Last Updated: September 2026
Disclaimer: This article is for informational purposes only and is not financial advice. Crypto trading involves significant risk of loss. Never trade with money you cannot afford to lose. Always do your own research (DYOR).
Most people who lose crypto from a hardware wallet did not get hacked. They got set up wrong. The device did exactly what it was designed to do — it just did it for somebody else, because of a decision made in the first fifteen minutes after opening the box.
This is not a review and it is not a Ledger-versus-Trezor argument. If you want those, I have written both elsewhere. This is the walkthrough I give friends when they message me saying "it arrived, what do I do now" — the order of operations, the specific moments where an attacker is waiting for you to make a mistake, and the handful of rules that, if you follow them, mean nothing short of a house fire and a memory wipe can separate you from your coins.
I am going to be blunt in places. Some of the standard advice ("write it on paper and keep it safe") is uselessly vague and gets people robbed. I would rather tell you exactly what to do and exactly why.
If you have not bought the device yet, do that part right first — get a Ledger from the official store -> and read the next section before it arrives, because the most dangerous moments in this whole process happen before you have even plugged anything in.
Before You Buy: Where the Device Comes From Decides Everything
There is exactly one safe way to buy a hardware wallet: from the manufacturer's own store, or from a reseller the manufacturer explicitly lists on their own site. Not Amazon. Not eBay. Not a marketplace listing that says "authorised dealer" in the description, because the description is written by the seller. Not a friend of a friend selling a "barely used" one.
The reason is simple and it is not paranoia. A hardware wallet's entire security model rests on one assumption: that the secret key inside it was generated by that chip, randomly, and has never existed anywhere else. A supply-chain attacker breaks that assumption by generating the key themselves, loading it onto a device, repackaging it, and selling it to you. You then fund a wallet whose keys are sitting in a spreadsheet somewhere. Everything else you do — strong PIN, metal backup, passphrase — is irrelevant, because the attacker had the keys before you opened the box. This has happened repeatedly with marketplace listings, and the resulting wallets are indistinguishable from real ones to a normal buyer.
The second thing that comes with buying direct is a clean download path. When you go looking for "Ledger Live download" in a search engine, you are walking into a lane that scammers pay money to sit in. Paid search ads impersonating wallet software, lookalike domains one character off, and fake mobile apps that clear the store's review process for a few days before being pulled are all routine. The malicious version looks correct, walks you through a normal-looking setup, and asks you at some point to "import" or "verify" your recovery phrase. That prompt is the entire attack.
So: type `ledger.com` into the address bar yourself. Bookmark it. Get the device from there, get the software from there, and never let a search result, an email link, a QR code in a comment section, or a DM be the thing that decides which URL you land on. If you want to shortcut the first step, buy direct from Ledger -> and you have removed the single biggest risk in this entire article.
One more purchase-stage note. Ledger suffered an e-commerce customer database breach in 2020, which leaked names, email addresses, phone numbers and physical shipping addresses of a large number of buyers. That data is still circulating. Some people on that list later received convincing phishing emails, and a smaller number received counterfeit devices in the post, unsolicited, with instructions to migrate their funds onto them. If a hardware wallet you did not order shows up at your door, it is an attack. Bin it.
Free: Crypto Trading Platform Cheat Sheet
Side-by-side fee comparison, ratings, and quick-pick recommendations for every major exchange and trading bot. Save hours of research.
No spam. Instant download on the next page.
Which Ledger Fits Your Setup
You do not need the expensive one. Security is essentially identical across the current line — same certified secure element architecture, same on-device key generation, same recovery standard. What you are paying for is screen size and connectivity, and screen size is a genuine security feature only in the sense that a bigger screen makes it easier to actually read what you are approving.
| Model | Price (approx) | Connectivity | Screen | Who it suits |
|---|---|---|---|---|
| Nano S Plus | ~$79 | USB-C only | Small mono OLED, 2 buttons | Buy-and-hold. No radio at all. My default recommendation for a first device. |
| Nano X | ~$149 | USB-C + Bluetooth | Small mono OLED, 2 buttons | People who genuinely want to sign from a phone away from a computer. |
| Flex | ~$249 | USB-C + Bluetooth | 2.8" E Ink touchscreen | Anyone signing DeFi or NFT transactions regularly — the readable screen pays for itself. |
| Stax | ~$399 | USB-C + Bluetooth + Qi | 3.7" curved E Ink touchscreen | Design-led purchase. No security advantage over the Flex. |
My honest read: if this is your first device and you are storing rather than actively interacting with contracts, the Nano S Plus is the correct buy, and the money you saved is better spent on a metal backup plate. If you are going to be approving smart-contract interactions regularly, the jump to a touchscreen model is not vanity. The number one reason people approve malicious transactions is that they could not be bothered to scroll through a transaction summary on a screen the size of a postage stamp.
The Bluetooth question comes up constantly, so let me deal with it. Bluetooth on a Ledger does not transmit your keys. It carries the same unsigned-transaction-in, signed-transaction-out traffic that the USB cable does, and the confirmation still happens physically on the device. It is a convenience feature with a small added attack surface, not a hole in the design. If it still makes you uneasy, buy the Nano S Plus, which has no radio at all, and the question disappears entirely.
The Unboxing Check: Three Things That Mean "Send It Back"
Open the box before you open any software, and check for three specific things.
One: a pre-printed PIN, or a card with words already written on it. A genuine Ledger ships with blank recovery sheets. Blank. If your box contains a card with 24 words already printed or handwritten on it, a slip telling you "your PIN is 1234", a sticker with a QR code to "activate" the device, or a printed leaflet directing you to any domain other than ledger.com, you are holding an attack, not a wallet. Do not use those words. Do not "just try it to see if it works" — the moment you put funds in, they are gone, because the person who printed that card can watch that wallet and sweep it the second anything lands. This is the single most common hardware wallet scam and it works precisely because the packaging looks professional.
The rule underneath this is worth stating on its own: the device must generate its own recovery phrase, in front of you, on its own screen. Any phrase that reached you by any other route — printed, emailed, texted, read out by "support", supplied by the seller — belongs to whoever sent it.
Two: signs the device has already been initialised. When you power on a new Ledger, it should offer you a choice between setting up as a new device and restoring from an existing recovery phrase. If instead it asks you for a PIN that you never set, someone else set it. Send it back.
Three: whether Ledger Live's genuine check passes. This is the step people skip and it is the strongest guarantee you get. When you connect the device, Ledger Live performs a cryptographic attestation against Ledger's servers — the secure element proves it is authentic hardware signed by the manufacturer, not a clone. A counterfeit device with convincing packaging will fail this check. If Ledger Live tells you the device could not be verified as genuine, stop. Do not enter a recovery phrase, do not fund it, and contact Ledger support through a URL you typed yourself rather than one from an email.
Note what is not on that list: tamper-evident seals. Ledger deliberately does not rely on holographic stickers, because stickers are trivially cloned and they create false confidence. The cryptographic attestation is the real check. A sealed-looking box tells you nothing. A passing genuine check tells you a great deal.
Installing Ledger Live and Initialising the Device
Now the actual sequence. Do this in one uninterrupted sitting, at home, on a machine you control, with nobody looking over your shoulder and no camera in the room. Not in a coffee shop. Not on a work laptop with a monitoring agent on it. Give it forty minutes and do not rush the middle.
Download Ledger Live from ledger.com, by typing the domain. On desktop, verify you are on the real site before you click download. On mobile, be aware that fake wallet apps have made it into both major app stores in the past; cross-check the developer name, and ideally follow the store link from ledger.com rather than searching the store directly.
Connect the device and choose "set up as new device." The device generates the private key internally, using its own hardware random number generator, on the secure element. Nothing on your computer ever sees it, and that is the entire product. Any flow that involves a key or phrase appearing on your computer screen first and then being typed into the device is backwards, and is exactly what a fake setup looks like.
Set a PIN on the device itself, using the device buttons or touchscreen. Ledger allows 4 to 8 digits. Use 8. The PIN is what protects you if someone physically takes the device, and three consecutive wrong guesses wipes it — which sounds harsh but is exactly what you want, because it makes brute-forcing impossible and a wipe is fully recoverable from your phrase. Do not use a birth year, a repeated digit, an ascending sequence, or your phone unlock code. Do not use anything an attacker could find on your social media. Pick something arbitrary that you will genuinely commit to memory, and note that some models scramble the digit layout on screen specifically to defeat shoulder-surfing and hidden cameras.
Let the device show you the 24 words, one at a time, and write them down as it goes. Then confirm them on the device when it asks you to. That confirmation step is not busywork — it is the only proof that what you wrote on paper matches what the chip actually holds.
Run the firmware update when Ledger Live offers it. Devices sit in warehouses for months, and firmware updates carry real security fixes, better transaction display, and clear-signing support for more chains. Do this at setup, before funding, while there is nothing at risk. Only ever update through Ledger Live. A firmware update prompt arriving by email or appearing on a website is an attack. The device verifies update signatures itself, so a bogus firmware image cannot actually be installed, but the social version of this attack — a fake update page that asks you to enter your phrase "to restore your accounts after updating" — does not need to beat the cryptography. It only needs to beat you.
Your 24 Words: The Rules That Actually Matter
Everything else in this article is a precaution. This part is the wallet. The 24 words are your crypto; the device is only a convenient, tamper-resistant way to use them. Lose them and no support ticket, court order, or company can help you. Let someone else see them and your funds are already gone, whether or not you still physically hold the device.
So, precisely:
Physical only. Write them by hand on the supplied sheets, or better, stamp them into a metal backup plate. Paper survives neither a fire nor a burst pipe, and cheap ink fades within a decade. If your holdings justify a $150 device, they justify a $40 steel plate.
Never photograph them. Not "temporarily", not "just until I write them properly". Your camera roll syncs to a cloud account protected by a password and an SMS code, both of which are attackable, and photos are indexed by text recognition. A photograph of a recovery phrase is a recovery phrase stored on somebody else's server.
Never type them into anything that is not the Ledger device itself. Not a text file, not a notes app, not a password manager, not an encrypted archive, not a spreadsheet you intend to delete afterwards. The only legitimate reason to ever type those words again is restoring onto a hardware wallet, keyed in on that device's own buttons or screen. There is no second legitimate reason. Password managers are excellent tools and this is the one thing you must not put in one, because it collapses your entire crypto security down to your master password.
Nobody legitimate will ever ask for them. Not Ledger support. Not a wallet "migration" or "validation" tool. Not an airdrop claim page. Not a Discord moderator. Not a "security team" emailing you about suspicious activity on your device — which, incidentally, is not a thing a hardware wallet can even detect, because it has no idea what your balance is. Every single request for a recovery phrase, without exception, is theft. If you internalise one sentence from this article, make it that one.
Store the words separately from the device. The phrase in one place, the Ledger in another. A burglar who finds both in the same drawer has everything, and the second location costs you nothing but a little thought.
Consider how it survives you. If nobody else can ever find the phrase, your crypto dies with you. If it is easy to find, it is easy to steal. A sealed envelope with a solicitor, a bank deposit box, or a written copy split across trusted people are all imperfect answers, but "no plan at all" is the worst answer available and it is the one most people pick by default.
Verifying an Address and Making the First Transfer
Do not move your whole balance first. Send a small test amount, confirm it arrives, then send the rest. The extra network fee is the cheapest insurance you will ever buy.
The critical habit here is address verification, and it defeats an attack most people have never heard of. Clipboard-hijacking malware sits quietly on a computer, watches for anything that looks like a crypto address being copied, and silently swaps it for the attacker's. You paste what you believe is your address, it looks plausible enough, you send, and it is gone. This class of malware has been circulating for years because it is cheap to write and it works.
The defence is built into the device. When Ledger Live shows you a receive address, it also displays that address on the device screen and asks you to confirm it matches. Read it. Not the first four characters — the whole thing, or at absolute minimum the first six, the last six, and a chunk from the middle. Malware can control every pixel on your monitor. It cannot control the screen on the hardware wallet, which is the only display in the room you can trust. That asymmetry is the thing you actually paid for.
If you are moving funds off an exchange, work in the same disciplined order: verify the address on the Ledger screen, paste it into the exchange, send a small test, wait for confirmations, check the balance appears in Ledger Live, then send the remainder. Whitelist the address in the exchange's withdrawal settings if it offers that — most do, and whitelisting usually enforces a delay of roughly 24 hours before a newly added address can be used, which is exactly the friction you want if somebody ever gets into your exchange account.
Worth being clear about what belongs where. Cold storage and trading capital are two different piles with two different jobs. Long-term holdings go on the Ledger where you control the keys. An active trading float stays on whatever exchange you actually trade on — a Bybit account -> or similar — because you cannot trade from cold storage and pretending otherwise just leads to people leaving everything on the exchange out of convenience. Keep the two separate, deliberately, and be honest with yourself about which is which. The failure mode to avoid is a "temporary" exchange balance that quietly becomes your savings.
One practical warning about networks. Sending an asset on the wrong chain is the most common self-inflicted loss in crypto, and a hardware wallet does not protect you from it. Check that the network selected on the sending side matches the account the receive address came from. Assets sent to a correct-looking address on the wrong network are sometimes recoverable with technical effort and sometimes permanently gone.
Blind Signing, and the Attack That Catches Careful People
Here is where people who did everything else right still lose money.
When you send plain Bitcoin or Ether, the device can show you a human-readable summary: this amount, to this address, this fee. Approve or reject. Straightforward. But when you interact with a smart contract — a swap, an NFT mint, a staking deposit, an airdrop claim — the thing you are approving is a blob of contract call data. If your device cannot decode that into plain language, it can only ask you to approve an unreadable payload. That is blind signing, and it is how wallets get drained by users who pressed the button themselves.
The dangerous version is a token approval. A malicious contract asks for permission to spend a token on your behalf, frequently for an unlimited amount and with no expiry. On screen it looks like the routine "approve" step that precedes a swap. You confirm it on the device, correctly, with your PIN, exactly as designed — and the attacker now holds a standing authorisation to move that token out whenever they choose, possibly weeks later, with no further interaction from you at all. Nothing was compromised. You granted it.
This is not hypothetical at the ecosystem level either. In late 2023 an attacker compromised a widely used Ledger-published JavaScript library that many decentralised applications loaded directly into their front ends, and for a few hours entirely legitimate sites were serving a wallet-draining prompt to their own users. People who blind-signed lost funds. People who read what they were being asked to approve, or who declined an approval that did not match the action they had just taken, did not.
So, the rules. Turn on clear signing wherever it is available — current Ledger firmware and Ledger Live can decode a growing set of contracts into readable summaries, which is precisely why running that firmware update matters. Leave blind signing disabled by default, and enable it only deliberately, for one specific transaction you understand, then switch it off again. Prefer the larger-screen models if you do this often, because "I scrolled through it" is a lie everyone tells themselves on a two-line display. Periodically review and revoke token approvals you no longer need. And treat any signature request that appears without you having initiated an action as hostile, every single time, with no exceptions for how official the site looks.
The Optional Passphrase (25th Word): Read This Before You Enable It
A passphrase is an extra secret you add on top of your 24 words. Together, the two derive a completely different wallet. The 24 words alone open one set of accounts; the 24 words plus the passphrase open another, entirely separate set, and there is no way to tell from the phrase alone that the second one exists.
The upside is real and large. Someone who finds your metal backup — a burglar, a curious relative, a search at a border — gets the phrase-only wallet and nothing else. If you keep a small decoy balance there, that theft looks complete and successful to them. This is the strongest protection available against physical discovery of your backup, and it costs nothing.
Now the part that gets glossed over in most guides, and the reason I do not recommend it universally: the passphrase is not recoverable, and it is not stored anywhere. It is not written on your recovery sheet. Ledger does not have it. The device does not remember it. If you forget it, or mistype it when writing it down, or die without anyone knowing it exists, the funds in that wallet are permanently unreachable even though you still hold the correct 24 words. There is no partial credit either — a passphrase is case-sensitive and space-sensitive, and one wrong character silently opens a different, empty wallet rather than showing an error. That silence is the trap. It will not tell you that you got it wrong. It will just show you an empty account and let you assume the worst.
If you enable it, do it properly. Choose something long and memorable to you but not derivable from your public life — not your dog's name, not a password you have used elsewhere, not a line from something you have posted about. Back it up physically, in a different location from the 24 words, so that neither location alone is sufficient to move funds. Then test the whole arrangement before you fund it: set the passphrase, load a trivial amount, wipe the device, restore from the 24 words plus the passphrase, and confirm the funds reappear. If you are not willing to run that test, do not use a passphrase. A well-hidden metal backup and a strong PIN is a perfectly respectable security posture, and it is far better than a passphrase you have half-configured and are not confident you can reproduce under stress.
Separately, you may see Ledger's optional paid recovery service offered around setup. It is opt-in, it requires explicit on-device approval, and plenty of thoughtful people consider its very existence a reason to prefer another vendor. You do not need it, the default setup does not use it, and you can simply decline. Deciding how you feel about it is a separate conversation from getting set up safely, and skipping it costs you nothing at all.
The Week After Setup: Hygiene That Keeps It Safe
Setup is a day. Security is a habit. Five things to do in the week that follows.
Do a full restore drill. Before real money sits on the device, wipe it — enter the PIN wrong three times deliberately — and restore from your written words. This is the only way to know your backup is actually correct. Handwriting errors, transposed words, a misread "9" and "g": these are normally discovered years later by people who then have nothing. It takes ten minutes now and it is the highest-value ten minutes in this entire process.
Get the funds out of the places they should not be. The whole point of the exercise is that long-term holdings stop living in an account whose keys you do not control. Move them. If you also keep an active trading balance on an exchange, that is fine and normal, as long as you have decided on purpose how much sits there.
Assume you are on a phishing list. Given the historical breach, treat every unsolicited message referencing Ledger, your wallet, or crypto generally as hostile. Real support never initiates contact asking you to take an urgent action. Anything urgent is a manufactured emergency, engineered specifically to make you skip one of the checks in this article.
Keep the software and firmware current, through Ledger Live only. Updates ship clear-signing support for more contracts over time, which directly reduces how often you are tempted to blind-sign something.
Scale the setup to the balance. A few hundred dollars does not need a passphrase, a safe deposit box and a geographically distributed backup. Six figures does. Revisit the arrangement when the number changes materially, rather than configuring it once for a small balance and never looking at it again as the stack grows.
If you have read all of this and the device is still sitting in a browser tab rather than in your hands, get one from the official Ledger store -> and set it up this weekend. The most common failure mode in self-custody is not a sophisticated attack. It is procrastination, followed by an exchange failure.
FAQ
Can Ledger see my recovery phrase or access my crypto?
No. The private key is generated inside the secure element on the device and never leaves it. Ledger Live sends unsigned transactions to the device and receives signed ones back; the key itself is never transmitted anywhere. This is also why nobody at Ledger can help you if you lose your 24 words — they genuinely do not have them, and any message claiming otherwise is an impersonation. The corollary is that self-custody has no customer service and no password reset. That is the trade you are making, and it is worth making consciously rather than discovering later.
What actually happens if I lose or break the device?
Nothing, provided you have the 24 words. Your crypto is recorded on the blockchain, not stored on the device — the device only holds the key that authorises spending it. Buy a replacement, choose "restore from recovery phrase" during setup, key the 24 words in on the new device, and every account reappears with its balances intact. Any BIP39-compatible hardware wallet can perform that restore, not only another Ledger. This is precisely why the phrase must be protected far more carefully than the hardware. The device is replaceable for the price of a device. The phrase is not replaceable at any price.
Is it safe to buy a Ledger secondhand or from a marketplace?
No, and this is one of the few genuinely black-and-white answers in crypto security. A secondhand device may have been initialised with a key the previous owner still holds. A marketplace device may have been intercepted, initialised and repackaged. Neither situation is detectable by inspecting the packaging, and both leave you funding a wallet somebody else can empty. Buy from the manufacturer or an officially listed reseller, run the genuine check in Ledger Live, and generate your own phrase on the device. The saving is never worth that category of risk.
How many digits should my PIN be, and what if I forget it?
Use the full 8 digits, avoid anything derived from personal dates, and do not reuse your phone passcode. Three consecutive wrong entries wipes the device deliberately, so that a stolen device cannot be brute-forced by someone working through likely combinations. If you forget the PIN, the recovery path is to let it wipe and then restore from your 24 words, which is inconvenient but completely survivable. What is not survivable is forgetting the PIN and having also lost the phrase, which is the scenario every rule in the seed phrase section exists to prevent.
Do I still need a passphrase if I already have a strong PIN?
Not necessarily. The PIN protects the physical device; the passphrase protects the written backup. If you are confident your 24 words are somewhere nobody will stumble across them, a strong PIN plus a well-hidden metal backup is a sound setup and you can stop there. Add the passphrase when the balance is large enough that discovery of the backup would be catastrophic, and only if you are willing to run the full wipe-and-restore test to prove you can reproduce it exactly. An untested passphrase is a way to lose your own money, not a way to protect it.
Final Thoughts
The security of a hardware wallet is almost entirely determined by decisions made in the first hour: where the device came from, whether the key was generated by the chip or handed to you by somebody else, where the 24 words end up, and whether you build the habit of reading the device screen instead of the computer screen. Get those four right and the remaining risks are small and manageable. Get any one of them wrong and the other three will not save you.
None of it is difficult. It is just unforgiving in a way that most consumer technology is not, because there is no undo and no support line. Set aside an evening, do it properly once, run the restore drill, and then mostly forget about it — which is exactly what good security is supposed to feel like. Get a Ledger and set it up properly -> rather than leaving another year of savings on an exchange and hoping.
Affiliate Disclosure: This article contains affiliate links. If you buy through them I may earn a commission at no extra cost to you. It does not change what I recommend — buying direct from the manufacturer is the correct advice regardless of whether anyone is paid for it, and I would give exactly the same guidance with no links in the page at all.
Disclaimer: This article is for informational purposes only and is not financial advice. Crypto trading involves significant risk of loss. Never trade with money you cannot afford to lose. Always do your own research (DYOR).