How to Set Up a Hardware Wallet
Setting up a hardware wallet takes five steps: buy the device new from the manufacturer, initialize it yourself so it generates its own keys, write the recovery phrase on paper offline, set a PIN, and restore the wallet from that written phrase before you move any real money onto it.
Updated · By RampAtlas Research
Key takeaways
- Setting up a hardware wallet means buying direct, initializing it yourself, writing the recovery phrase offline, setting a PIN, and testing a restore before funding it.
- A genuine new device generates a recovery phrase in front of you, so any phrase printed on a card in the box means the device is compromised.
- BIP-39 allows 128 to 256 bits of entropy encoded against a fixed 2,048-word list, which is why recovery phrases come out at 12 or 24 words.
- The device screen exists so you can check the destination address somewhere malware on your computer cannot rewrite it.
- A hardware wallet protects the key from being copied, and it does not protect you from approving a transaction that steals your funds.
In this guide
Setting up a hardware wallet takes five steps: buy the device new from the manufacturer, initialize it yourself so it generates its own keys, write the recovery phrase on paper offline, set a PIN, and restore the wallet from that written phrase before you move any real money onto it.
Every step exists to protect one secret. This guide is written in device-agnostic terms, because the sequence is the same across manufacturers even though the screens and button presses differ. Follow your device's own documentation for the mechanics and this guide for the reasoning. RampAtlas does not rank wallet hardware or recommend a manufacturer.
What the device actually does
A hardware wallet is a small dedicated computer with one job. It generates a private key, keeps that key inside, and signs transactions with it without ever exposing it to the machine it is plugged into. Your laptop or phone builds the transaction and broadcasts it to the network. The device only signs, and only after you approve what its own screen displays.
That screen is the whole point. Malware on a computer can rewrite a destination address between the moment you paste it and the moment it is signed, and the compromised computer will happily show you the address you expected. A device with an independent display shows the transaction as it will actually be broadcast, so the check happens somewhere the malware cannot reach. A device with no screen, or one you approve without reading, gives up most of the benefit you paid for.
This is the practical form of cold wallet storage: the key exists on hardware that never connects to the internet on its own terms.
Buy it new, from the manufacturer
Buy direct from the manufacturer's own store, or from a reseller the manufacturer lists on its site. The threat you are avoiding is a device that arrives already initialized with a recovery phrase somebody else has written down. Secondhand listings, marketplace sellers with no relationship to the maker, and unsolicited replacement devices that arrive in the post are all documented attack routes, and the money you save is not worth the exposure.
There is one reliable tell after the box is open.
| Genuine new device | Tampered device | |
|---|---|---|
| Where the phrase comes from | The device generates it in front of you after you ask it to create a wallet | A phrase that already exists, printed on a card in the packaging or supplied as a "pre-configured" setup you are told to enter |
Initialize it yourself and update the firmware
Install the manufacturer's companion application from the web address printed in the device's own documentation rather than from a search result or an advertisement. Cloned wallet apps are a standing phishing problem, and the domain is the thing being faked.
Let the application check the device and apply any firmware update before you create a wallet. Firmware is signed by the manufacturer and the device verifies that signature, which is the check that makes an update safe to accept. Then choose "create new wallet" and let the device generate its own seed phrase. Do not import a phrase that came from anywhere else at this stage.
Write the phrase down, on paper, offline
The device will display a sequence of words and ask you to confirm them. This is the only moment the phrase is ever shown, and it regenerates every key in the wallet on any compatible device, forever.
The words are not arbitrary. BIP-39, the standard that nearly every device follows, allows 128 to 256 bits of entropy, encodes it against a fixed list of 2,048 words, and appends a checksum of one bit for every 32 bits of entropy, which is why phrases come out at 12 or 24 words (source: BIP-39 specification). Because the list is fixed and public, a phrase written down anywhere is complete on its own. Nothing else is needed to spend the funds.
The methods people use for that second copy, including metal plates and split backups, are covered in Seed phrase backup methods.
128 to 256 bits
BIP-39 entropy
BIP-39 specification
2,048 words
BIP-39 word list
BIP-39 specification
12 or 24 words
Resulting phrase length
BIP-39 specification, including the checksum
Set a PIN
The PIN protects the device against someone who physically has it. Wrong entries are rate-limited and, after a set number of attempts, the device wipes itself so that the key cannot be brute-forced by whoever picked it up. The exact attempt count varies by manufacturer, so read yours.
Understand what the PIN does not do. It does not protect the recovery phrase, because anyone holding the phrase can restore the wallet on different hardware and never sees your PIN at all. Physical security of the device and physical security of the written phrase are two separate problems.
Decide about the passphrase
BIP-39 also defines an optional passphrase that is mixed with the mnemonic when the seed is derived, and if no passphrase is present an empty string is used instead (source: BIP-39 specification). Wallets usually present this as a twenty-fifth word.
A passphrase creates a completely different wallet from the same words. Someone who steals your written phrase reaches an empty or decoy account rather than your funds. The cost is severe: the passphrase is not stored anywhere, not on the device and not in the phrase, so forgetting it destroys access exactly as permanently as losing the phrase itself. Use one only if you have a plan for storing it separately and durably, and only after you have practiced the restore.
Restore before you fund
Once the restore succeeds, send a small test amount, wait for confirmation, and check that it appears. Only then move the rest. If you are moving coins off a trading account, the mechanics and the holds to expect are in Move crypto off exchange, and the exchange pages on this site link to each operator's own withdrawal documentation, including Coinbase and Kraken.
What a hardware wallet does not protect you from
| Protects against | Does not protect against |
|---|---|
| The private key being copied off the device | A transaction you approve yourself, since every asset lost to a signature the owner authorized was lost with the key still safely inside the device |
| Malware rewriting a destination address, because the device screen shows the transaction as it will actually be broadcast | Chain-specific mistakes, such as sending Ethereum tokens to a Bitcoin address |
| Someone who physically takes the device, through the PIN and its wipe threshold | Someone who finds the written recovery phrase, who never sees your PIN at all |
An address belongs to one network, and that is not something the hardware can undo. Each transfer costs a network fee in the chain's own coin, so keep a little of that coin available. And if the amount you are protecting is large or shared with other people, a multisig arrangement removes the single point of failure that one phrase creates, which is the subject of Multisig basics.
Frequently Asked Questions
Does the manufacturer keep a copy of my recovery phrase?
No. The phrase is generated on the device from its own randomness and is never transmitted. That is also why the manufacturer cannot help you recover it, and why any message claiming to restore a lost phrase on your behalf is fraudulent.
What happens if my hardware wallet breaks or is lost?
Nothing to your funds, provided the recovery phrase is intact. Buy a replacement, restore from the phrase, and the same addresses and balances reappear. The device is a container for the secret, not the secret.
Can I use one device for several chains and several wallets?
Most devices derive keys for many chains from the same phrase and can hold multiple accounts. Support varies by manufacturer and by asset, so confirm the specific chain in the maker's own documentation before you send anything.
Is a brand new device from a marketplace listing safe if the seal is intact?
Treat seals as unreliable. They are cheap to reproduce, and the real check is whether the device generates the recovery phrase in front of you during setup. Buying direct removes the question entirely.
Should I split the phrase across two pieces of paper stored separately?
Cutting a phrase in half is not the same as splitting it securely, because each half narrows the search dramatically for anyone who finds it. If you want a genuine split, use a scheme designed for it, as described in Seed phrase backup methods.