Step-by-Step Setup: Nano S Plus & Stax

Try Tangem secure wallet →

Step-by-Step Setup: Nano S Plus & Stax

Table of contents


Introduction

This guide walks through a practical, step-by-step setup for two popular hardware wallet models: Nano S Plus and Stax. I cover unboxing checks, initial setup, restoring and entering a seed phrase, pairing Stax with a phone, firmware updates, and everyday security habits. The instruction style is hands-on and assumes you want a secure, non-custodial (you control the private keys) setup for long-term crypto storage.

In my testing these setups are straightforward but detail matters. Small mistakes during setup are where most losses begin, so I explain why each step exists and the security trade-offs involved.


Before you start: unboxing & supply-chain checks

  1. Inspect packaging for unusual seals or signs of tampering. If anything looks altered, stop and consult the seller (see our guide on buying & supply-chain safety).
  2. Only initialize the device with the official companion application (Ledger Live) downloaded from the official source—avoid third-party copies. See Ledger Live download & install.
  3. Prepare writing materials and a metal backup plate (recommended). Paper is okay for immediate setup but transfer to a hardened backup later. And keep the seed offline.

(Image: unboxing placeholder)


Quick comparison: Nano S Plus vs Stax

Feature Nano S Plus Stax
Input method Physical buttons for confirmation Touch-first interface (large curved display)
Connectivity USB-C wired setup USB-C + mobile pairing (Bluetooth)
On-device seed entry Yes (select/confirm words on-device) Yes (touch keyboard on-device)
Best for Wired, minimal attack surface, desktop-first users Mobile-first users who want richer on-device UX
Trade-offs Simpler surface; fewer mobile conveniences More features and convenience; slightly larger attack surface because of wireless pairing

This table highlights feature differences at a glance. For a deeper compatibility check, see our compatibility matrix.


Step-by-step: Nano S Plus setup (USB)

How to perform a clean Nano S Plus setup (nano s plus crypto hardware wallet setup):

  1. Connect the device to your computer with the supplied USB-C cable.
  2. Power on and select "Set up as new device" or "Restore from recovery phrase" on-device.
  3. Choose a PIN on-device (memorize it; do not store it digitally). The device will ask you to confirm the PIN.
  4. The device will display a seed phrase (usually 24 words). Write every word in order on the provided recovery sheet. Do not take photos or store the phrase on a phone/computer.
  5. Confirm the seed on-device when prompted (this prevents a mistaken recording).
  6. Install Ledger Live on your computer (download/install guide). Use Ledger Live to add accounts and install the apps you need (manage apps).
  7. If Ledger Live prompts for a firmware update, follow the on-screen steps, confirm on-device, and verify the update success. For more on authenticity, see firmware update & verify.

Update note: update ledger nano s plus by using Ledger Live and accepting only firmware prompts that appear after connecting the device. I found that keeping firmware current reduces exposure to known vulnerabilities.


Step-by-step: Stax setup (touch + phone pairing)

How to perform a Ledger Stax setup and pair with a phone (ledger stax setup & pair ledger stax with phone):

  1. Inspect packaging and power on the Stax.
  2. On-device choose "Set up as new device" or "Restore from recovery phrase." When creating or restoring, enter the seed phrase directly on the device (enter seed phrase on Stax) using the touch keyboard—never paste from a phone or computer.
  3. Set and confirm a PIN on-device.
  4. Install Ledger Live mobile from the official source and open it. Enable Bluetooth on your phone if prompted.
  5. Follow the mobile app prompts to discover the device and start pairing. Confirm pairing on the Stax screen when asked.
  6. Install account apps and add your accounts via Ledger Live. Confirm addresses on-device before sending or receiving.

But remember: when you pair a device with a phone, treat the pairing like a permission—review paired devices and unpair when not needed. For more on mobile connections see mobile setup and walletconnect & Bluetooth.


Seed phrase, passphrase and backups

Want to avoid losing access to funds? Use multiple geographically distributed backups and consider a multisig setup for estate planning (more below).


Firmware updates and verifying authenticity

Firmware protects the secure element and the signing process. Do updates through Ledger Live only. When a firmware update is available:

  1. Confirm the update in Ledger Live.
  2. Verify the prompt on the device and confirm there are no unexpected messages.
  3. After update, Ledger Live will often show an attestation or verification step. If anything looks off, disconnect and check guides at firmware update & verify.

I believe routinely updating firmware (after reading release notes) balances security with stability. But test upgrades on a secondary device if you rely on a custody-critical setup.


Security architecture & connectivity trade-offs

Both models store private keys inside a secure element that isolates the keys from the main processor. That means signatures happen inside the device; the host (phone/computer) never sees private keys.

Air-gapped signing (fully offline signing) is the ideal for maximum safety, but not all workflows require that complexity. Wireless pairing (Bluetooth) adds convenience for mobile use. However, wireless means a slightly larger attack surface, so restrict Bluetooth usage to trusted environments and keep firmware current.

For deep technical context see security architecture explained and air-gapped signing.


Common mistakes and daily-usage tips

If you run into problems, our troubleshooting pages cover common errors like connection failures and firmware that won’t complete: troubleshoot cannot connect and troubleshoot firmware stuck.


Multisig, advanced workflows & who should consider which model

Multisig distributes signing power across multiple devices (or people), improving resilience against single points of failure. Both models can be used in a multisig arrangement with compatible third-party wallets. See multisig setup and multisig workflows.

Who each model is best for:

Who should look elsewhere: if you require fully air-gapped signing or Shamir backups built into the device, consider specialized setups described in backup & SLIP-39 and air-gapped signing.


FAQ

Q: Can I recover my crypto if the device breaks? A: Yes — as long as you have the correct seed phrase and any passphrase, you can restore on another compatible hardware wallet or supported software. See restore & recover failures.

Q: What happens if the company goes bankrupt? A: Your crypto is non-custodial. Funds are controlled by private keys derived from your seed, not by the company. Store your seed and passphrase safely.

Q: Is Bluetooth safe for a hardware wallet? A: Bluetooth introduces a larger attack surface compared with USB, but when used with modern firmware, authenticated pairing, and device verification it is reasonably safe for most users. For highest assurance, favor wired or air-gapped workflows.


Conclusion & next steps

Setting up a Nano S Plus or a Stax correctly is mostly about careful attention to the seed phrase, PIN, and firmware verification. Follow on-device prompts, enter your seed on-device (never on a computer), and keep backups on a hardened medium.

Ready to continue? Read the next guides on firmware update & verify, seed phrase basics, and install apps & manage space to complete your setup.

But first, double-check your recovery backup.

Try Tangem secure wallet →