Quick overview
This guide explains how Stellar (XLM) is handled on a hardware wallet: accounts, keys, compatible wallet apps, and practical security steps. I test hardware wallets regularly. What I've found is that Stellar's account model behaves differently from Bitcoin and Ethereum, so small checks matter.
Target reader: you hold XLM or plan to move Lumens to a hardware wallet for long-term storage and want clear, hands-on steps.
Sources used: Stellar developer docs and coin-type standards (links throughout). Where appropriate I link to device and app setup pages on this site (see related guides such as add-accounts-apps and ledger-live).
Stellar basics: Lumens, accounts and keys
- XLM (Lumens) is the native token of the Stellar network.
- Stellar accounts are addressable on-chain by a public key that starts with the letter "G"; private keys (the account secret) start with "S". These are ed25519 keypairs (an elliptic-curve scheme used by Stellar) Stellar docs.
- Unlike some blockchains, Stellar requires an account to be funded (the network enforces a minimum balance) before it can hold assets; check the current base reserve on Stellar's docs before sending funds accounts & reserves.
Short and practical: protect your recovery credentials. Period.
How a hardware wallet stores Stellar keys
Hardware wallets create your private keys from a recovery seed phrase (commonly following BIP-39 standards) and then derive coin-specific keys using the BIP-44 coin type for Stellar (148) [SLIP-0044]. Typical derivation for Stellar is m/44'/148'/{account}' — that’s how wallet software maps different on-device accounts to Stellar public keys (confirm the derivation used by your app) SLIP-0044 and BIP-39.
Ledger-style hardware wallets require you to verify signatures and addresses on the device's screen — always do that. Why? Because only the device can display the address matched to its private key, and viewing it on-screen prevents many MITM attacks.
Step-by-step: Install the Stellar app and add an XLM account
These steps are intentionally generic so they apply across device models. For device-specific steps see the model pages: nano-s-guide, nano-s-plus-guide, nano-x-guide, stax-guide.
- Update device firmware before you start (see firmware-updates).
- Open your companion manager (see ledger-live) and install the Stellar app from the app catalog (or use the approved manager for your device).
- Unlock the device with your PIN and open the Stellar app on-device.
- In your wallet application (desktop or web), choose “Add account” → select Stellar/XLM; connect the device and follow on-screen prompts.
- When receiving XLM, always confirm the receiving address on the hardware wallet display before sharing it.
(Image placeholder: screenshot of a hardware-wallet showing a Stellar address — alt: "Stellar receiving address shown on hardware wallet display")
Receive, sign and send XLM — practical checks
- Always confirm the address on the device. Short sentence. Check the whole string, not just the start.
- Fund a new Stellar account only up to the network minimum to avoid accidental loss (verify the current base reserve first) accounts & reserves.
- When sending, review the transaction details in the app and cross-check the signatures. If you use a third-party wallet app, prefer widely adopted clients known to support hardware-wallet signing; see third-party-wallets and wallet-app-integration.
And one more tip: if you are using a mobile connection, prefer a USB connection or a verified companion app when possible.
Multisig on Stellar: what works and how to use it
Stellar supports account-level multisig by adding multiple signers and configuring thresholds. That means you can have a 2-of-3 scheme where two hardware wallets (or one hardware wallet plus a second signer) must sign operations before submission. The workflow often looks like this:
- Create or configure the account signers and thresholds on-chain (requires an initial transaction).
- Build the transaction in a client that supports partially-signed transactions.
- Sign with one hardware wallet, export the transaction, then sign with the second wallet (or collect signatures online), and then submit.
This pattern lets you keep keys geographically separated for resilience. See Stellar’s multisig guide for protocol details multisignature on Stellar. For step-by-step device-related setup check multisig-setup and multisig-compatibility.
Seed phrase, passphrase and backup options
- Seed phrase vs passphrase: your recovery seed phrase (commonly 12–24 words under BIP-39) regenerates private keys. A separate passphrase (an optional extra string sometimes called a 25th word) creates a hidden account; if you lose it, the funds tied to that passphrase cannot be recovered. See passphrase-25th-word.
- Metal backup plates are recommended for long-term durability (see metal-backup-plates).
- Shamir-style split backups (SLIP-0039) let you split recovery into multiple shares. Not all wallets and services are compatible — confirm compatibility before choosing this approach shamir-backup-slip39.
I believe a pragmatic approach works best: a tested metal backup in two geographically separated locations. But make sure you understand passphrase risk first.
Common mistakes and troubleshooting
If your device is damaged or lost, you can recover accounts (without the device) using your seed phrase on any compatible wallet — but only if you have the correct seed phrase and know any passphrase. See device-broken and backup-and-recovery.
FAQ
Q: Can I recover my crypto if the device breaks?
A: Yes — if you have your seed phrase and passphrase (if used), you can recover XLM using any compatible wallet. Remember derivation path differences can affect visible accounts; check derivation-paths if an account doesn’t show up.
Q: What happens if the company that made my hardware wallet goes bankrupt?
A: Your crypto is non-custodial. Ownership is determined by the private keys you control (via seed phrase). Company failure may stop firmware updates or app support, but funds remain recoverable with your recovery credentials. See company-risk.
Q: Is Bluetooth safe for a hardware wallet?
A: Bluetooth works and is encrypted, but it adds an attack surface versus a wired USB connection. If security is your priority (cold storage for large holdings), prefer wired connections or air-gapped signing where possible. See connectivity-usb-bluetooth-nfc.
Conclusion & next steps
Storing Stellar (XLM) on a hardware wallet gives you non-custodial control and the option to use account-level multisig for added protection. But the best security practice is procedural: keep clean backups, verify addresses on-device, and confirm the software you use to manage accounts.
If you’re ready to proceed, follow a device-specific setup guide next: nano-s-guide, nano-s-plus-guide, nano-x-guide or stax-guide. And if you need help picking wallet apps that work with hardware signing, visit third-party-wallets and add-accounts-apps.
Thanks for reading — secure your Lumens, and double-check every address before you hit send.
