Ledger Live 2.29.0 - Windows Users

[Lucius]

The new version of Ledger Live (2.29.0) for Windows users this time cannot be downloaded via automatic update, and when you open Ledger Live and click on News (bell icon) you can see the explanation and the direct download link that leads to the official Ledger page.

It is important to emphasize that you should be careful not to download Ledger Live from any other source - and for those who want to further check the binary installation file before installation, they can do so by verifying it.

The most important thing is to never type your seed (24 words) anywhere - especially in Ledger Live (this is a sign that you have a fake version), and to always check several times that all data from Ledger Live is identical to what your hardware wallet screen shows.

https://www.reddit.com/r/ledgerwallet/comments/nzlng7/ledger_live_2290_windows_users_how_to_update/
https://www.ledger.com/ledger-live/lld-signatures

[1713586714]

1713586714

[1713586714]

1713586714

[1713586714]

1713586714

[The Sceptical Chymist]

The new version of Ledger Live (2.29.0) for Windows users this time cannot be downloaded via automatic update, and when you open Ledger Live and click on News (bell icon) you can see the explanation and the direct download link that leads to the official Ledger page.

I thought that was strange, because I saw the link in Ledger Live and when I clicked on it nothing happened--so I gave up and still haven't downloaded it.  I did figure out that it had to be downloaded from their page, but I'm guessing it's not a critical update.  There have been so many of them lately.

Glad you're giving the warning about not entering your seed phrase, Lucius.  I'm not sure if there's any phishing attempts going on with this update, but it wouldn't surprise me in the least if there were.  Unsuspecting newbies and those who just don't know better might fall for it. 

[NeuroticFish]

Indeed, a new version. Since I use Ledger Live seldom, only for firmware updates now and then, I didn't see this. Thanks for posting.
And this is the official announcement in LL, it may be of help. Don't forget: ledger.com

[AB de Royse777]

The most important thing is to never type your seed (24 words) anywhere - especially in Ledger Live (this is a sign that you have a fake version), and to always check several times that all data from Ledger Live is identical to what your hardware wallet screen shows.

I have not used my Ledger for a while. The Live will never ask any seed to enter. The seed is a one time use when we restore the wallet using the Ledger device.

By the way, thanks for the heads up.

[Lucius]

Glad you're giving the warning about not entering your seed phrase, Lucius.  I'm not sure if there's any phishing attempts going on with this update, but it wouldn't surprise me in the least if there were.  Unsuspecting newbies and those who just don't know better might fall for it. 

I have not used my Ledger for a while. The Live will never ask any seed to enter. The seed is a one time use when we restore the wallet using the Ledger device.

Of course, the original Ledger Live will never ask the user to enter their seed, but every fake LL asks the user to do just that - because that is the main vector of the attack. Given that users are used to doing updates directly through the app, I believe that the number of phishing Ledger sites will now increase as hackers look for their opportunity - and what is perhaps even more dangerous is the fact that hackers have a huge database of Ledger users, this is just one good opportunity for all of them to start sending spam with fake Ledger links.

[Pmalek]

Interesting! I used Ledger Live last night and didn't notice and new notifications that could hint that there is a new update available. Usually, the notifications area shows an unread message that would trigger you to click on it. Will try it again later today. This update doesn't seem to solve any recently discovered vulnerabilities, otherwise Ledger would have bombarded us with messages to upgrade asap.

They seem to have introduced a daily chart for your portfolio, and a new decentralized crypto exchange the other day. I will wait for a couple of days/weeks before installing the new update just to make sure it's stable and doesn't introduce some unwanted issues. 

[Lucius]

Interesting! I used Ledger Live last night and didn't notice and new notifications that could hint that there is a new update available. Usually, the notifications area shows an unread message that would trigger you to click on it.

Perhaps the situation is the same as in the case of firmware update, which means that Ledger Live does not show such a message to everyone at the same time - because it prevents server overload, and also in case the update causes some problems, only part of the users will be affected. If memory serves me well, something similar happened with previous versions of Ledger Live for Windows OS.

Also a little warning that the update can cause problems in some cases - nothing serious that affects security, but you may need to reset LL and re-add your crypto accounts.

LedgerSupport_Muto
Ledger Support
Updates might cause portability issues in some rare occasions. It might be your case. You can reset Ledger Live, create a new password, and re-add your accounts to solve this.

[Maus0728]

Wait! I'm a bit confused. I still have my Ledger Live v2.26.1 and upon crossing this thread, I immediately check my ledger and saw the LL 2.29 new update for windows?  Have you guys downloaded it using the embedded link from their notification?

Surprisingly, though, I never knew that we can verify the LL update. Is the process similar when we verify the electrum using Kleopatra?

[Lucius]

Why are you confused? The only difference in this update is that you can't download it directly through Ledger Live, but directly from the Ledger site. I personally haven't downloaded the new version yet, because like some others I very rarely use Ledger Live - but when I want to do that I will still use the Ledger site instead of the direct link within LL.

I really can't tell you exactly what it takes to verify Ledger files - other than the link I posted in the OP - whether any additional software is needed will certainly be clarified by someone a little more knowledgeable about these things.

[jerry0]

Can you update ledger live now on the windows app as oppose to going directly to their website?  Still using the older ledger live at the moment because i didn't want to download the new ledger live a while back when they said it had to be done on the website.

[Rath_]

Can you update ledger live now on the windows app as oppose to going directly to their website?  Still using the older ledger live at the moment because i didn't want to download the new ledger live a while back when they said it had to be done on the website.

No, you still have to download the updated version directly from the website. Apparently, Ledger was unable to sign the update so the built-in updater would not work.