At its Op3n 2026 event in Paris on October 15, Ledger announced Ledger Atom — a phone-sized Android device that pairs a hardened AOSP environment with Ledger OS on a Common Criteria EAL6+ Secure Element. It is a bigger bet than a new hardware wallet: Ledger wants the device to protect "your entire digital life," not just crypto keys.
Atom is a reservation today, not a product you can buy. A refundable $100 deposit secures a Founders Edition at $849; the regular price after launch is $899. Estimated delivery is Q2–summer 2027, and Ledger's own fine print is explicit that this is a reservation, not a finished product — specifications and price can still change.
What Atom actually is
Think of it as an Android phone with the phone removed. It has a 6.8-inch AMOLED "Trusted Display" at 60Hz, a 50MP rear and 32MP front camera, a fingerprint sensor in the power button, a 4,000 mAh user-replaceable battery, 5G eSIM (data-only — no calls, SMS, or emergency dialing), Wi-Fi 6, Bluetooth, NFC, and USB-C — at 250 grams, it is a full-size handset.
Two things make it a security device rather than a phone:
- Dual environments. Everyday Android apps run on general compute, but an FPGA keeps that world separated from Secure Mode, where Ledger OS drives the whole display for transaction review and physical approval. Ledger's pitch: a malicious app can request a bad transaction, but it cannot change what you see when the request reaches the secure screen.
- Physical privacy switch. A hardware switch cuts power to cameras and microphones at the circuit level. Secure Mode also disables sensors while active.
Ledger Wallet runs natively on the device — no cable, no second device. Solana Mobile named Ledger its first hardware expansion partner: the Seeker app and Solana dApp Store come preinstalled. A Payward (Kraken) partnership is exploring on-device signing for exchange actions, and an OpenClaw partnership targets AI agents that can prepare financial actions but still need your physical approval to execute.
The anti-tamper story — and its awkward timing
Ledger is selling Atom's physical security hard: a protective enclosure around the Secure Element, MCU, and FPGA that detects drilling or opening; detection when the display or back cover is removed; a back cover cryptographically paired to the device; and tamper-evident packaging.
The timing is pointed. This launch lands in the middle of Ledger's October supply-chain implant investigation — the company confirmed at least one Nano X sold through a reseller carried an unauthorized implant that reportedly read recovery phrases from the screen. Atom's anti-tamper design reads as a direct answer to that attack class, but every claim above is vendor-stated until independent reviewers get shipping hardware.
What we think so far
Atom is genuinely new: it is the first mainstream attempt to make the signer the device instead of a dongle beside it. If Secure Mode holds up, the model is compelling — everyday apps in front, unforgeable approvals behind.
The cautions are equally real. The attack surface of a full Android stack plus an always-present cellular radio dwarfs a purpose-built signer. The price is 4–5x a Nano Gen5. And the security claims are unverifiable until Q2 2027 at the earliest.
We added Atom to the catalog as a specification preview — not a review, since no shipping hardware exists. If you need custody today, compare it against devices you can actually buy: Atom vs Nano Gen5 and Atom vs Flex lay out the tradeoffs. Our guide to crypto signers explains the category Ledger is creating.