Home › Guides › Setup checklist

Hardware wallet setup checklist

A tampered hardware wallet can look normal. These checks take ten minutes at setup and stop the known tricks, such as devices that show pre-made recovery words.

Before you open it

• You know exactly where it came from: the maker or an official reseller listed on the maker's site.
• Seals, tape and holograms are intact, and match the maker's photos.
• Nothing in the box looks opened, glued or swapped.

In the box

• No recovery card with words already written or printed on it. A genuine maker never sends you words. If you find any, stop.
• No scratch card, PIN or "pre-set" password.
• No leaflet telling you to visit a site that is not the maker's own.

First power on

• The device asks to create a new wallet. It should not already hold one.
• Firmware is installed or checked through the maker's official app, and the app's authenticity check passes.
• The device itself generates your recovery words on its own screen.
• You set the PIN yourself.

After setup

• Write the words on paper or metal. Never type them into a phone, computer or website.
• Check the receive address on the device screen, not only on your computer.
• Send a small test amount, then test that your recovery words restore the wallet.

Red flags: stop and contact the maker

• Recovery words came with the device.
• The device was already set up or has a balance.
• Anyone, including "support", asks for your words.

Why this matters: see Did hardware wallets get hacked? Compare devices in our hardware wallet guide, and learn more in Seed phrases and backups.

Not financial advice. General education only. Do your own research.