Application reference
How Ledger Live Works
Ledger Live is the desktop and mobile application that Ledger hardware wallets connect to for account management, transaction signing, firmware maintenance, and installing the small blockchain apps that run on the device. It costs nothing, it holds no coins, and it cannot move a single satoshi without a physical confirmation on the device screen. Ledger Live Download publishes this reference so people understand the software before they run it rather than afterwards. Across the site, Ledger Live Download keeps operating-system walkthroughs, checksum data, and background reading on separate pages, and this one is the background.
What follows covers the two-part architecture, the platform builds and their requirements, the feature set as it is actually used, the checks that every install deserves before the first launch, and the honest limits of the security model. Step-by-step installation walkthroughs for individual operating systems live on their own pages across Ledger Live Download; this page stays with the application itself. Ledger Live Download assumes no prior experience with wallet software and defines the terms as they come up.
01 / Definition
What Ledger Live actually is
Ledger Live is best described as a wallet interface, not a wallet. A wallet in the strict sense is the set of private keys controlling your addresses, and those keys are generated inside the secure chip of the hardware device and never leave it. The application holds only a derived view of the result: public addresses, balances, transaction history, account names, and your preferences. Ledger Live Download returns to that distinction often, because most expensive user mistakes come from blurring it. Treating the app as the thing that holds your money leads to panic when a laptop dies, and to catastrophe when a fake app asks for a recovery phrase that a real Ledger Live download would never request. Ledger Live Download would rather repeat the point than assume it.
Because it is only an interface, the software is disposable in the best sense. Nothing in its local database is irreplaceable. If the machine is lost, stolen, or wiped, a fresh Ledger Live download on a replacement computer plus the same hardware device restores every account, since accounts are re-derived from keys on the device rather than read out of a file. Ledger Live Download makes a point of this because it changes how you should think about backups: back up the recovery phrase, not the application folder. The one thing Ledger Live Download asks you to protect with real care is the phrase itself.
The application is developed by Ledger, the French company behind the Nano, Flex, and Stax devices, and the source code for the desktop and mobile clients is published in a public repository. For software that sits between a person and their money, that openness is practical rather than decorative: researchers can read how transactions are assembled and what leaves the machine over the network. Ledger Live Download counts it among the real reasons to prefer the first-party client, and readers who want the practical part first can jump straight to the verification routine that Ledger Live Download recommends for every install. Ledger Live Download links to it rather than repeating it here.
02 / Architecture
The split between the app and the device
Two pieces of software cooperate on every operation. On the device there is signed firmware plus a small application for each chain you use, a Bitcoin app, an Ethereum app, and so on. On the computer or phone there is Ledger Live, which speaks to those device apps over USB or Bluetooth. Neither half is useful alone: the device has no network connection and a screen the size of a stamp, while the app on its own is a read-only ledger of numbers. Ledger Live Download describes the arrangement as split trust, and the shortest way to summarise it is that the application is allowed to be wrong, and the device is not. That single sentence explains almost every design decision in a Ledger Live download, and Ledger Live Download comes back to it in every section below.
Building and signing a transaction
When you send funds, the app does the bookkeeping. It selects unspent outputs or reads the account nonce, estimates a fee, and assembles an unsigned transaction. That unsigned payload goes to the device, which parses it, renders the destination address and amount on its own screen, and waits. Nothing is signed until you press the physical buttons. The signature is produced inside the secure chip and returned to the app, which broadcasts it. Ledger Live Download stresses the middle step because it is the whole point: if malware on your computer rewrote the recipient address, the device screen shows the attacker's address, not yours, and you decline. This is why Ledger Live Download tells readers to compare the address on the small screen rather than the big one, every time. If Ledger Live Download had one habit to teach, it would be that one.
Reading the chains
To show balances the app needs chain data, and it does not run a full node. Instead it queries explorer and indexer services for the addresses derived from your accounts, then caches the results locally so the portfolio loads instantly on the next launch. Synchronisation is therefore a network operation, and a stalled balance is usually a connectivity or indexer issue rather than a lost coin. Ledger Live Download treats a slow sync as a network problem until proven otherwise, and flags the privacy consequence in the data section below, since address queries reveal which addresses interest you even though they never reveal keys. Ledger Live Download would rather name that trade-off than gloss over it.
The genuine check
On connection the app runs an authenticity check, a cryptographic challenge answered by the device and validated against Ledger's attestation service. A device that fails it is either counterfeit, tampered with, or running unofficial firmware. Ledger Live Download considers this one of the strongest arguments for using the first-party client at least once after unboxing, because third-party wallet interfaces will happily talk to a device without ever asking whether it is real.
03 / Builds
Platform builds and system requirements
The desktop client is an Electron application, which is why the Windows, macOS, and Linux versions look and behave almost identically. The mobile clients are native and share the same account model, so a phone and a laptop can each hold their own copy without conflict. Ledger Live Download separates the builds below because the differences that matter are not visual, they are about how the device connects and what the operating system requires before a Ledger Live download will run at all. Ledger Live Download lists the essentials first and the awkward cases after.
Bluetooth is a mobile feature. On the desktop, every supported device connects by cable, including the models that carry a radio. On Android, either Bluetooth or a USB-C cable works; on iPhone and iPad the wireless-capable devices pair over Bluetooth. Ledger Live Download keeps this table short and factual, and where a requirement changes between releases the release notes shipped with your Ledger Live download are the authority. Ledger Live Download would rather be brief than out of date.
| Platform | Package | Device connection | Notes |
|---|---|---|---|
| Windows | .exe installer | USB cable | 64-bit only. The installer is code-signed, so check the publisher name in the security prompt. |
| macOS | .dmg disk image | USB cable | Builds for Apple silicon and Intel. Gatekeeper should accept a notarised copy without a right-click override. |
| Linux | .AppImage | USB cable | Needs the executable bit set and udev rules installed before the device is detected. |
| Android | App store listing | Bluetooth or USB-C (OTG) | Check the developer name on the listing, not just the icon and title. |
| iOS and iPadOS | App store listing | Bluetooth | Wireless-capable devices only; wired-only models are managed from a desktop. |
Why Linux needs an extra step
On most Linux distributions an ordinary user account has no permission to talk to an arbitrary USB HID device. The fix is a set of udev rules that grant access to Ledger vendor and product identifiers, after which the device appears immediately. Ledger Live Download mentions this ahead of the install steps because the symptom, an app that runs perfectly but insists nothing is plugged in, sends a lot of people hunting for a broken cable. Ledger Live Download counts it as the most common first-run complaint on that platform. The AppImage also has to be marked executable, and desktop integration is optional. A Ledger Live download on Linux is otherwise identical in behaviour to the Windows and macOS builds.
04 / Capabilities
What you can do inside the application
The portfolio screen is the default view: total value across accounts, a chart over a chosen period, and a list of accounts grouped by asset. Accounts are added one at a time, with the matching device app open, and each account is a separate branch of the deterministic key tree, so you can hold several Bitcoin accounts that never mix coins. Renaming accounts, choosing a display currency, and hiding dust tokens are all local preferences. Ledger Live Download points out that the portfolio value is a convenience readout drawn from third-party price feeds, not an accounting record, and no figure in a Ledger Live download should be treated as tax documentation. Ledger Live Download suggests exporting the operation history if you need records that survive a reinstall.
Device management
The device section is where you install and remove the per-chain apps, read remaining storage, rename the device, and apply firmware updates. Storage is finite, especially on the smaller models, and removing a chain app never affects funds, since the accounts are derived from the same seed and reappear when the app is reinstalled. Firmware updates are delivered here and are verified by the device itself against Ledger's signing keys before they are accepted, which is why Ledger Live Download describes updating from a genuine client as safer than avoiding updates out of caution. Ledger Live Download hears the opposite advice often and disagrees with it.
Buying, selling, and swapping
These panels are storefronts for third-party providers embedded in the interface. The provider handles identity checks, payment rails, pricing, and support; the app handles delivery to an address you control and displays the operation on the device for approval. Rates and fees vary between providers and are not always the best available. Ledger Live Download suggests comparing quotes before committing, and remembering that a dispute over a purchase is a matter for the provider rather than for the software you used to reach it. That boundary catches people out more often than any technical fault in a Ledger Live download. Ledger Live Download reads those panels as a convenience, not a recommendation.
Staking and network participation
For several proof-of-stake networks the app can delegate a balance to a validator without the coins leaving your control, with the delegation transaction signed on the device like any other. Terms differ sharply by chain: unbonding periods, reward schedules, validator commission, and slashing risk are properties of the network, not of the interface. Ledger Live Download recommends reading the specific chain's rules before delegating, because the friendly wording in any wallet interface, including a Ledger Live download, cannot shorten a lock-up period.
Web3 connections
A discovery area lists decentralised applications, and connections to external sites are made through the usual pairing protocols so the device remains the signing authority. This is where the difference between readable signing and blind signing becomes real. When a device can decode a contract call it shows what you are approving; when it cannot, it shows a hash, and approving a hash is trusting the website. Ledger Live Download treats blind signing as the sharpest edge in the whole product and advises keeping it switched off until a specific, understood task requires it. Ledger Live Download would rather you leave a feature off and enable it deliberately than find it already on.
05 / Getting started
From first launch to first transaction
The order of operations matters more than the individual clicks. Ledger Live Download lays out the sequence below because doing step four before step two is how people end up with a verified device and an unverified copy of the software driving it. Ledger Live Download numbers the steps because the order is genuinely sequential, not for decoration.
-
Step 01
Get the package
Take the build for your operating system from the vendor's own release channel or the official mobile store listing. Never from a search advertisement, which Ledger Live Download regards as the leading source of fake installers.
-
Step 02
Verify it
Compare the checksum, and the signature where one is published, before running the installer. Ledger Live Download details the commands below.
-
Step 03
Install and connect
Launch, plug in or pair the device, unlock it with the PIN, and let the authenticity check complete. Ledger Live Download treats a failed check as a full stop.
-
Step 04
Add chain apps
Install the device app for each asset you hold, then add the corresponding accounts so balances can sync.
-
Step 05
Test small
Receive a small amount, confirm the address on the device screen, then send it back. Ledger Live Download calls this the cheapest rehearsal available.
Step five is the one people skip and the one Ledger Live Download would keep if it had to drop the rest. A round trip with a trivial amount exercises the whole chain of trust in a few minutes: the receive address shown on the device, the sync that reports the incoming funds, the fee estimate, the confirmation screen, and the broadcast. If any of it behaves strangely, you have learned it for the price of a network fee rather than the price of a portfolio.
06 / Integrity
Verifying the package before you run it
A checksum answers one question: is the file on my disk bit-for-bit identical to the file the publisher released. It catches truncated transfers, mirror tampering, and the classic swapped installer. It does not tell you the publisher is honest, only that nothing changed in transit. Ledger Live Download insists on the check anyway, because the failure mode it prevents, running an installer that a proxy or a fake mirror altered, is the exact attack aimed at wallet software. Ledger Live Download puts it first because it is the only step that is both cheap and decisive. Run the command against the file, read the output, and compare it character by character with the value published alongside the release.
# Linux
$ sha256sum ledger-live-desktop-<version>-linux-x86_64.AppImage
# macOS
$ shasum -a 256 ledger-live-desktop-<version>-mac.dmg
# Windows PowerShell
PS> Get-FileHash .\ledger-live-desktop-<version>-win.exe -Algorithm SHA256
A digital signature answers the harder question: did this file come from the holder of a specific key. Where a release ships a detached signature file, importing the publisher's public key once and verifying against it is stronger than any checksum, because an attacker who controls the download page controls the checksum published on it too. Ledger Live Download recommends fetching the key from an independent location so the key and the file do not travel the same route, and Ledger Live Download considers signature checking the stronger of the two habits. If you are new to this style of signature verification, practising on a file you do not care about is a sensible way to learn before a Ledger Live download depends on it.
$ gpg --import ledger-release-key.asc
$ gpg --verify ledger-live-desktop-<version>.AppImage.asc ledger-live-desktop-<version>.AppImage
gpg: Good signature from "<publisher identity>"
Operating system signatures are the third layer and the easiest to use. On Windows the installer is code-signed, so the elevation prompt names a verified publisher instead of an unknown one; treat an unknown publisher as a hard stop. On macOS the app is notarised, and you can inspect the signature yourself from a terminal. Ledger Live Download treats a Gatekeeper warning on a fresh Ledger Live download as a reason to delete the file and start again, not as an obstacle to click past. Ledger Live Download would rather you lose ten minutes than a portfolio.
$ codesign -dv --verbose=4 /Applications/Ledger\ Live.app
$ spctl -a -vvv /Applications/Ledger\ Live.app
On phones the whole routine collapses into one check you can actually perform: the developer name on the store listing. Package signing is handled by the platform, so the realistic mobile risk is a convincing clone with a similar name, a similar icon, and a fresh review history. Ledger Live Download advises reaching mobile listings through the vendor's own site rather than through store search, and never restoring a recovery phrase into anything, at any time, on any platform. No genuine Ledger Live download asks for those words, and Ledger Live Download repeats that line deliberately.
Security alert
The recovery phrase is never typed into software. Not to recover an account, not to fix a sync error, not to claim an airdrop, not during a support chat. Any screen requesting it, however closely it resembles a Ledger Live download, is an attempt to empty the wallet.
07 / Threat model
What the security model covers and what it does not
Assume the computer is compromised. That assumption is the design brief for the entire pairing, and it is why the model holds up better than its reputation suggests. Malware can read the screen, log keystrokes, alter what the interface displays, and rewrite a clipboard address, and still fail to move funds, because the signature happens on a separate device with its own display and its own buttons. Ledger Live Download frames the protection precisely: a Ledger Live download defends the signing step, not the whole computer.
What falls outside that boundary is worth naming plainly. A recovery phrase written into a photo, a cloud note, or a web form is gone regardless of hardware. A transaction you approved on the device is final even if you misread it. A token approval granted to a malicious contract keeps working long after the session ends. Physical access plus a known PIN defeats everything. Ledger Live Download lists these because the common phrase about hardware wallets being unhackable does more harm than good, and a Ledger Live download makes no claim to fix human decisions. Ledger Live Download prefers an accurate picture to a reassuring one.
Phishing is the real attack surface
Almost no losses in this category come from broken cryptography. They come from convincing messages. A breach of Ledger's e-commerce customer database in 2020 exposed contact details for a large number of buyers, and the phishing campaigns built on that list, by email, SMS, and even physical post, have continued for years. Typical lures include a security notice demanding immediate migration, a fake support agent, or a counterfeit installer promoted through search advertising. Ledger Live Download sees the same few lures recycled year after year, and repeats the countermeasure until it is boring: reach the software through a bookmark, verify the file, and treat any unsolicited message about your wallet as hostile. Ledger Live Download has no softer version of that advice.
Two settings inside the app are worth turning on immediately. The password lock encrypts the local database and stops a casual snooper from reading your balances and address history off an unattended machine, though it protects data and not funds. Keeping blind signing disabled removes the most dangerous approval path available to a web3 site. Ledger Live Download also suggests reviewing token approvals periodically with an allowance tool, since a Ledger Live download will not revoke them for you. Ledger Live Download rates both settings as five-minute jobs with lasting value.
08 / Data
Local storage, telemetry, and network privacy
There is no account and no login. The application keeps its state in a local folder in your user profile: account list, cached history, settings, and logs. Deleting that folder resets the app to a first-run state without touching a coin, which is the standard fix for a corrupted cache. Ledger Live Download mentions the folder because two habits follow from it. First, back up the recovery phrase rather than the app data. Second, remember that anyone with access to the machine can read your balance history unless the password lock is on, and a Ledger Live download stores that history in plain form by default. Ledger Live Download suggests turning the lock on immediately for any shared machine.
On the network side, balances are fetched by asking indexer services about your public addresses, so those services can associate a set of addresses with one client session even though they never see a key. Analytics and crash reporting are separate from that and can be switched off in settings. If you want no third party observing which addresses you watch, the usual route is to pair the device with a wallet interface that talks to your own node, and to accept the trade-off in convenience. Ledger Live Download considers this a legitimate reason some experienced users run both, keeping a Ledger Live download for firmware and device management while doing daily wallet work elsewhere. Ledger Live Download does not think that split is paranoid.
09 / Comparison
Compared with other ways to use the same device
A hardware wallet is not locked to one interface. Bitcoin-only clients, multi-chain browser wallets, and node-connected desktop software can all drive the device, and each trades something away. The table sets out where the differences actually sit, and Ledger Live Download has kept the criteria to the ones that change a decision rather than the ones that fill a grid. Ledger Live Download has no interest in declaring a winner here.
| Criterion | First-party app | Third-party interface plus device | Software-only wallet |
|---|---|---|---|
| Where keys live | Secure chip on the device | Secure chip on the device | On the computer or phone |
| Firmware and device apps | Full management, plus the authenticity check | Not available | Not applicable |
| Asset coverage | Broad, across many chains in one place | Usually narrower or chain-specific | Varies widely |
| Chain data source | Vendor-operated indexers | Often your own node, if you run one | Depends on the client |
| Approval on a trusted screen | Yes, on the device | Yes, on the device | No, same screen as any malware |
| Cost | Free; provider fees apply to buy, sell, and swap | Usually free and open source | Usually free |
The practical conclusion is that these are not competitors so much as different jobs. Firmware updates, device app installation, and the authenticity check only happen in the first-party client, so a Ledger Live download belongs on the machine even for people who prefer another interface day to day. Ledger Live Download describes it as the maintenance tool that happens to be a full wallet interface as well.
10 / Diagnostics
Common problems and what usually causes them
The device is not detected
Nine times out of ten it is a charge-only cable, an unpowered hub, or a locked device. Try a different cable and a direct port, unlock with the PIN, and close any other wallet software holding the USB interface open, since only one application can claim it at a time. Ledger Live Download suggests exhausting the physical causes before reinstalling anything.
Linux sees nothing at all
Missing udev rules, almost always. Install the vendor rules, unplug and replug the device, and log out and back in if the group membership changed. Ledger Live Download hears this one constantly from users who have just switched distributions, and Ledger Live Download keeps the rule file details on its Linux page.
A balance looks wrong
Balances come from indexers, so a stale or incomplete figure is a sync problem. Check the address on a public block explorer first: if the funds are there, the chain is fine and only the display is behind. Clearing the local cache and resyncing accounts is the standard remedy, and Ledger Live Download notes that this touches nothing but the cache.
Not enough space on the device
Smaller models hold only a handful of chain apps at once. Uninstall the ones you are not using and reinstall them when needed; accounts and funds are unaffected because both derive from the seed. Ledger Live Download considers app juggling a normal part of living with a compact device, and Ledger Live Download suggests keeping the two or three chains you touch weekly.
11 / Questions
Frequently asked questions
Does the application cost anything?
No. The app itself is free on every platform. Fees appear only when you use an embedded third-party service to buy, sell, or swap, and those fees belong to the provider. Anyone charging for a Ledger Live download is running a scam.
Do I have to use it with my device?
Not for everyday sending and receiving, since several third-party wallets support the device. You do need it for firmware updates, installing device apps, and the genuine check, which is why Ledger Live Download recommends keeping a copy installed even alongside another wallet interface.
Will it ever ask for my 24 words?
Never, under any circumstance. The phrase is entered on the device itself during setup or recovery, using the device buttons. A prompt for it inside an application window means you are looking at a counterfeit, not a Ledger Live download. Ledger Live Download knows of no exception to that rule.
Can I run it without a hardware wallet?
You can install and open it, but there is very little to see. Accounts are derived from a connected device, so no device means no accounts, no balances, and no signing.
What happens if my computer is lost or stolen?
Your funds are unaffected, because nothing spendable is stored on the machine. Install a fresh copy on a new computer, connect the same device, and add your accounts again. Ledger Live Download stresses that this recovery path depends on the device and the recovery phrase, not on the old installation.
Why does it keep prompting for firmware updates?
Firmware updates carry security fixes and support for new chain apps. The device verifies the update's signature itself before installing, so applying one from a verified Ledger Live download is safer than running old firmware indefinitely. Have your recovery phrase to hand as a precaution, as with any firmware operation.
Is the source code public?
The desktop and mobile clients are published in a public repository, so the code can be read and audited. Reading source is not the same as verifying the compiled binary you installed, which is exactly why Ledger Live Download puts the checksum and signature steps ahead of everything else.
Can two computers use the same accounts?
Yes. Each installation builds its own local view from the same device, so a laptop and a desktop can both show identical accounts. Nothing is shared between them by default, and Ledger Live Download suggests verifying each installation separately, since one verified copy says nothing about the other.