How to use a hardware wallet

A hardware wallet is the most effective single upgrade to crypto security available to an ordinary user. It is also easy to use in ways that quietly defeat the point.

What it actually does

The device stores your private key in a chip and never releases it. To send crypto, your computer builds an unsigned transaction and passes it to the device. You review it on the device’s own screen, press its physical buttons to approve, and only the signature returns.

This matters because your computer is assumed to be untrustworthy. Even if it is fully compromised, the attacker cannot extract a key that never arrives — and because you verify the destination on the device’s screen, malware that swaps the address is visible before you approve.

Buying one safely

Two rules make this concrete. A genuine device always generates the seed phrase itself, on first setup, in front of you. If a device arrives with a phrase already printed on a card, or instructions to use a supplied phrase, it is a theft — return it and report it. And run the manufacturer’s genuine-device check during setup; both major vendors provide one.

Setting it up

1. Download the official companion app from the manufacturer’s site, typed directly. Not from a search advertisement.
2. Choose “set up as new device”. Let it generate the seed.
3. Write the seed phrase down — paper or metal, two copies, two locations. See seed phrases: how to back up properly.
4. Set a device PIN. This protects against someone who physically takes the device; it is not the seed.
5. Verify the backup, then send a small test transaction before moving anything meaningful.

Using it day to day

The habit that matters most: read the device screen every time. Your computer’s display can be manipulated; the device’s cannot. Before approving, check the destination address and the amount on the device itself, comparing at minimum the first and last several characters against where you intended to send.

This is the single behaviour that defeats address-swapping malware, and skipping it removes most of the protection you paid for.

What it does not protect against

• Giving away your seed phrase. If you type it into a phishing site, the device is irrelevant. This is still the most common way hardware wallet users lose funds.
• Approving a malicious contract. If you deliberately sign a transaction granting unlimited spending to a hostile contract, the device faithfully signs it. Read what you approve.
• Losing the seed phrase. A broken or lost device is recoverable from the phrase. A lost phrase and a lost device is not.
• Physical coercion. A PIN slows an attacker who has the device, but the seed phrase in your house is the real target.

If the device breaks or is lost

Nothing is lost. Buy a replacement — from the manufacturer — and restore from your seed phrase. This is exactly the scenario the backup exists for, and it is why testing the backup beforehand matters.

What to read next

Next: self-custody vs leaving crypto on an exchange.