Best Hardware Wallets in 2026: Ledger vs Trezor vs SafePal vs ELLIPAL vs Cypherock vs NGRAVE
Best Hardware Wallets in 2026 are not only about storing crypto offline. They are about protecting private keys, verifying transactions on a trusted screen, reducing phishing risk, avoiding fake wallet devices, managing seed phrase backups, supporting the chains you actually use, and giving you a practical self-custody workflow you can maintain for years. Ledger, Trezor, SafePal, ELLIPAL, Cypherock, and NGRAVE all approach security differently. Some prioritize secure element chips, some prioritize open-source transparency, some use fully air-gapped QR signing, some focus on seedless recovery, and some are built for users who want maximum cold-storage isolation.
TL;DR
- Ledger is the best all-around pick for most users who want broad coin support, a mature app ecosystem, secure element protection, strong mobile and desktop usability, and a polished self-custody workflow. Buy Ledger through TokenToolHub.
- Trezor is best for users who value open-source firmware, transparent security design, Bitcoin-friendly workflows, and a simpler hardware wallet philosophy. Buy Trezor through TokenToolHub.
- SafePal is one of the best budget hardware wallet choices, especially for users who want an affordable device, mobile-first wallet app, QR-based signing on S1 models, and strong multi-chain support. Buy SafePal S1 through TokenToolHub.
- ELLIPAL is best for users who want a fully air-gapped touchscreen cold wallet with QR-code transaction signing and no WiFi, Bluetooth, USB, or wired transaction connection. Buy ELLIPAL through TokenToolHub.
- NGRAVE is best for high-security cold storage users who want a premium air-gapped device, biometric access, tamper-resistant design, and EAL7-certified positioning. Buy NGRAVE through TokenToolHub.
- Cypherock is best for users interested in Shamir-style key sharding and reducing single seed phrase dependency. It is a strong research candidate, especially for users worried about seed phrase loss or single-point backup failure.
- Hardware wallets reduce private-key exposure, but they do not protect you from signing malicious transactions. Before interacting with unfamiliar tokens or contracts, use TokenToolHub Token Safety Checker.
A hardware wallet is a security device, not a normal gadget. Buying from random marketplaces, used-device sellers, Telegram vendors, or discounted unofficial listings can expose you to tampered packaging, fake devices, malicious setup instructions, and seed phrase theft. Always initialize the wallet yourself, generate your own recovery phrase on the device, verify the official app, and never use a seed phrase printed inside the box.
Fast buying guide
Use this quick selector if you already know what type of wallet you want. Each button points to a relevant wallet option so you can start from the right device category instead of scrolling through every review.
Why self-custody matters
Self-custody means you control the private keys that authorize crypto transactions. When coins are on an exchange, the exchange controls the private keys and your account is a claim inside that company’s system. When coins are in a self-custody wallet, the wallet owner controls the keys directly. This is powerful, but it also transfers responsibility to the user.
The main reason self-custody matters is counterparty risk. Exchanges can freeze withdrawals, face regulatory pressure, suffer insolvency, pause accounts, get hacked, or apply internal risk controls that prevent you from moving funds. A self-custody wallet reduces dependence on a centralized platform.
The second reason is access control. With a hardware wallet, private keys are generated and stored on a separate device rather than inside a browser extension, mobile phone, or desktop computer. The wallet signs transactions internally and sends only the signed transaction back to the connected app. This reduces exposure to malware that targets hot wallets.
The third reason is transaction verification. A good hardware wallet forces you to review transaction details on the device screen before signing. This matters because a malicious website can lie on your computer screen. The hardware wallet screen is the trusted confirmation layer.
Self-custody is not automatically safe. If you store your recovery phrase badly, sign malicious approvals, connect to fake dApps, install fake wallet apps, or buy a counterfeit device, you can still lose funds. The right hardware wallet is only one layer in a broader security workflow.
Hardware wallet security principles
A hardware wallet protects private keys by keeping them isolated from internet-connected devices. But wallet security is not one feature. It is a combination of key generation, secure storage, transaction signing, screen verification, recovery process, firmware integrity, supply-chain safety, app authenticity, and user behavior.
The first principle is private-key isolation. The private key should never leave the device during normal use. The connected computer or phone should never need to see the seed phrase or private key.
The second principle is trusted display. You should confirm addresses, amounts, and transaction details on the wallet device itself. If a website shows one address and the hardware wallet shows another, trust the hardware wallet screen and reject the transaction.
The third principle is recovery security. The recovery phrase, seed backup, metal backup, or sharded recovery system is often the real target. If someone gets your recovery phrase, they do not need the hardware wallet. They can restore the wallet elsewhere.
The fourth principle is genuine-device verification. Only use official apps and official firmware. Avoid QR codes in unknown packaging. Go directly to the wallet brand’s official domain. If a wallet arrives pre-configured or includes a printed seed phrase, do not use it.
The fifth principle is safe signing. A hardware wallet protects keys, but it cannot always know whether a smart contract is malicious. You can still sign a dangerous token approval, blind-sign an exploit transaction, or approve a fake airdrop. That is why wallet security must be combined with contract research and token safety checks.
Ledger vs Trezor vs SafePal vs ELLIPAL vs Cypherock vs NGRAVE
The best hardware wallet depends on the user’s threat model. A beginner who needs easy setup and broad asset support may prefer Ledger or SafePal. A Bitcoin-focused user who values open-source transparency may prefer Trezor. A mobile user who wants QR-code air-gapped signing may prefer ELLIPAL or SafePal S1. A cold-storage maximalist may prefer NGRAVE. A user worried about single seed phrase failure may research Cypherock.
| Wallet | Best for | Security style | Strengths | Watch before buying | Start here |
|---|---|---|---|---|---|
| Ledger | Most users, multi-chain investors, DeFi users, NFT users | Secure element, Ledger OS, Ledger Live, device confirmation | Broad asset support, polished app, strong ecosystem, mature UX | Closed-source secure element stack, optional recovery services require understanding | Buy Ledger |
| Trezor | Open-source users, Bitcoin users, transparency-focused holders | Open-source firmware, Trezor Suite, secure design with newer Safe models adding secure element protection | Transparent security philosophy, strong Bitcoin reputation, simple UX | Older models differ from newer Safe models, check asset support before purchase | Buy Trezor |
| SafePal | Budget users, mobile-first users, multi-chain DeFi users | Air-gapped S1 line, QR signing, secure element, mobile app ecosystem | Affordable, portable, strong app, multi-chain access, QR workflows | Small screen compared with premium touchscreen wallets | Buy SafePal |
| ELLIPAL | Air-gapped touchscreen users and mobile cold-storage holders | Fully air-gapped QR signing with no WiFi, Bluetooth, USB, or wired transaction connection | Large touchscreen, offline QR workflow, strong physical isolation concept | Mobile app workflow may not fit users who prefer desktop-first wallets | Buy ELLIPAL |
| Cypherock | Users worried about seed phrase single-point failure | Shamir Secret Sharing style key sharding across vault and cards | Reduces single seed backup dependency, interesting recovery model, strong research candidate | Different learning curve, fewer mainstream app assumptions than Ledger or Trezor | Research Cypherock before choosing |
| NGRAVE | Premium cold-storage users and serious long-term holders | Air-gapped, biometrics, tamper-resistant body, EAL7-certified positioning | Premium security posture, large touchscreen, high-end cold-storage focus | Higher price, less casual than budget wallets | Buy NGRAVE |
Ledger review
Ledger is the best all-around hardware wallet choice for many users in 2026 because it combines a mature app ecosystem, secure element protection, broad crypto support, device-based transaction confirmation, and a polished user experience. Ledger wallets are popular with users who hold many assets, use DeFi, manage NFTs, and want one hardware wallet system that works across desktop and mobile workflows.
Ledger’s core security model is built around keeping private keys isolated inside the device. The connected phone or computer prepares the transaction, but the Ledger device confirms and signs it. This means a compromised browser extension or infected laptop should not be able to extract your private key directly from the hardware wallet.
Ledger Live is a major advantage for normal users. It gives one app for portfolio tracking, receiving, sending, installing apps, firmware updates, staking access, and supported asset management. Advanced users can also connect Ledger devices to third-party wallets, but beginners benefit from the official app being structured and widely documented.
The main tradeoff is that Ledger uses a secure element and proprietary parts of its security stack. Users who prioritize open-source transparency over secure element architecture may prefer Trezor. Users who prioritize air-gapped QR signing may prefer ELLIPAL, SafePal S1, Keystone, or NGRAVE.
Ledger is the strongest recommendation for most TokenToolHub readers because it fits the broadest user group: beginners, DeFi users, NFT holders, multi-chain investors, and people who want a mainstream hardware wallet with strong documentation.
Recommended first pick: Ledger
Choose Ledger if you want the safest default option for broad asset support, DeFi access, NFT management, mobile and desktop usability, and a mature wallet ecosystem.
- Best for: most crypto investors, DeFi users, NFT users, and multi-chain holders.
- Security angle: secure element protection, device confirmation, Ledger Live, and offline private-key storage.
- Best reason to buy: it is the easiest premium all-rounder for users who want one hardware wallet brand that works across many crypto workflows.
Trezor review
Trezor is best for users who value open-source transparency and a clean self-custody philosophy. It has a long reputation in the hardware wallet market and is especially respected by Bitcoin users, privacy-conscious holders, and people who prefer auditable software over closed systems.
Trezor Suite gives users a dedicated interface for managing assets, sending and receiving crypto, checking balances, and interacting with supported features. The experience is not as broad in some areas as Ledger’s ecosystem, but Trezor’s transparency-first approach is the appeal.
Trezor’s newer Safe line has also shifted the conversation around secure elements. Historically, Trezor was often discussed as a wallet that prioritized open-source firmware over secure element dependency. Newer models have introduced more layered hardware security while maintaining the brand’s transparency philosophy.
The biggest question is asset support. Before buying Trezor, check whether it supports the chains and tokens you use. If you are heavily into long-tail DeFi tokens, NFTs, or many EVM and non-EVM chains, compare Ledger and SafePal as well.
Best open-source pick: Trezor
Choose Trezor if you care about open-source wallet design, Bitcoin-friendly workflows, transparent firmware, and a simple hardware wallet experience.
- Best for: Bitcoin holders, open-source users, transparency-focused investors, and simple long-term self-custody.
- Security angle: trusted device screen, open-source firmware philosophy, Trezor Suite, and newer Safe models with added hardware protections.
- Best reason to buy: it is one of the most respected wallet brands for users who want transparency over a more closed ecosystem.
SafePal review
SafePal is one of the best value-focused hardware wallet brands for users who want strong security features without paying premium cold-storage prices. SafePal S1 is especially known for its air-gapped QR-signing workflow, secure element chip, mobile-first app, and broad multi-chain support.
SafePal is attractive for users who want a practical hardware wallet for DeFi, NFTs, and mobile crypto management. The SafePal app gives access to wallet management, swaps, dApps, and multi-chain assets. For many users, that combination of price and functionality is the main reason to consider SafePal.
SafePal’s S1 line uses QR codes for transaction signing, which helps avoid relying on USB or Bluetooth for transaction communication. This does not mean the user can ignore transaction verification. You still need to check the address, amount, token, and smart contract permissions before signing.
SafePal is the strongest recommendation for budget-conscious users. If a reader wants hardware-wallet protection but does not want to pay Ledger Flex, ELLIPAL, or NGRAVE-level prices, SafePal is a natural CTA.
Best budget CTA: SafePal
Choose SafePal if you want an affordable hardware wallet with strong mobile support, QR-based signing on the S1 line, and practical multi-chain access.
- Best for: budget users, mobile-first DeFi users, and holders who want hardware-wallet protection at a lower entry price.
- Security angle: S1 air-gapped QR signing, secure element protection, device verification, and app-based multi-chain management.
- Best reason to buy: it gives strong functionality for users who want cold-wallet security without premium pricing.
ELLIPAL review
ELLIPAL is best for users who want a fully air-gapped touchscreen hardware wallet. Its Titan line is designed around QR-code transaction signing with no WiFi, Bluetooth, USB, or wired transaction connection. This creates a strong psychological and practical security boundary for users who do not want their cold wallet directly connected to a computer.
ELLIPAL is especially useful for mobile-first users who want a large screen and camera-based signing workflow. The user prepares a transaction in the app, scans the QR code with the device, verifies the transaction on the ELLIPAL screen, signs it offline, then scans the signed QR code back into the app for broadcast.
The benefit is isolation. The tradeoff is workflow. QR signing can be slower than using a USB-connected wallet, and some users prefer desktop-first wallet systems. But for users who want a clear air-gapped model, ELLIPAL is one of the strongest recommendations.
ELLIPAL is best positioned for users who want a cold wallet that feels physically separate from online devices. It is also attractive for users who like touchscreen interfaces and do not want a tiny-button wallet.
Best air-gapped touchscreen pick: ELLIPAL
Choose ELLIPAL if you want QR-code signing, a large touchscreen, and a cold wallet that avoids WiFi, Bluetooth, USB, and wired transaction connections.
- Best for: mobile-first users, air-gapped wallet fans, and holders who want a more isolated signing workflow.
- Security angle: fully air-gapped QR workflow, offline signing, transaction verification on device, and no wired transaction link.
- Best reason to buy: it gives a clear cold-storage experience for users who do not want a hardware wallet plugged into their computer.
NGRAVE review
NGRAVE is the premium security-focused wallet in this comparison. It is built for users who want high-end cold storage, air-gapped signing, biometric access, tamper-resistant physical design, and EAL7-certified security positioning. It is not the cheapest device, and it is not trying to be the most casual wallet. It is designed for serious holders.
NGRAVE ZERO uses a fully air-gapped design. It does not rely on USB, Bluetooth, WiFi, NFC, or mobile network connections for transaction signing. The device uses QR codes and an offline workflow. It also pairs with NGRAVE’s backup system, which is designed for more durable recovery storage.
NGRAVE is best for users holding meaningful long-term crypto positions who want premium cold-storage isolation. It is also useful for users who want a large screen and a security-first buying decision rather than a budget-first decision.
The main tradeoff is price and ecosystem flexibility. Some users will prefer Ledger for broad app support, Trezor for transparency, or SafePal for affordability. NGRAVE is for users who want a premium cold-storage posture.
Best premium cold-storage CTA: NGRAVE
Choose NGRAVE if you want a premium air-gapped cold wallet with biometric access, high-security positioning, and a serious long-term storage workflow.
- Best for: high-value holders, long-term investors, and users who want premium cold storage.
- Security angle: fully air-gapped signing, biometric layer, tamper-resistant construction, and EAL7-certified positioning.
- Best reason to buy: it is built for users who prioritize maximum cold-storage security over budget pricing.
Cypherock review
Cypherock is the most different wallet in this comparison because its main security idea is key distribution. Instead of relying on one normal seed phrase backup, Cypherock X1 uses Shamir Secret Sharing style key sharding across the X1 Vault and X1 Cards. This is designed to reduce single-point seed phrase failure.
This matters because many users lose crypto not because their hardware wallet was hacked, but because their backup was stolen, destroyed, misplaced, photographed, or entered into a fake recovery website. Cypherock’s model is interesting because it tries to change the backup problem itself.
Cypherock is best for users who understand recovery planning and want a different model from the classic one-device plus one seed phrase approach. It may not be the easiest first wallet for total beginners, but it is a serious research candidate for users who worry about seed phrase management.
If your priority is simple mainstream support, Ledger or Trezor may be easier. If your priority is air-gapped QR signing, ELLIPAL, SafePal, NGRAVE, or Keystone may be more natural. If your priority is backup architecture and key sharding, Cypherock deserves attention.
Best seed-backup alternative: Cypherock
Choose Cypherock if your biggest fear is seed phrase loss, theft, or single backup failure. It is not the simplest mainstream wallet, but its key-sharding approach is useful to understand before choosing a long-term custody setup.
Other hardware wallets worth knowing
Ledger, Trezor, SafePal, ELLIPAL, Cypherock, and NGRAVE are the main comparison set, but several other wallets are worth knowing because they may fit specific user needs.
Keystone is a strong air-gapped QR-signing wallet for users who want an open-source cold wallet, touchscreen design, fingerprint support, and broad third-party wallet compatibility. It is especially interesting for users who like QR-based signing but want a different ecosystem from ELLIPAL or SafePal.
OneKey is useful for users who want open-source code, secure element protection, and broad platform support. It is worth comparing if you want a modern wallet outside the Ledger and Trezor mainstream.
SecuX is another hardware wallet option for users who want a touchscreen-style cold wallet and an alternative to the most common brands. It can be useful for users who want to compare multiple choices before buying.
Alternative wallet CTAs
Use these if you want to compare beyond the six main wallets in this guide.
Security comparison table
| Wallet | Air-gapped? | Secure element? | Open-source angle | Best security use case | TokenToolHub buy link |
|---|---|---|---|---|---|
| Ledger | No, depends on model connection method | Yes | Partly closed security stack | Best mainstream multi-chain security and usability balance | Buy Ledger |
| Trezor | No, USB and model-specific workflows | Newer Safe models use added secure hardware protections | Strong open-source philosophy | Best for transparency-focused users and Bitcoin holders | Buy Trezor |
| SafePal S1 | Yes, QR signing on S1 line | Yes | Mixed ecosystem, app-based workflow | Best budget air-gapped mobile wallet | Buy SafePal |
| ELLIPAL | Yes, QR signing | Security architecture varies by model | Closed ecosystem | Best fully air-gapped touchscreen experience | Buy ELLIPAL |
| Cypherock | No, uses vault and cards model | Security model focused on distributed key shards | Open-source and audited positioning | Best for seed phrase single-point failure concerns | Research official Cypherock details |
| NGRAVE | Yes, QR signing | EAL7-certified positioning | Premium security-focused ecosystem | Best premium long-term cold storage | Buy NGRAVE |
Which hardware wallet should you buy?
Buy Ledger if you want the best overall balance between usability, asset support, security, and ecosystem maturity. This is the easiest recommendation for most users because Ledger works well for long-term holding, DeFi, NFTs, and multi-chain activity.
Buy Trezor if you prefer open-source transparency, a simpler self-custody philosophy, and a strong Bitcoin-friendly brand. Trezor is a better fit for users who are comfortable checking supported assets before purchase.
Buy SafePal if your budget is limited but you still want hardware-wallet protection and a mobile-first DeFi workflow. SafePal is one of the most practical entry points for users who want cold-wallet security without premium pricing.
Buy ELLIPAL if you want air-gapped QR signing and a touchscreen cold wallet experience. It is especially strong for users who do not want to connect their signing device to a computer.
Buy NGRAVE if you want premium cold storage and you are willing to pay more for stronger physical isolation, biometric access, and high-security positioning.
Research Cypherock if your biggest concern is seed phrase backup risk. Its key-sharding approach is different from the traditional one-device plus one recovery phrase model.
TokenToolHub final wallet picks
For most users, start with Ledger. For open-source preference, choose Trezor. For budget air-gapped use, choose SafePal. For touchscreen air-gapped cold storage, choose ELLIPAL. For premium cold storage, choose NGRAVE. For seed-backup innovation, research Cypherock.
Hardware wallet setup checklist
Before moving funds
- Buy only from official brand stores or trusted official reseller channels.
- Inspect packaging, but do not rely on packaging alone as proof of safety.
- Download the wallet app only from the official website or official app store listing.
- Generate the recovery phrase yourself on the device. Never use a pre-written phrase.
- Write the recovery phrase offline. Do not store it in email, cloud notes, screenshots, photos, or chat apps.
- Consider a metal backup for long-term seed phrase durability.
- Set a strong PIN and understand the wallet’s reset behavior.
- Send a small test transaction before moving serious funds.
- Verify addresses on the hardware wallet screen, not only on the computer or phone.
- Use TokenToolHub Token Safety Checker before interacting with unfamiliar token contracts.
Common hardware wallet mistakes
The first mistake is buying from unofficial sellers. A fake or tampered hardware wallet can defeat the entire purpose of self-custody. Even if the box looks real, the safest buying path is always the official store or trusted official reseller.
The second mistake is storing the recovery phrase digitally. A hardware wallet protects private keys, but if your seed phrase is saved in Google Drive, iCloud, screenshots, WhatsApp, Telegram, email, or a password note, malware or account compromise can still drain your wallet.
The third mistake is signing blind approvals. Many users lose funds not because their hardware wallet was hacked, but because they signed a malicious approval or transaction. Always verify the contract, token, spender, and approval amount.
The fourth mistake is using one wallet for everything. Consider separating long-term cold storage from active DeFi wallets. Keep your main vault away from daily dApp experimentation.
The fifth mistake is not testing recovery. Before storing large funds, make sure you understand how recovery works. You do not need to expose your seed online, but you should understand the restoration process and backup storage plan.
Final verdict
The best hardware wallet in 2026 depends on your custody style. If you want the safest default recommendation for most crypto users, choose Ledger. If you want open-source transparency, choose Trezor. If you want a budget-friendly air-gapped option, choose SafePal. If you want a fully air-gapped touchscreen device, choose ELLIPAL. If you want premium cold-storage isolation, choose NGRAVE. If your main concern is seed phrase single-point failure, research Cypherock before deciding.
For most TokenToolHub readers, Ledger is the strongest first pick because it offers the best overall combination of usability, ecosystem maturity, and multi-chain support. SafePal is the most practical budget pick. ELLIPAL and NGRAVE are better for users who want stronger physical isolation through air-gapped workflows. Trezor is best for users who value transparency and open-source design.
A hardware wallet is only one part of safe crypto behavior. You still need clean backup habits, safe dApp behavior, official app downloads, small test transactions, and smart contract caution. For token interaction safety, use TokenToolHub Token Safety Checker. For broader crypto learning, explore Blockchain Technology Guides, Advanced Blockchain Guides, and subscribe to TokenToolHub.
Buy the right wallet for your threat model
Do not choose only by price or hype. Choose based on your assets, chains, dApp usage, backup discipline, and comfort with the signing workflow.
FAQs
What is the best hardware wallet in 2026?
Ledger is the best all-around hardware wallet for most users because it balances broad asset support, mature software, secure element protection, and strong usability. Trezor is best for open-source transparency, SafePal is best for budget users, ELLIPAL is best for air-gapped touchscreen use, and NGRAVE is best for premium cold storage.
Is Ledger better than Trezor?
Ledger is usually better for users who want broad asset support, Ledger Live, secure element protection, and a polished multi-chain ecosystem. Trezor is usually better for users who value open-source transparency and a simpler security philosophy.
Is SafePal a good hardware wallet?
SafePal is a strong budget hardware wallet choice, especially for mobile-first users who want QR-based signing on the S1 line, a secure element, and broad multi-chain wallet access at a lower price.
Is ELLIPAL better than Ledger?
ELLIPAL is better if you specifically want a fully air-gapped QR-signing touchscreen wallet. Ledger is better if you want a broader mainstream ecosystem, desktop and mobile app support, and easier third-party wallet compatibility.
Is NGRAVE worth it?
NGRAVE is worth considering if you hold meaningful long-term crypto value and want premium cold storage with air-gapped signing, biometric access, and high-security positioning. It may be more than casual users need.
What makes Cypherock different?
Cypherock is different because it focuses on key sharding using a Shamir Secret Sharing style model across a vault and cards. It is designed to reduce single seed phrase backup risk.
Can a hardware wallet stop all scams?
No. A hardware wallet protects private keys, but it cannot automatically stop you from signing a malicious transaction, approving a fake spender, using a phishing site, or interacting with a dangerous contract. Always verify before signing.
Should I buy a hardware wallet from Amazon or a marketplace?
The safest option is to buy directly from the official brand store or trusted official reseller channels. Random marketplace listings can create supply-chain risk, fake-device risk, and malicious setup-instruction risk.
Do I need more than one hardware wallet?
Many serious users separate wallets by purpose. One wallet can hold long-term cold storage, while another wallet can be used for active DeFi or NFT interactions. This reduces the impact of one bad approval or operational mistake.
What is the safest way to store a recovery phrase?
Store it offline, privately, and physically. Do not save it in screenshots, cloud notes, email, chats, or password managers unless you fully understand the risk. Many users prefer paper plus a metal backup stored in separate secure locations.
References
Official documentation and reputable sources for deeper reading:
- Ledger Official Website
- Ledger Academy: Best Crypto Wallets 2026
- Trezor Official Website
- Trezor Safe 5
- SafePal Official Website
- SafePal S1 Hardware Wallet
- ELLIPAL Titan
- NGRAVE ZERO
- Cypherock Official Website
- Bitcoin.org: Cypherock X1
- Keystone 3 Pro
- OneKey Classic 1S
- TokenToolHub: AI Crypto Tools
- TokenToolHub: Token Safety Checker
This guide is for educational research only and is not financial, investment, tax, legal, or security advice. Hardware wallet security depends on official purchase source, genuine-device verification, safe setup, recovery phrase handling, firmware practices, dApp behavior, and transaction verification. Always verify current wallet specifications and official documentation before buying or moving funds.