Quick overview: Bitcoin on a hardware wallet
A hardware wallet stores your private keys inside a dedicated device so that signing transactions happens without exposing keys to the internet. The device typically contains a secure element (secure chip) that isolates keys from your computer or phone. This is non-custodial self-custody: you control the seed phrase and thus control the bitcoin.
What I tell people first: always treat the seed phrase like the master key to a safe deposit box. Write it down. Back it up on metal when possible. (More on backup options here.)
Short version: this guide covers how to perform a bitcoin ledger setup, create bitcoin wallet on Ledger, obtain and verify a ledger bitcoin wallet address, and choose between Legacy, SegWit, and Native SegWit address types.
Step by step: create bitcoin wallet on Ledger
This is a step-by-step overview for creating a bitcoin account on a hardware wallet and generating receiving addresses.
- Unbox and inspect the device. Check for tamper evidence. If anything looks altered, stop and consult the seller (see where to buy and seller safety).
- Power the device and follow the on-screen setup: set a PIN and opt to create a new seed phrase (or restore an existing one).
- Write down the seed phrase exactly as shown. If the device offers 24 words, that’s often the default for higher entropy; 12-word seeds are common too. Read our primer on seed phrase basics.
- Install the companion desktop or mobile app (the model’s manager app) on your computer and confirm its download source: use the official site or official stores. See the companion app install guide here.
- Inside the companion app, install the Bitcoin app on the device if required, then create a Bitcoin account. The app will derive addresses from your seed phrase inside the secure element.
How to get a receiving address
- Open the Bitcoin app on the device and then in the companion app open the Bitcoin account and click "Receive."
- The companion app will display a receiving address, but always verify the exact address on the device screen itself. The address string must match character-for-character.
- Copy the address, create a small test transfer (e.g., 0.0001 BTC) from your exchange or another wallet, confirm on-chain, then send larger amounts once you’re comfortable.
And a quick note: I always do a test transfer myself. It has saved me from typo mistakes.
Legacy vs SegWit vs Native SegWit — what changes and why it matters
Which address type you choose affects fees and compatibility. Here’s a compact comparison:
| Address type |
Common prefix |
Derivation (example) |
Pros |
Cons |
| Legacy (P2PKH) |
1... |
m/44'/0'/0'/0/0 |
Widely compatible with old services |
Higher fees, larger tx size |
| SegWit (P2SH-wrapped) |
3... |
m/49'/0'/0'/0/0 |
Lower fees than Legacy, good compatibility |
Slightly less native savings than bech32 |
| Native SegWit (bech32) |
bc1... |
m/84'/0'/0'/0/0 |
Lowest fees, modern format |
Older services may not recognize it |
Why do derivation paths matter? Different paths (BIP-44, BIP-49, BIP-84) determine how addresses are generated from your seed phrase. If you switch address type later, you may need to add an additional account in the companion app. For an advanced breakdown see advanced derivation paths.
Verifying addresses & transferring from an exchange (e.g., Coinbase)
Planning to transfer from Coinbase to your hardware wallet? Here are practical steps I use:
- Generate and verify a receiving address on the device (see above).
- Paste that address into Coinbase’s withdrawal dialog and double-check the first and last 6 characters match the device display.
- Do a small test transaction and wait for confirmations.
Why verify on the device? Because your computer or phone can be compromised by clipboard or browser malware. The device’s screen is the single source of truth for the address that holds your private keys.
If you want a walkthrough that includes exchange-specific tips and withdrawal settings, see transfers from exchanges and wallets.
Seed phrase, passphrase (25th word) and backup options
- 12 vs 24 words: 24-word seed phrases provide more entropy, but both are supported standards (BIP-39). Choose what fits your threat model.
- Passphrase (the so-called 25th word): this is optional. It creates a separate hidden wallet derived from the same seed. Use it only if you understand the trade-offs: it improves security but introduces a single point of loss — if you forget the passphrase, your funds are irrecoverable. See passphrase usage & risks.
- Backups: paper is fine temporarily. For long-term holdings use metal backup plates or a Shamir backup (SLIP-39) to resist fire, water and time. Read more at backup-metal-slip39.
But remember: never store backups in the same physical location as the device.
Security architecture: secure element, air-gapped signing & firmware
The secure element keeps private keys isolated. On many devices, firmware is cryptographically signed and verified before installation. Always update firmware using the official procedure and verify firmware authenticity (firmware updates & verification).
Air-gapped signing (where the device never connects to the internet at all) reduces exposure further. If you plan to use air-gapped workflows, check the air-gapped signing guide for compatible tools and steps.
Multisig and advanced setups
For long-term storage of large amounts, multisig setups distribute risk across multiple devices and/or geographic locations. Multisig requires coordination with compatible wallet software that supports multiple cosigners. See the step-by-step multisig guide at multisig setup.
What I've found: multisig is powerful but operationally heavier — you need backups for every cosigner and a tested recovery process.
Common mistakes and troubleshooting pointers
- Buying from unofficial sellers and receiving a tampered device — always buy from verified sources. See where to buy and seller safety.
- Exposing the seed phrase (photos, cloud backups, screenshots).
- Not verifying addresses on the device before sending funds.
- Losing the passphrase without a backup.
If the device won't connect or install an app, check the troubleshooting guides: troubleshoot cannot connect and firmware updates & verification.
FAQ — real user questions answered
Q: Can I recover my crypto if the device breaks?
A: Yes. If you have a correct seed phrase (and passphrase, if used) you can recover funds on a compatible hardware wallet or recovery tool that supports the same standards. Test your recovery process in advance.
Q: What happens if the company goes bankrupt?
A: Your bitcoin is controlled by your seed phrase, not the company. You still control the keys and can use other compatible tools to recover funds. Keep your backups safe.
Q: Is Bluetooth safe for a hardware wallet?
A: Bluetooth adds convenience but increases the attack surface. In my experience, wired connections or air-gapped signing are more conservative choices for large balances. If you use Bluetooth, follow good operational hygiene: keep firmware current and avoid pairing with untrusted devices.
Conclusion & next steps
Setting up bitcoin on a hardware wallet involves a few careful steps: initialize the device, back up the seed phrase, choose the address type that fits your needs, and always verify addresses on the device screen before receiving funds. I believe taking time with the initial setup prevents costly mistakes later.
Ready for the full walkthroughs? Start with the general getting started setup, then install the companion app (app install guide) and read the device-specific firmware verification steps (firmware update verify).
If you want guidance on custody models, check the multisig and cold-storage strategy pages: multisig setups and cold storage strategies.
And if anything is unclear, ask — what specific step are you stuck on? I can help clarify the screens and prompts you should see during setup.
