Home › The Crafty Toolkit › How to Set Up Your First Hardware Wallet
How to Set Up Your First Hardware Wallet
A calm, unhurried walkthrough from sealed box to first verified transfer — with the seed-phrase step done properly, because that is the step everything else depends on.
By the CoinCrafty editorial desk · Updated 25 Jul 2026
What you will need
- A hardware wallet bought direct from the manufacturer or an authorised reseller — never second-hand, never from a marketplace listing
- A computer or phone the device supports
- The recovery sheet that came in the box, plus a pen (not a phone camera)
- Somewhere private and offline to write, with no cameras and nobody looking over your shoulder
- About an hour when you will not be rushed or interrupted
Step by step
Check the packaging before you open it
Look the box over before you break any seal. Manufacturers publish exactly what genuine packaging looks like and what anti-tamper measures they use, so compare against their own documentation rather than your memory. If a device arrives already initialised, or comes with a recovery phrase pre-printed on a card, stop: that is the single most common physical scam in this category. A genuine device generates its recovery phrase in front of you, on the device, at setup time — never before.
Install the official companion app from the official domain
Type the manufacturer's address into your browser by hand rather than following a search-engine advert or a link from a message. Paid search results impersonating wallet vendors are a persistent problem, and the fake app is usually a perfect visual copy. Download the desktop or mobile app from that official domain only, and where the vendor publishes checksums or signatures for the installer, verify them.
Initialise the device and set a PIN
Connect the device and choose to set up as a new wallet. You will be asked for a PIN, which protects the physical device if someone picks it up. Pick something you will genuinely remember but that is not a birthday or a repeated digit. Enter the PIN on the device itself, using its buttons or screen — never type it into the computer, and never into a web page.
Write down the recovery phrase — on paper, by hand
The device will now display a recovery phrase (typically 12 or 24 words) one word at a time. Write them in order, on the supplied recovery sheet, in your own handwriting. Double-check each word against the screen as you go, and check the numbering. This phrase is the wallet. Anyone who reads it controls the funds, forever, with no way to reverse it — and if you lose it and the device breaks, the funds are gone with no support line that can help.
Confirm the phrase and store it safely
The device will ask you to confirm several of the words to prove you recorded them correctly. Take this seriously — it is your only proof that the backup works. Then store the sheet somewhere private, dry and fire-aware: a home safe, a locked drawer, or split across two secure locations you control. Many people upgrade to a stamped-metal backup later; paper is fine to start with as long as it is protected from water and fire.
Receive a small test amount first
Before you move anything meaningful, generate a receive address in the companion app and verify that the address shown on your computer screen matches the address shown on the device screen, character for character at the start and end. Address-swapping malware exists precisely to break this step. Then send a small test amount from wherever your crypto currently lives, and wait for it to confirm.
Send a small test amount back out, then move the rest
A wallet you can only receive into is only half tested. Send a small amount back out to a destination you control, and confirm it arrives. Only once you have proved both directions should you move the rest of your holdings across. Use the gas estimator first if you are on a network where fees fluctuate, so the cost does not surprise you.
Common mistakes
- Buying second-hand or from a marketplace seller — the device may be pre-initialised with someone else's phrase.
- Photographing the recovery sheet "just for now". Phone photos sync to the cloud automatically on most devices.
- Typing the recovery phrase into a website that claims it will "validate" or "restore" it. That is always theft.
- Skipping the address check on the device screen, which is exactly what clipboard-hijacking malware relies on.
- Moving a life-changing amount before completing a small round-trip test.
- Storing the only copy of the phrase in the same drawer as the device, which defeats the point of having a backup.
Tools for this guide
Frequently asked questions
Do I need a hardware wallet at all?
If you hold an amount you would be upset to lose, it is the single biggest security upgrade available to you, because it keeps the private keys off an internet-connected computer. For small amounts you are experimenting with, a reputable software wallet may be proportionate. It is a question of what you are protecting, and nothing here is financial advice.
What happens if I lose the device?
Nothing, provided your recovery phrase is safe. You buy a replacement device, restore from the phrase, and your funds are there. The device is a key holder, not a vault — the phrase is what actually matters.
Can CoinCrafty help me recover a lost phrase?
No, and neither can anyone else. Any person or service claiming to recover a lost recovery phrase is running a scam. We will never ask for your phrase, your keys or a wallet connection.
Should I use the passphrase (25th word) feature?
It adds real security but also a second thing you can permanently lose, and losing it means losing the funds. We would not recommend enabling it on your first setup. Learn the basics first, then read the manufacturer's documentation carefully before adding one.
Sources
- Ledger — Getting started with your device
- Trezor — Set up your Trezor
- Coldcard — Quick start documentation