third-party services reached from inside the app operate under their own policies. Buying with a card, selling to a bank account or using certain swap providers generally means identity verification with that provider, and the data you hand over there is governed by them, not by the Ledger Live download that presented the option.

On-chain privacy is its own subject, and no Ledger Live download can fix it for you. Blockchains are public ledgers, address reuse links activity together, and anyone who learns one of your addresses can follow it. Ledger Live Download mentions this because people frequently mistake self-custody for anonymity, and the two have very little to do with each other.

Most support conversations about a Ledger Live download fall into four buckets, and Ledger Live Download lists them roughly in order of frequency: the device is not detected, synchronization stalls, an update fails, or a transaction will not broadcast. None of them put funds at risk, and none of them are solved by entering a recovery phrase, which is worth restating because frustration is exactly the state phishing relies on.

Detection failures are overwhelmingly physical or contested access. Swap to a known data cable, use a port directly on the machine rather than a hub, unlock the device first, and close any other wallet software or browser tab holding the connection open. On Linux, missing udev rules are the standard cause, and a Ledger Live download will simply never see a device until they are installed.

Stalled synchronization usually clears by itself, since it depends on external indexers. If an account is stuck showing an old balance, check the same address on a public block explorer to establish whether the problem is the chain or the client. When the explorer shows the correct balance and the Ledger Live download does not, clearing the local cache from settings forces a fresh scan; it deletes cached data only and cannot touch your coins.

A failed update is best handled by starting over cleanly rather than repairing in place. Close the application, fetch a fresh Ledger Live download from the official source, verify its checksum, and install over the existing version. Because no keys live in the application folder, Ledger Live Download considers reinstalling a low-risk operation.

Transactions that refuse to broadcast are usually fee problems or a missing device app for the chain in question, and the Ledger Live download will normally say which. Check that the correct app is open on the device, that the fee is sane for current network conditions, and that the account holds enough native currency to pay for the operation, a frequent surprise when sending tokens on account-based chains.