Why setup matters
Setting up a hardware wallet correctly is the single most impactful step you can take toward true self-custody. A device that sits unused because someone skipped a confirmation step does you no good. In my testing, the difference between a secure setup and a rushed one shows up later when you try to restore or spend funds — small mistakes cascade.
Hardware wallets isolate your private keys inside a secure element, preventing most remote theft. But the secure element is only effective if the device is genuine, initialized properly, and the seed phrase is backed up correctly. What I've found is that clear, patient setup dramatically reduces the chance of a recoverability problem down the road.
![Unboxing placeholder image]
What to prepare before you begin
- A clean computer or smartphone (avoid public or unknown machines).
- USB cable or OTG adapter if you're using a phone without Bluetooth.
- Pen and the recovery card or a metal backup plate (see seed-backup-plates).
- The official setup app on your device (see ledger-live-guide).
- Time: plan 20–40 minutes. I recommend doing this in a quiet space.
And yes, buy the device from an official store or authorized reseller — supply-chain tampering happens more than people think (read supply-chain-security-verification).
Unboxing and supply-chain checks
Open the box in good light. Check packaging seals and look for obvious tampering. Don't trust a package with missing pieces or altered stickers. After physical inspection, the software check matters: use the setup flow to perform firmware attestation (more below). If anything looks off, stop and contact the seller or support.
For details on what to inspect and why, see our unboxing notes and the guide on supply-chain-security-verification.
Step by step: Desktop & Mobile setup
Below is a general ledger setup guide. Exact prompts vary slightly by model and firmware version. Links at the end point to model-specific steps (setup-nano-s, setup-nano-x).
Desktop setup (USB)
- Install and open the official desktop app (see ledger-live-guide).
- Connect the hardware wallet via USB and follow the on-screen steps.
- On the device: choose "Set up as a new device" (or "Restore" if you are restoring an existing seed).
- Choose a PIN code and confirm it on-device. (Do not write the PIN on your seed card.)
- The device will display your seed phrase word-by-word on its screen. Write each word on the recovery card in order. The device will later ask you to confirm a few words to verify you copied them correctly.
- Back in the desktop app, install the cryptocurrency apps you need (Bitcoin, Ethereum, etc.) via the Manager.
- Add accounts and receive a small test deposit. Always verify the receiving address on the device screen before sending funds.
Mobile setup (Bluetooth / USB-OTG)
- Install the mobile app and pair the device (Bluetooth models) or connect via OTG cable.
- Follow the same initialization flow (PIN → seed phrase → confirm).
- Pairing over Bluetooth adds convenience but also a wireless attack surface; see bluetooth-usb-nfc-security.
But remember: always confirm addresses on the hardware wallet screen itself. The phone or computer can be compromised; the device screen is the single source of truth.
Seed phrase: generation, backup, and Shamir (SLIP-39)
Most Ledger devices generate a 24-word seed phrase following BIP-39. That seed phrase is the master key to your crypto. Treat it like a house key. Never photograph it. Never type it into a computer or website.
Options for backing up:
- Paper recovery card (what comes in the box): store it in a safe or safety deposit box.
- Metal backup plates: far more durable against fire, water, and time (see seed-backup-plates).
- Shamir backup (SLIP-39): splits the seed into multiple shares so you don’t keep a single point of failure — useful for geographic distribution or multi-guardian schemes (see slip39-shamir-backup).
What I've found is that metal backups paired with a distributed plan (one copy offsite) give a solid balance of durability and security.
Passphrase (25th word): use cases and risks
A passphrase is an optional extra word (often called a 25th word) that derives a separate set of private keys from your seed phrase. It effectively creates a hidden wallet. Useful? Yes, in some threat models. Dangerous? Also yes — lose the passphrase and you lose access.
Pros: plausible deniability, stronger compartmentalization. Cons: single personal mistake (forgetting or losing the passphrase) is permanent. Read the full primer on passphrase-25th-word-guide before turning it on.
Firmware updates and attestation
Firmware matters. Updates fix bugs and harden cryptography, and they occasionally change UI flows. Always update through the official app (see firmware-update-guide).
Verify firmware authenticity using the app’s attestation checks. I once interrupted an update by mistake; the device guided me through recovery without exposing the seed because I had my recovery card. Still, it's easier to avoid interruptions: plug into a stable computer and don't close the app mid-update.
Multisig, cold storage strategies, and who this is for
Multisig distributes control across multiple keys (for example, 2-of-3). It reduces single-point-of-failure risks. Setups vary: combine multiple hardware wallets, use co-signers, or integrate with services that support multisig (see multisig-for-ledger).
Who this is for: long-term holders with significant balances, treasuries, or families planning inheritance. Who might look elsewhere: someone holding small amounts who needs quick access and minimal complexity (single-sig with strong backups may be sufficient).
In my experience, multisig is worth the learning curve if you care about geographic redundancy and multi-person authorization.
Common mistakes and quick troubleshooting
- Buying from unofficial sellers (risk of tampering). See buying-safely-and-supply-chain.
- Storing seed phrase photos or digital copies (they can be exfiltrated).
- Not verifying addresses on-device before sending (phishing can alter addresses on compromised hosts).
- Updating firmware from unofficial sources.
If the device is not recognized by the app, try a different cable/port and consult troubleshooting-connection and troubleshooting-general.
FAQ
Q: Can I recover my crypto if the device breaks?
A: Yes — as long as you have the seed phrase (and passphrase if used). Use the restore-recovery-phrase guide to restore onto another compatible hardware wallet.
Q: What happens if the company goes bankrupt?
A: Your private keys belong to you. Company insolvency doesn't transfer control of on-chain funds. Still, software support and firmware updates could become harder; consider the scenarios in company-bankruptcy-what-happens.
Q: Is Bluetooth safe for a hardware wallet?
A: Bluetooth trades convenience for a slightly larger attack surface. The device still requires you to physically confirm transactions, which mitigates many remote attacks. Read bluetooth-usb-nfc-security for a deeper look.
Conclusion and next steps
Setting up a Ledger hardware wallet correctly is straightforward if you take it step by step: verify the device, initialize securely, back up your seed phrase, install only official firmware, and always verify addresses on the device screen. I believe patience during setup pays off later when you need to restore or move funds.
Next steps: follow a model-specific setup if you own one (setup-nano-s, setup-nano-x, setup-nano-s-plus), and read our firmware-update-guide and seed-phrase-management pages for deeper detail.
Ready to continue? Check the step-by-step model guides and the Ledger Live walkthroughs linked above. And if you hit a snag, our troubleshooting hub has focused fixes.
