Why hardware wallet security matters
A hardware wallet holds the private keys that control your crypto. If those keys are exposed, funds can be moved without your consent. I started using hardware wallets during the 2017–2018 cycle, and what I learned back then still applies: physical control and a correctly stored seed phrase form the backbone of long-term self-custody. Short sentence. Long sentence explaining why: a single leaked seed phrase can let an attacker recreate your wallet and drain funds (and yes, that has happened to real people).
For deeper background on seed phrases, see Seed phrase basics. If you want a walkthrough on recovery after a device failure, check recovery-when-device-breaks.
PIN: choose, use, and avoid common mistakes
A PIN protects the device from casual access. It is a defense layer, not the only one. Use a PIN you can remember but that an attacker cannot guess quickly. Avoid simple sequences (1234, 0000), birthdays, and obvious repetitions.
What I’ve found in testing is that many people pick a short, easy PIN because they fear lockouts. That’s backwards: the device will usually allow a secure number of retries before requiring a full restore from the seed phrase.
How to: Step by step PIN setup
- Power on the device and follow the on-screen prompts to create a new wallet.
- When asked to set a PIN, choose at least 6 digits if the device supports it (longer is better). Use a mix of non-repeating, non-patterned digits.
- Confirm the PIN by entering it again on the device. Never type the PIN into a computer or phone app when asked by an untrusted page.
- Store your seed phrase immediately (see next section). Test the PIN by locking and unlocking the device once.
Avoid writing your PIN on the same page as the seed phrase. Separate the two. But also don’t hide the PIN so well that you forget it forever.
Passphrase (the optional 25th word): pros, cons, and how to use it
A passphrase adds a second secret to the seed phrase — sometimes called a 25th word. It can turn one seed phrase into many independent accounts. I use passphrases in specific scenarios, but I treat them like an extra private key: if you lose it, your funds may be irrecoverable.
Benefits:
- Adds plausible deniability: multiple hidden wallets from the same seed phrase.
- Reduces risk if the seed phrase alone is compromised.
Risks:
- If you forget the passphrase, you cannot recover funds (no company can help).
- Writing the passphrase down next to the seed phrase defeats the purpose.
How to use safely:
- Consider a strong, memorable passphrase rather than random characters (but longer is better).
- Keep the passphrase separate from the seed phrase backups. Store it in a different physical location.
- Test access after setup by unlocking the exact hidden account and verifying addresses.
For a deeper discussion of passphrase trade-offs and risks, see passphrase-usage-risks.
Seed phrase safety: generation, storage, and metal backups
Seed phrase safety is the single most important operational habit. Think of your seed phrase like the master key to a safe deposit box. Treat it accordingly.
Generation: always generate the seed phrase on the hardware wallet itself (air-gapped where supported). Do not accept seeds from a third party. If the device displays a list of words during setup, copy them exactly in order by hand.
Storage options:
- Paper: accessible but fragile and vulnerable to fire/water. Not recommended as the only copy.
- Metal backup plates: robust against fire, corrosion, and time-related degradation. I use metal plates for long-term storage. And yes, they cost extra but they pay off over decades.
- Shamir-based or SLIP-39 backups: splits the seed into shares so a subset can reconstruct the master — useful for redundancy without a single point of failure. See backup-metal-slip39 and shamir-slip39-guide for more.
Avoid exposing seed phrase in photos, cloud storage, or text files. That is the quickest path to theft. If you want a primer on best practices, check seed-phrase-management.
Physical security & supply-chain verification
Physical security starts at purchase. Never buy a used hardware wallet; a previously owned device can have compromised firmware or an unchanged seed. Always buy from a reputable seller and verify packaging for tamper evidence.
What to check on arrival:
- Tamper-evident seals and packaging (visual inspection).
- Factory reset state: the device should prompt you to create a new seed phrase rather than come pre-loaded with one.
- Firmware version and authenticity checks during the initial setup.
If you want a practical checklist for where to buy and how to verify a device, see where-to-buy-and-seller-safety and supply-chain-and-tamper-risks.
Connectivity risks: USB vs Bluetooth vs NFC
Connection type affects attack surface. USB-only connections limit wireless attack vectors but still expose the device to host-based exploits. Bluetooth and NFC add convenience (mobile signing, wireless use) but increase the number of potential entry points.
Comparison table: connection trade-offs
| Connection |
Typical use |
Security trade-offs |
| USB (wired) |
Desktop usage, charging |
Lower wireless attack surface; host malware remains a risk |
| Bluetooth (wireless) |
Mobile convenience, hands-free |
Adds radio attack surface; require strong pairing and firmware checks |
| NFC |
Tap-to-connect mobile workflows |
Short-range but still adds complexity; verify what data is transmitted |
For air-gapped signing, see air-gapped-signing. If you primarily use mobile apps, read wallet-connect-bluetooth and connect-mobile-wallets.
Firmware updates: why verify and how to do it safely
Firmware protects against known bugs and improves device security — but bad firmware can break trust. Always update firmware using the official desktop or mobile method and verify the integrity of the update when the device or official tools provide a fingerprint or signature check.
Step-by-step safe update practice:
- Confirm the update on the manufacturer's official site (use a bookmarked link or the device's verified app). Do not click links from unsolicited emails.
- Read the release notes and confirm the update number displayed on the device.
- Follow the device prompts, verify signatures if offered, and never enter your seed phrase during an update.
See firmware-update-verify for an expanded checklist and troubleshooting tips.
Multisig, recovery options, and inheritance planning
Multisig (multi-signature) spreads trust across multiple keys or devices. For larger holdings or custodial-risk mitigation you should consider multisig — but it adds operational complexity and recovery planning requirements.
If you prefer a single device, make sure your backup strategy (metal plates, geographically separated copies) and an inheritance plan are rock-solid. For multisig guides, see multisig-setups and for estate planning, see inheritance-and-estate-planning.
Common mistakes, practical checklist, and FAQ
Common mistakes:
- Buying a used device.
- Photographing or storing seed phrases in cloud services.
- Writing PIN and seed phrase on the same paper.
- Accepting unsolicited firmware or support links.
Practical checklist before moving funds:
- Device is new or factory-reset.
- PIN set and tested.
- Seed phrase recorded on a durable medium and stored separately from the device.
- Firmware up to date and verified.
- Passphrase decision made and stored securely (if used).
FAQ (short answers):
Q: Can I recover my crypto if the device breaks?
A: Yes — if you have the seed phrase or configured multisig. Follow recovery-when-device-breaks.
Q: What happens if the company goes bankrupt?
A: Your funds remain on-chain under your private keys; company bankruptcy does not give control of your keys to anyone. That said, firmware and tool support may degrade, so consider long-term recovery plans and open-source tools.
Q: Is Bluetooth safe for a hardware wallet?
A: Bluetooth can be safe if implemented correctly, but it adds a larger attack surface than wired connections. Use Bluetooth only when necessary and keep firmware current.
Q: How do I avoid exposing seed phrase to phishing attacks?
A: Never enter your seed phrase into a website or phone app. Phishing pages mimic official support; always check URLs and follow trusted guides such as common-mistakes and where-to-buy-and-seller-safety.
Conclusion and next steps
Protecting a hardware wallet is largely about habits: choose a strong PIN, decide whether a passphrase fits your threat model, and treat the seed phrase like the master key it is. I believe practical redundancy (metal backups, separated locations) plus regular firmware verification will prevent most real-world losses. Want setup walkthroughs or deeper step-by-step guides? Start with getting-started-setup and then check seed-phrase-management and firmware-update-verify.
Next step: run the device setup now (or later, but don’t procrastinate). Secure your PIN and seed phrase separately, and test recovery before moving significant funds.
