Hardware Wallets

What to Do After Buying a Hardware Wallet

You bought a hardware wallet. Follow this safe setup order before moving serious Bitcoin: verify the device, create a backup, test receiving, and avoid common mistakes.

  • Post-purchase setup
  • Backup safety
  • Test before moving more
Warm editorial illustration of a boxed hardware wallet, setup step cards, backup cues, and safety checkmarks.

First setup order

The hardware wallet is not the finish line. The setup order is the safety layer.

Buying the device can reduce important self-custody risks, but it does not automatically make your Bitcoin safe. What matters now is the order you follow.

The safer order is simple: verify the device, set it up cleanly, protect the recovery backup, test the receive path, and only then move meaningful amounts.

The mistake to avoid is rushing. A hardware wallet setup is manageable, but parts of it are irreversible enough that one calm session is better than ten hurried minutes.

Treat the first setup as a sequence you can later explain to yourself: trusted source, official setup path, offline backup, address verification, small test, then larger transfer.

1

Verify before trusting

Confirm the source, initialization state, and official setup path before funding the device.

2

Back up before funding

Your recovery words are the recovery path. Create them on the device, write them offline, and keep them away from cloud storage.

3

Test before scale

Run a small receive test first so the path is proven before you move serious Bitcoin.

Responsibility shift

What the device changed, and what it did not.

A hardware wallet keeps private keys away from everyday internet-connected software. That is useful, but it does not remove judgment from the setup.

What the device helps with

It reduces one important category of risk

  • Keeps private keys away from normal internet-connected software.
  • Creates a signing boundary between your wallet software and your keys.
  • Gives you a trusted device screen for confirming critical actions.

What remains your job

It does not make the setup safe by itself

  • It does not prove the unit you received is genuine.
  • It does not write, store, or check your recovery words for you.
  • It does not stop a wrong address, cloud-stored seed phrase, or misunderstood advanced feature.

Before coins move

Three principles should govern the first setup session.

Treat the first setup as a calm verification process, not a race to move funds.

  • Slow down before setup

    Do the first setup when you can read the screen, write carefully, and avoid rushing through steps just to finish.

  • Prove the device and backup

    Confirm the device is clean, create a new wallet yourself, and check that the recovery backup is complete before serious Bitcoin moves.

  • Test before scale

    Use a small receive test before moving larger amounts. The first transaction should prove the path, not carry the full risk.

Setup sequence

Follow this order before moving serious Bitcoin.

The exact screens vary by manufacturer, but the safety sequence stays the same: clean device, clean wallet, offline backup, verified receive path, small test, then larger transfer.

  1. Set aside one calm session

    Do the setup when you are not rushed, tired, or multitasking. You do not need a perfect security ceremony, but you do need enough attention to read, write, check, and avoid clicking through steps blindly.

  2. Confirm the device is genuine before trusting it

    Use the manufacturer's official authenticity guidance. Be cautious if the device arrived initialized, came with recovery words, included a pre-made seed phrase, came from an unverifiable seller, or shows signs of tampering.

    Read the genuine-device check

  3. Set up a new wallet yourself

    Let the device generate a new recovery seed during its own setup. Do not restore from words someone else provided, words printed in the box, or any phrase that has touched a website, browser form, cloud document, chat assistant, phone note, connected computer, or password manager.

  4. Use official firmware and software paths only

    Use the manufacturer's official app, website, and documentation. Do not follow setup links from email, direct messages, forum replies, ads, or random search results unless you independently confirm they are official.

  5. Set a PIN

    A PIN helps if someone gets physical access to the device. It does not replace the recovery backup, and it does not protect you if you expose the recovery words somewhere unsafe.

    Understand PINs and passphrases

  6. Write the recovery words by hand, offline

    Your recovery words are the backup if the device is lost, damaged, reset, or replaced. Write them by hand, keep them offline, and check spelling and order. Do not store them as a photo, screenshot, cloud note, email, password-manager item, chat message, computer file, or phone note.

    Read backup basics

  7. Check the backup before relying on it

    Confirm that your written backup is legible, complete, and in the correct order. If your device or official companion app offers a manufacturer-supported backup-check flow, use only that official flow. Do not enter recovery words into websites, browser extensions, cloud tools, chat tools, phone apps, or computer prompts outside the official process.

  8. Verify the receive address on the hardware wallet

    When you generate a Bitcoin receive address, compare the address shown in your wallet software with the address shown on the hardware wallet screen. The device display is the trusted confirmation flow you should not skip.

  9. Send a small test transaction first

    Do not make your first transaction the full amount. Send a small test amount, wait for it to appear where expected, and confirm that your wallet software shows the received Bitcoin and that the device is still the signing device for that wallet.

  10. Move larger amounts gradually

    Once the test transaction works and your backup has been checked, move larger amounts gradually. A measured transfer reduces pressure and gives you time to catch mistakes.

  11. Keep the setup maintainable

    Keep the device somewhere safe, keep the recovery backup offline and separate from the device, use official software and firmware sources, review the backup location occasionally, avoid changing advanced settings casually, and keep non-sensitive notes about the wallet setup without writing down the recovery words.

    Avoid setup mistakes

Post-purchase checklist

Use this as the short version before funding the wallet.

This checklist is not a substitute for your device maker's official setup documentation. It is a sanity check for the order and the common failure points.

  • I set aside one calm setup session.
  • I confirmed the device came from a trusted source.
  • The device did not arrive already initialized.
  • No one provided recovery words for me.
  • I created a new wallet myself.
  • I used only official software, firmware, and documentation paths.
  • I set a PIN.
  • I wrote the recovery words by hand, offline.
  • I did not photograph, screenshot, upload, email, type, or save the recovery words digitally.
  • I checked that the backup is legible, complete, and in the right order.
  • I verified the receive address through the device's trusted confirmation flow.
  • I sent a small test transaction first.
  • I moved larger amounts only after the test worked.
  • I know where the device and backup are stored.
  • I understand the setup well enough to explain it to myself later.

Not day-one moves

What not to do yet.

Some self-custody tools are useful later. They are still not the first move after buying a hardware wallet.

Complexity to delay

Do not turn the first setup into an advanced custody project

  • Do not add a passphrase as your first move. Understand what a passphrase changes before using one.
  • Do not jump to multisig on day one. It adds coordination, backup, and recovery complexity.
  • Do not move everything before testing. The small test transaction exists for a reason.

Safety shortcuts to reject

Do not bypass the protections the device is meant to create

  • Do not store recovery words digitally: no photos, screenshots, cloud notes, email, password manager, chat tools, or browser forms.
  • Do not use a device that came with recovery words. A pre-filled recovery phrase is a stop sign.
  • Do not trust only the computer or phone screen. Verify the receive address through the hardware wallet confirmation flow.
  • Do not rush because the price is moving. Bitcoin volatility does not make unsafe setup safer.

Reader state check

If you are still choosing a device, start one step earlier.

This page assumes you already bought a hardware wallet. If you are still choosing, use the hardware-wallet section to understand tradeoffs before buying.

The device pages are evaluations, not universal buying guidance. The point is to understand tradeoffs before buying, not to treat one device as correct for every situation.

Go to the hardware wallets section

FAQ

Questions that usually come up after buying a hardware wallet.

These answers focus on setup order, backup safety, and the first receive test.

No. The device helps by keeping private keys away from everyday internet-connected software, but your safety still depends on setup, backup, address verification, and testing. Buying the device is the start of self-custody. The setup process is where most of the real protection is created.

Where to go next