🔐How to set up a hardware wallet

Why a hardware wallet is safer (in plain language)

When you use a hot wallet on your phone or browser, the private keys sit on the same device that opens random web pages, runs random apps and downloads random files. Any one of those things can be malicious. A clipboard hijacker can swap the address you paste; a fake pop-up can trick you into signing a transaction that drains your funds.

A hardware wallet keeps the keys inside a dedicated chip that can only do two things: store secrets and sign data. The device has its own tiny screen, so when you confirm a transaction you read it from a piece of hardware that your computer cannot lie to. Even if your laptop is fully compromised, the worst it can do is ask you to confirm a malicious transaction — and you can refuse, because you actually see what is being signed.

That isolation is the entire value proposition. It does not make you invincible — phishing and social engineering still work — but it removes the single biggest class of attacks: software stealing your keys without you knowing.

Setting up a Ledger Nano — step by step

1. 1
   Buy directly from Ledger

   Order only from ledger.com. Never buy used or via marketplaces — the device may be pre-initialized with a seed the seller already wrote down.

2. 2
   Check the box on arrival

   There is no seal sticker — Ledger uses tamper-evident packaging plus a cryptographic genuine check. If the box looks opened or contains a printed seed card, do not use it.

3. 3
   Install Ledger Live from the official site

   Go directly to ledger.com/start. Do not search 'Ledger Live download' — fake clones are the most common scam.

4. 4
   Connect and choose 'Set up new device'

   Plug in the cable. The device shows 'Welcome'. Press both buttons to begin.

5. 5
   Pick a PIN of 4 to 8 digits

   The device asks for a PIN, used every time you unlock it. Avoid birthdays or repeating digits. Three wrong PINs in a row wipe the device — which is fine, since you have the seed.

6. 6
   Write down the 24-word recovery phrase

   The Ledger displays 24 words one at a time. Write each one on the included card or steel backup. Never photograph, type, or read them out loud.

7. 7
   Verify the phrase

   Ledger asks you to confirm several words by scrolling through the wordlist on the device itself. This proves you actually wrote them down.

8. 8
   Run the genuine check in Ledger Live

   Ledger Live performs a cryptographic check that confirms the device's chip is authentic. If the check fails, contact Ledger support before depositing anything.

9. 9
   Install the apps you need

   Ledger Live installs per-coin apps (Bitcoin, Ethereum, Solana...). Only install the ones you use to save space.

10. 10
    Send a small test deposit

    Receive a tiny amount of crypto, then send it back. Confirm the entire round-trip works before transferring anything substantial.

Setting up a Trezor — step by step

1. 1
   Buy directly from Trezor

   Order from trezor.io. Same rule as Ledger: never used, never from a marketplace.

2. 2
   Inspect the holographic seal

   Trezor uses a holographic seal over the USB port. If it is broken or missing, refuse the device.

3. 3
   Go to suite.trezor.io

   Use the official Trezor Suite (web or desktop). Download only from the official URL.

4. 4
   Install the latest firmware

   New Trezors ship without firmware. Trezor Suite will install it. Verify the firmware version matches what the suite displays.

5. 5
   Create a new wallet

   Choose 'Create new wallet'. Trezor Suite walks you through the steps; the device confirms every action.

6. 6
   Write down 12 or 24 words

   Trezor will offer 12, 18 or 24 words. 24 is the safest choice. Write them on paper or steel — never digital.

7. 7
   Confirm the words on the device

   You select each word on the Trezor's screen to confirm. The Trezor Model T does this fully on its touchscreen; the Model One uses the connected app but with confirmations on the device.

8. 8
   Set a strong PIN

   PIN is entered using a randomized grid so a keylogger can't capture it. Use at least 6 digits.

9. 9
   Optional: enable passphrase

   An optional 25th word that creates a hidden wallet. Powerful but easy to lose access if forgotten — only enable if you understand the risk.

10. 10
    Test the recovery

    Wipe the device and restore from the words before depositing anything significant. If restore fails, your backup is bad — find out now, not in three years.

Ten setup mistakes that cost people their crypto

• Buying a used or unsealed device. The seller can keep a copy of the seed and drain the wallet later.
• Downloading the companion app from a search-engine ad instead of the official URL.
• Photographing the seed phrase 'just in case'. Cloud sync uploads it; if your account is hacked, your wallet is gone.
• Typing the seed into a password manager or a notes app to 'remember it'. The seed must never leave paper or steel.
• Storing both copies of the seed in the same place. One fire or burglary destroys everything.
• Skipping the genuine check or firmware verification at setup.
• Confirming transactions on the computer screen instead of on the device screen. Always read what the device shows.
• Reusing the same seed across multiple wallets or devices, multiplying the chance of leaking it.
• Enabling a passphrase you cannot reliably remember. A forgotten passphrase is identical to a lost seed.
• Telling family members 'the recovery is in the safe' without explaining what to do with it. Document the inheritance plan separately.

Lost, stolen, or broken — how recovery actually works

If your hardware wallet is lost, stolen, or destroyed, your crypto is not lost — provided you still have the 12 or 24-word recovery phrase. The phrase is the wallet; the device is just a convenient way to use it. Buy a new device of the same family (or compatible — most Ledger/Trezor seeds work in any BIP39 wallet) and choose 'Restore from recovery phrase' during setup. Enter the words in order. Your full balance reappears.

If the device was stolen and the thief knows the PIN, you should still be safe for a short window — most devices wipe after several wrong PIN attempts — but the prudent move is to immediately set up a new wallet (with a brand new seed) on a different device and send all funds to that new wallet's address. The old seed is now considered compromised.

If you have lost both the device and the seed phrase, there is no recovery. There is no support agent who can help you, no court that can order the network to return funds. This is the harsh and freeing reality of self-custody, and it is exactly why testing your backup at setup is the most important thing in this entire guide.