Hardware wallet guide: what to buy, how to set up, what mistakes to avoid
A hardware wallet is the single biggest security upgrade for anyone holding meaningful crypto. The setup takes 20 minutes; here is how to do it right.
If you hold crypto worth more than a few thousand euros on an exchange, you are trusting the exchange's security, not yours. A hardware wallet moves custody back to you — your private keys live on a small USB device that never exposes them to the internet, so even an attacker with full control of your laptop cannot sign transactions without physical access to the device.
What to buy
Ledger Nano S Plus or Nano X (~€80-€150), Trezor Model T (~€200), or Keystone (~€120). All three are mature, audited, and well-supported. Avoid obscure brands or anything bought second-hand. Buy direct from the manufacturer's website or an authorised retailer — never from marketplaces, where tampered devices have been documented.
Initial setup
Unbox and verify the tamper-evident seal. Connect to the companion app (Ledger Live, Trezor Suite). Set a device PIN (6-8 digits, not reused). The device will generate a 24-word recovery seed phrase — this is the most important thing in the entire setup.
The seed phrase
Write the 24 words on paper (ideally stamped on steel for fire resistance — kits exist for €30-€80). Never photograph it. Never type it into any computer. Never share it with anyone, ever, including "support" claiming to need it to help you. Store it in a physical location separate from the device (home safe, bank safety deposit box). Consider a second copy in a trusted location.
Testing recovery before funding
Before transferring any crypto to the hardware wallet, do a test recovery. Reset the device, enter the seed phrase, confirm the device regenerates the same addresses. If this fails for any reason, start over — do not fund a wallet whose recovery you cannot verify.
Fund with small amount first
Transfer a tiny amount (€10 equivalent). Verify receipt in the companion app. Only after that transfer the main holding. One typo in a destination address and the funds are gone forever.
Common mistakes
Storing the seed phrase in a password manager. Storing it in cloud notes. Buying from a Facebook marketplace. Taking a photo "just in case". Reusing the device PIN as a general password. Not testing recovery before funding.
Inheritance planning
Decide now how your heirs will access the device if something happens to you. Options include a sealed letter with your lawyer, a dead-man's-switch service, or Shamir's Secret Sharing (splitting the seed into multiple parts across trusted people).