How to Set Up a Hardware Wallet (Ledger & Trezor)

Why a Hardware Wallet Is Worth It

A hardware wallet is a small physical device that stores your private keys offline and signs transactions internally, so your keys never touch an internet-connected computer. Even if your PC is riddled with malware, an attacker can't extract your keys. For anyone holding more than pocket money, it's the most important security upgrade you can make. Ledger and Trezor are the two most established brands.

Buy direct. Only purchase from the manufacturer's official website. Never buy a hardware wallet second-hand or from a third-party marketplace — tampered devices are a known attack.

Step 1 — Verify the Device Is Genuine and Untampered

• Check packaging for signs of tampering (though modern devices rely on cryptographic checks, not stickers).
• On first connection, the official app performs a genuineness check — let it run.
• The device must arrive without a pre-set PIN or a "pre-generated" recovery phrase. If it has either, stop — it's compromised.

Step 2 — Install the Official Companion App

Download Ledger Live (for Ledger) or Trezor Suite (for Trezor) only from the official website — type the URL directly. Fake companion apps are a common scam.

Step 3 — Initialize as a New Device

1. Connect the device and choose Set up as new device.
2. Set a PIN directly on the device. Choose something not easily guessed; the device wipes after too many wrong attempts.
3. The device will generate a brand-new recovery phrase (usually 24 words) on the device itself — never on your computer screen.

Step 4 — Back Up Your Recovery Phrase (Critical)

This is the whole point of the exercise. The recovery phrase can restore your funds on any compatible wallet, so treat it as the crown jewels.

• Write the words in exact order on the supplied card — or, better, stamp them into metal.
• Never photograph, type, or store the phrase digitally.
• Confirm the words on the device when prompted.
• Store two copies in separate secure locations. See our seed phrase guide.

Warning: Anyone with your recovery phrase can drain your wallet without the physical device. The phrase, not the device, is the real secret.

Step 5 — Add Accounts and Receive Funds

1. In the companion app, install the app/coin you need (e.g., Bitcoin, Ethereum) and add an account.
2. Click Receive and verify the address on the device screen matches the app — this defeats address-swapping malware.
3. Send a small test amount from your exchange first; once it arrives, send the rest.

Step 6 — Confirm Transactions On-Device

When sending funds or interacting with dApps, the device shows the details on its own screen. Always verify the address and amount on the device before approving — the screen is the one thing malware can't fake. You can even connect the hardware wallet to MetaMask (see our MetaMask guide) so DeFi transactions still require physical confirmation.

Optional: The Passphrase (25th Word)

Advanced users can add a passphrase — an extra secret word that creates a separate hidden wallet. It adds strong protection but, if forgotten, funds are unrecoverable. Only use it once you fully understand the trade-off.

Ongoing Best Practices

• Keep firmware updated via the official app only.
• Never enter your recovery phrase into a computer or website — the device never asks for it during normal use.
• Store the device reasonably securely, but remember the recovery phrase is what truly matters.

Final Thoughts

Setting up a Ledger or Trezor takes fifteen minutes and transforms your security posture. Buy direct, initialize as new, back up your recovery phrase offline in metal, verify addresses on the device, and always send a test transaction first. With a hardware wallet plus the habits in our wallet security guide, your long-term holdings become genuinely hard to steal.