Quick start: who this guide is for
This page is a practical, hands-on setup and configuration guide for a modern hardware wallet used for long-term crypto storage. If you hold non-custodial accounts, plan to move significant crypto off exchanges, or want a reference for secure setup, this is for you. If you prefer custodial solutions or only plan tiny frequent trades, a hardware wallet might be overkill.
In my experience, new users benefit from a calm, checklist-driven setup. What I've found: a careful setup now prevents avoidable loss later.
(See the beginner-friendly overview for initial steps: /getting-started-setup).
Unboxing & supply-chain checks
Open the box on camera if possible. Inspect for torn seals, extra tamper tape, or unexpected stickers. If packaging looks tampered with, stop and contact the seller; do not connect the device. Buy only from official channels or verified resellers—more on that in /where-to-buy-and-seller-safety.

Setup checklist (what to prepare)
- A clean, offline surface and a pen for writing your seed phrase.
- Metal backup plate or recovery card (recommended for long-term storage).
- Official companion app on a trusted computer or mobile device (download instructions: /ledger-live-download-install).
- Time: 15–30 minutes for initial setup and at least one small test transaction.
And yes — do this with a small test amount first. But don't rush the backup step.
Step-by-step: How to set up your hardware wallet
Below is a general, step-by-step flow. Exact screen text differs by device, but the sequence is consistent across major hardware wallets.
Initialize, PIN, and seed phrase
- Power on the device and choose "Set up as new device" (or similar).
- Create a PIN on the device. Choose a PIN you can remember but that isn't easy to guess; avoid simple patterns.
- The device will display your seed phrase (the recovery phrase). This is the master key to your accounts (BIP-39 standard in many cases). Write it down on the provided recovery card — do not take photos or store the phrase digitally.
- Confirm the seed phrase when prompted.
If you lose the seed phrase, you lose access to your private keys. Simple.
Install companion app and coin apps
- Install the official companion app on a trusted computer or phone (link: /ledger-live-download-install).
- Connect the device, follow on-screen prompts to pair, and allow any requested permissions.
- Install the specific coin apps you need (space management varies by device). See /install-apps-manage-space and /supported-cryptocurrencies.
- Add accounts in the companion app and receive a small test transaction to confirm everything works.
Seed phrase, backups, and advanced options
A seed phrase is typically 12 or 24 words following the BIP-39 standard (which defines how words translate to a private key). If offered alternative schemes (like Shamir / SLIP-39), they let you split recovery into multiple shares which increases resilience but also adds complexity.
12 vs 24 words; BIP-39 and SLIP-39 (Shamir)
- 12 words are convenient and still secure for many users; 24 words add entropy and future-proofing against brute-force advances.
- SLIP-39 (Shamir) allows you to split backup into multiple shares that require a threshold to recover. This helps distribute risk across geographic locations or trusted parties.
What I've found: SLIP-39 is excellent for estate planning or institutional setups, but it requires careful record-keeping of share distribution.
Metal backups and storage practices
Paper can degrade. Steel or other metal backup plates protect your seed phrase from fire and water. Store backups in secure, geographically separated locations if you hold significant value. See /backup-recovery-best-practices for templates and checklists.
Passphrase (the “25th word”): benefits and risks
A passphrase is an optional extra string added to your seed phrase. It acts like a 25th word but is not stored on the device. Benefits: it creates hidden wallets and adds another layer of protection. Risks: if you forget the passphrase, the funds are unrecoverable even with the original seed phrase.
I believe passphrases are powerful for advanced users who can reliably manage them. For many people, a properly secured 24-word seed with metal backup and geographic distribution is sufficient. Read more on passphrase trade-offs: /passphrase-usage-risks.
Firmware updates and authenticity verification
Firmware updates patch vulnerabilities and add new coin support. Always update firmware via the official companion app and verify the update's authenticity per the device's verification guide (for step-by-step checks see /firmware-updates-and-verification).
Never install firmware files from random links or third parties. If an update fails or the device behaves unexpectedly during an update, consult /troubleshoot-firmware-stuck.
Connectivity: USB, Bluetooth, NFC, and air-gapped signing
Connection type affects convenience and attack surface. Air-gapped signing (signing transactions without a live network connection) is the most secure model for large, long-term holdings, though it is less convenient.
Connection comparison table
| Connection |
Pros |
Cons |
When to use |
| USB (wired) |
Stable, no radio attack surface |
Can be vulnerable to compromised host if used carelessly |
Everyday desktop use; preferred for large transfers or firmware updates |
| Bluetooth |
Convenient for mobile; wireless |
Larger attack surface; requires caution in public settings |
Small, frequent mobile transactions; avoid for very large balances |
| NFC |
Quick pairing for payments |
Limited device support; short range only |
Mobile payments and quick confirmations |
| Air-gapped (QR/SD) |
Highest isolation; signs offline |
Slower, more complex workflow |
Long-term cold storage, vault-style setups |
For air-gapped workflows, see /air-gapped-signing.
Multisig, cold storage strategies, and inheritance planning
Multi-signature setups distribute signing power across multiple devices or people and reduce single points of failure. Use multisig if you want redundancy (and shared control) or a stronger defense against loss or theft. Read the compatibility notes before building a multisig wallet: /multisig-setups.
For inheritance, a documented plan with clear instructions and secure distribution of backups is essential. Consider legal advice and keep sensitive elements split across trusted parties.
Common setup mistakes to avoid
- Buying from unofficial sellers or marketplaces.
- Photographing or storing your seed phrase on cloud services.
- Typing your seed phrase into a phone or browser wallet.
- Skipping a test transaction before moving large sums.
- Using the same passphrase across multiple accounts.
For troubleshooting tips and recovery steps see /troubleshoot-firmware-stuck and /recovery-when-device-breaks.
FAQ
Q: Can I recover my crypto if the device breaks?
A: Yes—if you have the seed phrase (and passphrase, if used), you can restore to another compatible hardware wallet or supported software that accepts the seed format. Test recovery on a spare device if possible.
Q: What happens if the company goes bankrupt?
A: Your crypto lives on the blockchain and is controlled by your private keys, not the company. Still, company failure can affect support, firmware availability, and integrations—keep recovery options documented and use widely supported standards (BIP-39, widely supported derivation paths).
Q: Is Bluetooth safe for a hardware wallet?
A: Bluetooth increases convenience at a small cost to attack surface. For very large balances, prefer wired or air-gapped workflows. For daily small transactions, Bluetooth is often acceptable with good operational hygiene.
Conclusion & next steps
A careful, staged setup protects long-term holdings. Start with the checklist, write down and secure your seed phrase, and verify firmware using official channels. In my testing, a small test transfer followed by scheduled backups saved time and stress later.
Want more detail? Read the beginner walk-through (Getting started), how to verify firmware (Firmware verification), and deeper backup strategies (Seed phrase management).
If you prefer a checklist PDF or step-by-step walkthrough for a specific connection type, check the related guides linked above and the compatibility matrix: /compatibility-matrix.
Stay secure, and always confirm addresses on your hardware wallet screen before sending funds.