Which wallet is best for XRP, and how do I choose one without getting a fake or flawed one?

The full answer

Which wallet is best for XRP?

This page names no best wallet, and it does not recommend any wallet, exchange or broker. A fair comparison would need three kinds of evidence: the makers’ own authenticity checks, documented failures of open-source and closed secure-element designs, and whether XRPL.org endorses any wallet. As of September 30, 2026, only one maker’s authenticity check, BitBox’s, had been found in public sources; the other two had not. Those gaps are listed as open points and are not filled in from memory.

How can a genuine wallet be told apart from a fake one?

BitBox’s support page says the BitBoxApp automatically checks whether a connected BitBox is genuine. It says to buy from BitBox or an authorized reseller, and to stop immediately if the BitBoxApp reports that the connected device is not authentic [19]. Whether hardware wallets can be hacked, and how to check that one is genuine, has its own page: can a hardware wallet be hacked, and how do I verify one is genuine?. That page also carries the case against trusting any single device.

Where was XRP lost in September 2026?

24/7 Wall St. reported on September 27, 2026 that Bitget reported the loss of 103 million XRP on September 24, in a breach the outlet linked to North Korea [1]. The same report said hackers took $351.6 million from Bitget [1]. It also said there was no evidence connecting the hack to any specific fund inflows [1]. The account of what happened in the Bitget theft and whether customers’ funds were affected is on a separate page.

Can widely used software still be flawed?

On September 25, 2026, XRPL.org announced version 3.4.1 of xrpld, the reference server implementation of the XRP Ledger protocol, as an emergency release to fix security-sensitive issues in the XRPL protocol [2]. XRPL.org also posted vulnerability disclosure reports on August 18, 2026 (XRPL Manifest Flood) and September 21, 2026 (XLS-68 Sponsored Fees and Reserves) [2]. These posts concern the ledger’s server software, not any wallet app.

Flaws are found in widely used XRP Ledger software after release and fixed in later versions. The posts give no measure of how often wallet apps carry flaws.

Is there a way to hold XRP exposure without choosing a wallet?

The Canary XRP ETF’s Form 10-Q for the quarter ended June 30, 2026 states that Coinbase Custody Trust Company and BitGo Trust Company serve as the fund’s custodians and are responsible for safekeeping all of its XRP [3]. In that structure the named custodians keep the XRP. Whether that is the same as owning XRP is covered on is owning an XRP ETF the same as, or safer than, owning XRP?.

What else matters once a wallet is set up?

Wallet choice is one step. Whether a wallet supports regular keys and multi-signing is covered on what XRP Ledger features can protect my account. Reading a signing request before approving it is covered on what is a malicious signing request or wallet drainer?. Backing up the recovery phrase is covered on how do I keep my XRP wallet, keys and recovery phrase safe?. Checking whether a token shown in a wallet is genuine is covered on what is a trust line, and how do I check that a token is genuine?.

What is the case against relying on any single choice?

Taken together, [1] and [2] point to failures outside the wallet a holder picks. A company reported a loss of 103 million XRP [1], and the ledger’s own server software needed an emergency security fix in September 2026 [2]. Neither source shows that any wallet type is safe. The strongest documented case against trusting a hardware device is set out on can a hardware wallet be hacked?, and the question of splitting holdings is taken up on should I spread my XRP across several exchanges and wallets?.