Trezor

Trezor produces hardware wallets with open-source firmware, which allows independent review of the code that handles your keys.

That openness is its differentiating argument: security claims can be examined rather than taken on trust, which matters for a device whose whole purpose is protecting funds.

As with all hardware wallets, buy from official channels, initialize the device yourself, and never enter a recovery phrase into any computer or website.