Hardware wallet for beginners: how to choose and set one up

You bought bitcoin on an exchange and you finally want to hold it yourself. Someone recommends a hardware wallet, so you search “Trezor or Ledger” and get forty pages, half of them affiliate links. This article explains what the device does, what it doesn’t do, how to choose one and how to set it up. The model data comes from the manufacturers’ own sites, and we give the check dates next to the sources.

What a hardware wallet does

A hardware wallet is a small computer with one job: it holds your private key and signs transactions with it. The key never leaves the device. When you want to send bitcoin, an app on your computer or phone prepares the transaction, the device shows the amount and address on its own screen, and you confirm with a button. Only the finished signature goes back to the app.

That’s why a virus on your laptop has nothing to steal. It can show a fake address in the app, but the device screen shows the real one. Always compare the address on the device with the one you mean to pay.

The device doesn’t store crypto. Your coins sit on the blockchain. The device is a key, not a safe. That’s why the recovery phrase matters so much. It’s 12 or 24 words under the BIP-39 standard, and it lets you rebuild the wallet on a new device if the old one is lost or broken. Whoever has the phrase has the funds.

What a hardware wallet doesn’t do

Many misunderstandings come from assuming that “hardware” means “immune to everything”. The device doesn’t protect you from a few things.

• Your own consent. If a scammer talks you into approving a transaction to their address, the device will sign it. Read the screen.
• Losing the phrase. You can buy the device again, but not the phrase. Without a backup, a broken device is a useless piece of plastic.
• Leaking the phrase. A photo on your phone, a note in the cloud or a file on your desktop cancels the point of the device. We describe how to store the phrase in the guide seed phrase: how to store it.
• Your family’s problem. When you’re gone, a device with a PIN and a note nobody knows about helps no one. That’s a job for access instructions for your family, not for hardware.

We lay out the hierarchy of risks, from exchange to safe, in the pillar how to secure crypto. If you’re not sure you should move funds off the exchange at all, start with exchange or self-custody.

How to choose a hardware wallet: four questions

Don’t start with the price or the colour of the case. Start with four questions.

Is the code open?

Open code can be read and checked independently of the manufacturer. Trezor describes its models as “open-source security and design”. BitBox02 has its firmware on GitHub under the Apache-2.0 licence. Coldcard describes its firmware as open and reproducible. For Ledger, the developer documentation says the Secure Element firmware is under an NDA, so it’s closed, while the SDK and the code of apps loaded onto the device are open. The difference doesn’t settle quality, but it decides how much you can verify without trusting the manufacturer.

What chip protects the keys?

A secure element is a specialised chip that resists physical data extraction. According to the manufacturer, Trezor Safe 3 and Safe 5 have a certified EAL6+ chip. Ledger names the chip in its documentation: ST33J2M0 in the Nano X, ST33K1M5C in the Nano S Plus, Stax and Flex. According to the firmware README, BitBox02 talks to an ATECC608B chip. Coldcard Q and Mk5 have two secure elements from two manufacturers.

Bitcoin only or many coins?

A bitcoin-only version has less code because it doesn’t support other networks. BitBox02 comes in two editions on identical hardware, Multi and Bitcoin-only. The manufacturer states you can’t change the choice later, because the bootloader blocks switching editions. Trezor lists bitcoin-only versions as separate products of the Safe 7, Safe 5 and Safe 3 models. Coldcard Q and Mk5 are bitcoin-only by design. If you hold only bitcoin, less code means a smaller attack surface. If you plan to hold other coins, pick the multi version.

Does it support multisig?

If you ever want a 2-of-3 wallet, you need devices that work with apps for multisig. Trezor points to Sparrow as a compatible app for bitcoin. In Sparrow’s compatibility list, BitBox02 is marked “single-sig & multi-sig”. Coldcard describes multisig set up entirely on the device. We explain when such a setup makes sense in the guide 2-of-3 multisig wallet: who is it for.

Trezor, Ledger and the rest: model comparison

The table contains only what manufacturers state on their sites and in their documentation (checked on 19 October 2026). It has no prices, because they change often and differ between shops. Check them with the manufacturer.

Model	Security chip	Code	Coins	Screen, connectivity
Trezor Safe 3	Secure element EAL6+	Open security and design, per the manufacturer	Thousands of coins and tokens; separate bitcoin-only version	0.96-inch monochrome screen, two buttons, USB-C
Trezor Safe 5	Secure element EAL6+ (OPTIGA Trust M per the authentication page)	Open security and design, per the manufacturer	Thousands of coins and tokens; separate bitcoin-only version	1.54-inch colour touchscreen, USB-C, microSD slot
BitBox02	ATECC608B chip (firmware README)	Firmware on GitHub, Apache-2.0	Multi or Bitcoin-only edition, choice is irreversible	USB-C, backup on a microSD card
Coldcard Q and Mk5	Two secure elements (Microchip ATECC608 and Maxim DS28C36B)	Open and reproducible firmware	Bitcoin only	Q: QR, microSD, NFC, USB; Mk5: microSD, NFC, USB
Ledger Nano X, Nano S Plus, Stax, Flex	ST33J2M0 (Nano X), ST33K1M5C (the others)	Secure Element firmware closed (NDA); SDK and app code open	List on the manufacturer’s site	Ledger Live on computer and phone

A few notes on the table. Trezor Safe 3 (from June 2024) and Safe 5 create a backup in the SLIP-39 format by default, in the single-share version, with an option to extend it to a multi-share backup. We cover it in the guide on Shamir and SLIP-39. Coldcard is described from the Q and Mk5 page, because that page doesn’t cover the older Mk4. Trezor’s site notes that you can’t do setup or manage the device on iOS.

The table doesn’t show that any model is “the best”, so we don’t give that rating. Answer the four questions above, then check with the manufacturer that your chosen model is still on sale.

Ledger Recover: what it is

Ledger Recover doesn’t fit in the table, so we describe it separately. It’s a paid, optional backup service for the recovery phrase, provided by Coincover. According to the manufacturer’s page, the phrase is encrypted and split into three fragments inside the Secure Element, and the fragments go to three independent companies: Coincover, Ledger and EscrowTech. Two of the three are needed to restore. Access is tied to your identity. When you subscribe, you upload a document, and two independent companies verify it online. The manufacturer stresses that this is identity verification, not KYC.

In practice the service is voluntary, needs a subscription and an ID document, and you’re still responsible for the backups you made yourself. Whether it suits you depends on whom you want to trust with fragments of your phrase. If you’d rather no third party held even a fragment, don’t switch the service on, or choose a device that doesn’t have it.

Where to buy: from the manufacturer

A device from a middleman, second-hand or from an auction may have been opened, modified or shipped with a recovery card someone has already written on. Trezor describes its procedure with exactly this in mind. You check the box and the holographic seal over the USB-C port, make sure the two recovery cards are blank, and on first connection the device goes through a hardware authenticity check. Trezor’s site doesn’t say outright “buy only from the manufacturer”, so that rule is our recommendation, not a quote. The logic is simple: the shorter the device’s path from factory to you, the fewer places for tampering.

A practical list:

1. Go to the manufacturer’s site by typing the address yourself, not from an ad or an email.
2. Order from the official shop or from a distributor named on the manufacturer’s site.
3. When it arrives, check the seal and the contents of the package.
4. The recovery cards must be blank. If anything is written on them, don’t start the device.
5. If something looks odd, write to the manufacturer’s support before you do anything else.

How to set up a hardware wallet: step by step

The steps below are based on a new Trezor device. With another manufacturer the steps are similar, but the screens differ. If you’d like someone next to you the first time, that’s how we work in setup: you enter the phrase, we keep the order right and run the recovery test.

1. Prepare the place. A quiet room, no guests and no camera, with a computer, the cable from the box and a pen.
2. Check the package: the seal, the contents and the blank cards.
3. Install the manufacturer’s app from its site. For Trezor that’s Trezor Suite. Don’t search for it in a search engine, type the address.
4. Connect the device. The app runs an authenticity check. According to the manufacturer, Trezor Safe 3 and Safe 5 ship without firmware, so the app installs the latest signed one.
5. Create a new wallet. The device generates a recovery phrase and shows it on its own screen. Never type the phrase on a computer, in a phone or in an app.
6. Write the phrase on the manufacturer’s card, in pen, legibly. Check every word twice. Later you can copy it onto a steel plate if you want a version that survives fire and water.
7. Set a PIN. It protects against a person who gets hold of the device. It doesn’t replace the phrase.
8. Run a recovery test before you deposit a larger amount. First deposit a token sum. Then reset the device (or use a second one) and restore the wallet from the written phrase. Check that the address matches. Move the rest of your funds only once it works.
9. Write down where everything is. At least one sentence for a trusted person: that the wallet exists, where the phrase is and where the instructions are. We describe the full version in the guide on access instructions for your family.

Trezor recommends a trial recovery before a firmware update. It’s the same habit: a backup you haven’t tested is only an assumption.

Should you add a passphrase or split the phrase

Two options often come up at this stage. Both are worth knowing, and neither is mandatory. A passphrase adds an extra password to the phrase that opens a separate, hidden wallet. A forgotten passphrase means permanent loss of access: according to Trezor, nobody, support included, can read or reset it. Splitting the phrase with Shamir’s method breaks the phrase into shares, and only some of them are needed to recover. Both options increase protection against theft at the cost of harder recovery. If your family will have to cope alone one day, the simpler the setup, the better. You’ll find more in the glossary entries for passphrase and SLIP-39 and Shamir.

Firmware updates

Firmware is the software of the device itself. Manufacturers publish fixes, so you need to update the device from time to time. According to Trezor’s instructions, you do it in Trezor Suite on a computer: click “Update now”, or go to Settings, Device, then “Install firmware”, and confirm the prompts on the device. Updating through iOS isn’t supported.

The manufacturer warns that before an update your wallet backup should be “available and within reach”, and that losing the connection while firmware is being installed wipes the device. Your funds don’t disappear from the blockchain, but you can regain access only from the phrase. So update calmly, not in a rush, and with the backup at hand.

The rules we follow:

• update from the manufacturer’s official app, never from a link in an email, an ad or a messenger;
• don’t switch off the firmware authenticity check in the settings (Trezor recommends that only for testing and development);
• don’t update while sending a large amount or while travelling;
• note the date of the last update. As part of care we remind clients about updates, but you can do it yourself.

After setup: three habits

A device left in a drawer for years ages along with the software around it. Three habits are enough to keep that from doing harm.

• Once a year, check that the phrase is legible and in the place it should be. A card soaked in water or faded by the sun is a classic reason a backup doesn’t work on the day you test it.
• Once a year, run a trial recovery on a spare device or on a device after a reset. It’s the only way to know the backup is good.
• At every life change (moving house, divorce, marriage, the death of a trusted person), update the instructions for your family and the place where the phrase is kept.

How this fits with the rest of your security

A hardware wallet is one layer. The others are where you keep the phrase, any split or multisig, instructions for your family and a yearly recovery test. That’s why we start with a check-up: we establish what you have, where it is and what would happen if you were gone tomorrow. Only then do we choose hardware. Many people find at this stage that they don’t need a new device, just a better backup of the phrase.

We don’t advise what to buy or sell, and we never see your seed or keys. We help you build a setup where the funds are yours and your family knows what to do.

You’ll find a printable set of steps in the 10-step checklist. The most common slips are collected in the guide on crypto security mistakes. If you first want to understand what happens to crypto after its owner dies, read the pillar crypto inheritance.

Accurate as of 19 October 2026. The model data comes from the manufacturers’ sites and changes with new versions. Before you buy, check the current specification and price with the manufacturer.