Welcome — read this first

This guide walks you through secure steps to take when you first receive a hardware wallet. It focuses on unboxing checks, initializing a new device, generating and safeguarding your recovery seed, applying firmware updates, and sending/receiving safely. Treat the recovery seed like cash — if someone obtains it they control your funds.

1. Unboxing & inspection

• Check box seals and tamper-evident labels. If packaging looks altered, do not proceed — contact official support.
• Confirm model and serial number on the device match the packing slip and the vendor's product page.
• Keep the packaging and proof of purchase in case you need to contact support or verify authenticity later.

2. Initial setup — do it offline when possible

Whenever possible, perform the initial setup on a machine you control and on a private network. Avoid public Wi‑Fi during key-generation and firmware installs.

1. Connect the device using the supplied cable and open the vendor's official start URL in your browser. Only use links from the official vendor or typed addresses.
2. Follow the guided steps to create a new wallet: the device will generate a recovery seed and display it word-by-word on the device screen.
3. Write the words in order on the supplied recovery card or another durable medium. Do not take photos or store the seed in cloud services.
4. Set a device PIN when prompted. This PIN prevents unauthorized use if someone obtains physical access to your device.

3. Recovery seed and passphrase

Most devices produce a mnemonic seed (12/18/24 words) that encodes your private keys. A passphrase (sometimes called a 25th word) can be used to create hidden wallets — but it increases complexity and is non-recoverable if forgotten.

• Write the seed words exactly as shown and in correct order. Store multiple copies in separate secure locations if appropriate.
• Consider metal backup plates for long-term durability against fire and water.
• If you opt for a passphrase, store it separately from the physical seed, but treat both as critical secrets.

4. Firmware & software verification

Before making transactions, ensure the device firmware and companion software (desktop app or web app) are official and up to date. Firmware updates patch vulnerabilities but must be applied carefully.

• Only install firmware from the official vendor site. Verify release notes and checksums where published.
• When updating firmware, follow on-device prompts exactly and avoid interrupting power or disconnecting the device mid-update.
• Install companion wallet software only from verified sources and, if possible, prefer offline installers verified via checksums and signatures.

5. Receive and send safely

When receiving funds, generate an address through your wallet UI and verify that address on the device screen before sharing it. When sending, always verify the destination address and amount on the device itself — the host UI can be tampered with.

6. Ongoing best practices

• Keep your device firmware and wallet software updated; review release notes before applying updates.
• Only use hardware wallets on trusted machines. Avoid public computers or shared environments for signing high-value transactions.
• Revoke or clear browser permissions for wallet sites when not in use and limit installed extensions that can access web content.
• Consider practicing a test transaction with a small amount to confirm your setup before transferring large sums.

7. If something goes wrong

Common issues include device not powering, failed firmware updates, or lost recovery seeds. The steps below help you diagnose and mitigate common failure modes.