Vendor-neutral guide

Self-custody without the expensive mistakes

An independent guide to setting up a hardware wallet and using it properly: what the recovery phrase actually is, where it belongs, and the four checks that stop most self-custody losses before they start. There is nothing to buy, and no brand to trust.

Start with step one
See the four checks
Rugged black electronic device with a dark screen and green side trim on a worn tabletop.
Where things belong

Not all of your crypto belongs in the same place

Self-custody is not a religion, it is a decision about risk. Most people who hold crypto sensibly use all three of these at once, and move money between them as circumstances change.

account_balance

An exchange account

Convenient and familiar, and the keys are not yours. Fine while you are actively trading, wrong for money you plan to hold for years.

The exchange
Who holds the keys
You join a queue
If the company fails
Very little
What it protects you from
Trading, small balances
Honestly still fine for
smartphone

A phone wallet

Keys on a device that is online all day, in a pocket that gets lost and left in taxis. Good for spending money, exposed to every app you install.

You, on a phone
Who holds the keys
You still hold them
If the company fails
A lost laptop
What it protects you from
Everyday spending
Honestly still fine for
lock

A hardware wallet

Keys generated and kept offline. An hour of setup buys protection from almost every attack that actually costs people money.

You, offline
Who holds the keys
Nothing changes
If the company fails
Malware and phishing
What it protects you from
Savings you rarely move
Honestly still fine for
The whole job

Six steps, about an hour, and no shortcuts worth taking

This is the sequence that matters, whichever device you own. From step three onward everything happens with the device in your hand, not on the screen in front of you.

1

Buy it from the maker

Order directly from the manufacturer rather than a marketplace seller. A sealed box with a known chain of custody is worth more than the discount.

2

Set it up yourself, from new

Ignore any recovery phrase that arrives written down in the box. A device that ships with a phrase already created is a device somebody else can restore.

3

Install the maker's own app

Download only from the manufacturer's own address, typed by hand. Advertised downloads that look official are the most common source of wallet malware there is.

4

Create a new wallet and write the words down

The device shows the phrase once, on its own screen. Copy it by hand onto paper or metal. No photograph, no typing, no password manager, no cloud note.

5

Send a small amount, then send it back

Move an amount you would be annoyed but not hurt to lose, confirm it arrives, then send it out again. That proves the device, the software and your backup all work.

6

Read the device screen every single time

The address on your computer screen is the one an attacker wants you to trust. The address on the device is the one you are actually paying. Compare them.

The part that matters

Your recovery phrase is the wallet. The device is only the key to it.

Twelve or twenty-four words that are your private key in a form a human can write down. Whoever holds them can restore your wallet on any compatible device and empty it. That cuts both ways: it is why a lost, broken or stolen device costs you nothing, and why the phrase must never touch anything connected to the internet.

  • edit

    Write the words down by hand, onto paper in a fireproof safe or a stamped metal plate. Two copies in two places beats one perfect copy.

  • block

    It never goes into a website, an app, a chat, a form or a password manager, however official the request looks. Nothing legitimate ever asks for it.

  • group

    If the only copy dies with you, the funds die with you. Decide now who could find it, and whether they would know what they were looking at.

How to store a recovery phrase
Open black hard case containing a plain white envelope on a dim green-gray concrete surface.
Before you connect

Four checks that take about a minute

Almost every self-custody loss begins at a page, an advert or a message that looked right. Run these before you trust one with a device.

keyboard

Type the address yourself

Or follow a bookmark you saved last time. Search results and social adverts are where lookalike domains get auctioned to whoever pays most.

privacy_tip

Expect to be asked for nothing

No setup, update, support agent or verification form ever needs your recovery phrase. The moment one is requested, you are on a fake page.

download

Keep software to the maker's own domain

Type the manufacturer's address instead of clicking a download advert, and never install a wallet app from a link somebody sent you.

forum

Assume nobody from support will message first

Real support is something you go and find. Anyone who opens a conversation with you, in any channel, is a stranger with an incentive.

Spotting fake sites and support scams
Questions

What people ask before they start

The worries that stop most people finishing setup, answered directly.

You buy another compatible device, choose the restore option, and enter your recovery phrase on it. Your funds come back. This is the entire reason the phrase exists, and why losing hardware is an inconvenience rather than a loss.

You restore from the recovery phrase and set a new one. The PIN protects the device in your pocket, not your funds permanently, and a device that wipes itself after too many wrong attempts still restores from the phrase.

Do not. You cannot verify that a device somebody else owned was never set up with a phrase they kept a copy of. Buy new and sealed. A device that arrives with a recovery phrase already written down is a trap, not a bargain.

Treat that wallet as compromised. Create a new wallet with a newly generated phrase on a device that has never touched the internet, and move everything into it today. A phrase that has been typed is public, and there is no safe way to leave the funds where they are.

A small amount you would be annoyed to lose, sent and then sent back out. That proves the device, the software and your backup all work before your real balance depends on them.

Less than the setup does. Choose a maker with a long track record, published firmware and a screen you can actually read. Your protection comes from how you set the device up and store the phrase, not from the logo on the case.

Not sure a page is real?

Run the four checks first. They take a minute, and they are the difference between setting up a wallet and handing one to somebody else.

Check a site before you connect
Next step

Work through it in one sitting

Read the six steps with the four checks open in another tab, and move a small amount before you move a real one. Nothing here requires a purchase, and there is nothing to sign up for.

Open the step-by-step setup