How to set up a Ledger hardware wallet — Step by step
Quick overview
This guide walks through how to set up a Ledger hardware wallet step by step for first-time use — from unboxing and supply-chain checks to initializing the device, protecting the seed phrase, and installing accounts. I’ve been using hardware wallets since 2018 and in my testing the steps below cover the actions most people miss or mess up. What you’ll get: a reproducible checklist for a secure first-time setup and links to deeper reference pages like firmware updates and seed phrase management.
Sources and protocols referenced: BIP-39 for recovery phrases (entropy and word lengths) and general wallet security guidance from community resources such as bitcoin.org BIP-39 specification and How to secure your wallet.
What you need before you start
- A computer or mobile device only to run the companion app (desktop recommended for first setup)
- The included USB cable (do not accept replacements from unknown sources)
- A pen and the supplied recovery card, or a metal backup plate for long-term storage
- A private, quiet area to write your recovery phrase — no cameras, no screenshots
- Internet access to download the companion app and firmware (you will verify firmware)
If you’d like a longer checklist and buying advice, see where to buy safely and supply-chain verification.
Unboxing and supply-chain checks
Open the box in daylight. Inspect packaging for obvious tampering. The device should power on from a factory state (never show a pre-filled recovery phrase). If the device arrives with a recovery phrase already populated, stop and contact the seller (or return the unit). But many people miss this step. Always prefer devices purchased direct or from authorized resellers — third-party marketplaces raise supply-chain risk.
See supply-chain verification for deeper checks and examples.
Step-by-step initial setup
Below are the ledger setup steps presented in the order I follow when setting up a new device. Follow them slowly. Pause when the device asks you to confirm anything.
1. Power on and choose a new device or restore
Power on the device and choose the option to set up as a new device if you are creating a fresh wallet. If you are restoring from an existing recovery phrase, choose the restore option and follow the prompts. For device-specific screens and wording, see the device guide in device-overview.
2. Choose a PIN and confirm it
Pick a PIN you can remember but others can't guess. The device will require confirmation. Do not write the PIN on the recovery sheet. A short PIN is easier to brute-force; a longer PIN adds protection. I prefer at least 6 digits for everyday users.
3. Write down the recovery phrase (seed phrase)
The device will generate a recovery phrase (seed phrase). Write it down exactly in order on the provided card or a dedicated metal backup. Do not photograph it. Do not type it into a computer or phone. The recovery phrase is the master key to your private keys (see seed-phrase-management for more).
If you plan to split backups across locations, consider metal plates to survive fire and water (see metal-backup-plates).
4. Optional: add a passphrase (25th word)
You can add an additional passphrase (sometimes described as a 25th word). This creates a new logical wallet derived from the same recovery phrase. It is powerful, but risky: if you forget the passphrase, you lose access to funds. Use it only if you understand the trade-offs (see passphrase-25th-word).
After setup: firmware, apps, and accounts
Install the companion desktop or mobile app and connect the device. The app will prompt for firmware updates if needed. Do firmware updates only through the official app and verify the device prompts — the device itself will ask you to confirm the update before installing. Firmware comments and verification steps are covered in firmware-updates and verify-firmware.
Install the app packages for the blockchains you plan to use (Bitcoin, Ethereum, Solana, etc.). Once installed, add accounts in the companion app and verify receiving addresses on the device screen before giving them to anyone.
For account setup and apps, see add-accounts-apps and chain-specific guides like bitcoin-guide and ethereum-guide.
Seed phrase, 12 vs 24 words, and backups
Why 12 vs 24 words? BIP-39 defines the standard: 12 words provide 128 bits of entropy; 24 words provide 256 bits — the longer phrase increases brute-force resistance. Many devices generate a 24-word recovery phrase by default (see the device-specific guides: nano-s-guide, nano-s-plus-guide, nano-x-guide).
Back up your phrase physically and plan for inheritance (see inheritance). I believe a distributed backup (geographically separated metal plates or trusted people with legal paperwork) is sensible for larger holdings.
Connectivity: USB vs Bluetooth vs NFC
USB connections are straightforward and require a physical cable. Bluetooth adds convenience for mobile use but introduces another communications layer; modern devices encrypt Bluetooth traffic and require on-device confirmation for transactions, which limits risk. Still, for high-value transfers I prefer a wired session. NFC is uncommon for desktop use; it’s typically mobile-only.
Questions about connectivity? See connectivity-usb-bluetooth-nfc for a technical breakdown.
Multisig and advanced security options
Multisig (multi-signature) lets you require multiple hardware wallets or co-signers to move funds. It increases security for large holdings and estate planning, and it reduces single points of failure. But multisig adds operational complexity — not everyone needs it. For step-by-step multisig setup and compatible tools, see multisig and multisig-compatibility.
Common mistakes and troubleshooting links
- Buying from an unofficial seller (risk of tampering). See where-to-buy-safely.
- Photographing or storing the recovery phrase on a phone or cloud.
- Entering the recovery phrase into any website or app (recover only on the device).
- Ignoring firmware update prompts or skipping verification. See firmware-updates and verify-firmware.
Troubleshooting quick links: forgot-pin, device-broken, restore-recovery.
Model comparison (quick feature table)
| Model |
Display |
Connectivity |
App capacity (typical) |
Best for |
| Nano S |
Small screen |
USB only |
Limited (basic use) |
Simple cold storage (nano-s-guide) |
| Nano S Plus |
Medium screen |
USB only |
Expanded |
Users who keep multiple crypto apps (nano-s-plus-guide) |
| Nano X |
Larger screen |
USB + Bluetooth |
Larger |
Mobile users and those who want more app space (nano-x-guide) |
(Feature descriptions are qualitative; check device-specific pages for exact specs: device-overview, model-compare).
FAQ
Q: Can I recover my crypto if the device breaks?
A: Yes — if you have your recovery phrase you can restore on compatible hardware or some software recoveries (see restore-recovery). Do NOT rely on the vendor alone.
Q: What happens if the company goes bankrupt?
A: Your private keys and recovery phrase control access to funds. Company failure doesn’t erase keys, but support and firmware availability may change. See company-risk for scenarios.
Q: Is Bluetooth safe for a hardware wallet?
A: Bluetooth adds attack surface but devices require on-device confirmation for signing. For highest-value transactions, I typically prefer USB.
Conclusion and next steps
Follow the ledger setup steps above slowly and verify every prompt on the device screen. Write your recovery phrase (24 words by default at initialization) on physical medium and secure it offline. And test a small incoming transaction first to confirm your receiving address before moving larger amounts.
Next step: if you completed initialization, move to firmware-updates and then add-accounts-apps to configure your first cryptocurrency accounts.
Sources and further reading:
