The Trezor is the best cold wallet for multi-layered security. If the device is stolen the thief needs the pin code and passphrase to access wallet. If the seed phrase is stolen, the thief needs the passphrase. However, you will need to constantly updated the app and the device so if you're active in investing the Trezor (Safe 5 or Safe 7) is excellent.
Pros:
1. Secure element certified to EAL6+

2. Easily store XRP, XLM, SOL, ETH, BTC, and ERC20 tokens.

3. Adding a passphrase is easy for an extra layer of protection.

4. Skip the exchange and easily buy, sell, swap within the app.

5. Customer support is solid.

6. Setup of seed phrase is disconnected from the internet. Very important!

7. Best for last - It's fully open source!

Cons:
1. The UI is not as beautiful nor bountiful as other hardware wallet apps like Tangem and D'Cent, but it's getting better.

2. You can't create a wallet for coins without first having the token (Example: You need an ETH wallet before you can store XCN, Quant, Velo). This can be confusing for newbies.

Black Seed Ink Research Labs pick: SafePal S1 Pro

The company SafePal has been around since 2018 which is good in "Cryptoland". It began in Binance Labs’ incubator in San Francisco. The particular hardware wallet we like is the SafePal S1 Pro. It is an air-gapped hardware wallet designed to keep signing keys offline by using QR (Quick Response) code scanning for transactions instead of data connections. It pairs with the SafePal companion app (multi-platform) to manage Bitcoin plus a large number of altcoins and tokens (i.e. Solana, XRP, Etherium), and it supports passphrase “hidden wallets” for advanced compartmentalization. Your recovery mnemonic (seed) phrase is meant to remain fully in your control. SafePal states it does not store or access it. Therefore, setup/recovery hinges on you backing it up securely offline.

Pros

• Air-gapped QR signing (no transaction signing over USB/Bluetooth/Wi-Fi)
• Beginner-friendly setup and everyday use
• Very broad asset support (marketed as 200+ blockchains / large token coverage)
  
• Passphrase support for hidden wallets (separate passphrase accounts on S1/S1 Pro)
  
• Secure-element chip (marketed as EAL6+; EAL = Evaluation Assurance Level) + anti-tamper/self-destruct protections
  
• SafePal says it doesn’t store/access your mnemonic phrase, keeping custody on you
  

Cons

• You still rely on a companion app UX for day-to-day management (you’ll want to trust/verify the app flow)
  
• Less “plug-and-go” convenience: transactions require camera scanning/QR workflows (slower than USB/Bluetooth wallets)