Tangem review: the credit-card-sized wallet with no screen, no battery, no seed phrase

Tangem is a card-based cold wallet that can be used without a seed phrase by default. The key stays in the secure element and signing happens locally when you tap the card to an NFC-enabled phone. It consists of a set of two or three NFC smart cards, credit-card sized and IP69K-rated, paired with a mobile app. There's no screen, no battery, no USB or Bluetooth. Each card has a secure-element chip that generates the private key on-card the moment you activate it.

The multiple cards themselves are the backup. Users who want a traditional BIP39 seed for cross-wallet compatibility can still set one up, at the cost of reintroducing the exact failure mode Tangem is designed to avoid; because the key is generated on-device rather than derived from a written-down seed phrase, there's no 12/24-word backup by default.

Tangem has shipped over 8 million cards since 2018, giving the design a substantial real-world track record.

Each card runs a Samsung S3D232A (S3D350 family) secure element, Common Criteria EAL6+ certified — the practical ceiling for this certification class, shared with biometric passports and payment cards. Tangem has commissioned independent security assessments, including work by Kudelski Security and Riscure. We avoid treating the absence of reported critical findings as proof that the design is risk-free.

Backup works differently from most wallets: your 2 or 3 cards share the same keys, and each is an independent full-access backup.

Two incidents are worth knowing about. In December 2024, an app logging issue affected a small subset of seed-phrase users who contacted support. Tangem said it was patched within days, with no confirmed fund loss, although the public disclosure drew criticism. In 2026, Ledger's own research lab publicly disclosed a laser fault-injection attack that can reset a card's access code with physical possession, ~$250K of lab equipment and 1-2+ hours per card. It's a sophisticated theft/'evil maid' scenario, not remote — but because Tangem's firmware is permanently locked by design, this flaw cannot be patched on existing cards.

Tangem includes multiple backup cards in the standard set rather than selling the backup device separately, which is a meaningful part of its pricing proposition.

The Tangem app is mobile-only (iOS/Android; no native desktop client) and is the primary interface to the wallet. Tangem states that it supports 16,000+ cryptocurrencies and tokens across 95 networks. Check the live supported-assets list before assuming a specific coin or network is available.

Inside the app you can buy, sell and swap through third-party partners, stake selected assets and connect to dApps through WalletConnect. Treat WalletConnect approvals with the same care you would on any self-custody wallet. There's no built-in hardware screen to verify what you're signing, so every transaction detail you see comes from the phone.

Ledger offers a screen-equipped device, USB/Bluetooth connectivity and broad third-party integration via Ledger Live. Its secure-element firmware is closed source, and the optional Ledger Recover service has drawn privacy criticism.

Trezor uses open-source firmware and software and provides on-device transaction verification through a screen. That gives researchers more code transparency than Tangem, at the cost of a more traditional setup flow.

Tangem trades the screen and open-source transparency for radical simplicity: no seed phrase to protect by default, tap-and-go setup, and a slim, portable card. It's a strong pick if ease-of-use and physical durability matter most to you; it's a weaker pick if you want to independently verify what you're signing or prefer auditable, patchable firmware.

No independent transaction verification. Without a screen on the card itself, you're relying entirely on your phone to show you the truth about what you're signing. If your phone is compromised by malware, Tangem's hardware security doesn't help you notice a swapped destination address.

Non-upgradable firmware is a double-edged sword. Tangem argues that eliminating firmware updates removes one remote attack path. But Ledger Donjon's 2026 laser fault-injection finding also means affected cards already in circulation cannot receive a firmware patch; addressing the issue requires a hardware/design change in future cards.

The December 2024 logging issue matters. Tangem said private keys could be written to app logs for a small subset of seed-phrase users and potentially become accessible during support interactions. Tangem fixed the issue and reported no confirmed fund losses, but the incident is still relevant when judging operational security.

Plan the backup set during initial setup. Tangem's backup-card workflow is designed around linking the cards in the set during onboarding, so decide where and how you will store the backups before moving significant funds.