Before you take it out of the box

What setting one up actually looks like

Almost everything written about hardware wallets stops at which one to buy. The part that decides whether your Bitcoin survives happens twenty minutes later, on a screen the size of a postage stamp, in a room on your own. These pages are that twenty minutes, drawn — one for each device we rate for cold storage.

Why the device has a screen at all

A hardware wallet is not a safe with your Bitcoin inside it. Your coins are on the Bitcoin network and always were; what the device holds is the one secret that can move them, and its entire job is to hold that secret somewhere your computer cannot reach — and then to show you what it is about to do, on a display your computer does not control.

That second half is the one people miss, and it is what makes the setup steps below matter rather than merely exist. Your computer can be lying to you — about the address you are sending to, about the wallet you are looking at, about which words you just typed. The little screen is the one surface in the whole arrangement that an attacker on your laptop cannot repaint. Every screen in these walkthroughs is a moment where the device is telling you something your computer is not allowed to tell you, and your only job is to actually read it.

The keys themselves come from randomness the device generates when you first set it up, and the words it shows you are that randomness written in a form a human can copy down. Which is why the words are the wallet: the device is a convenient way to use them, and it is replaceable. The words are not.

The other ways people do this — including the two we would talk you out of

You have almost certainly already thought of one of these, so here they are with what each one actually costs you.

Follow the maker’s own guide instead. Genuinely a good idea, and every page here links to it. Their guide is the authority on which menu item is called what this month, and it is kept current in a way nothing on this site could be. What it will not do is tell you which of its own defaults to refuse, because it is not in the business of arguing with itself — and on more than one device here the default is not what we would choose.

Follow a video. Fine for seeing the physical device handled. The trouble with video is that it is undated in practice — a walkthrough filmed two firmware versions ago looks exactly as authoritative as one filmed last week, and the comments never say which. If you watch one, check its date against the maker’s guide before you copy anything.

Have somebody set it up for you. This is the one we would talk you out of, and not because of trust. Whoever does the setup sees the words. Even where that person is completely trustworthy, you end up holding coins whose recovery you have never once performed — and the first time you do it will be under pressure, on the day something has already gone wrong. Far more Bitcoin has been lost this way than was ever stolen — the rule about the simplest setup that covers you is built on that, and none of it is about villains.

Buy a device that arrives ready to go. This is the other one, and here it really is about trust: a device that shows you a seed phrase it has already generated is a device someone else has the words to. Buy it new and direct exists because that scam is cheap, common, and completely invisible until the coins leave.

Set it up, and skip the restore test. Most people do this, including people who have held Bitcoin for years. It is the reason this walkthrough has a step almost no published guide has: the backup you have not restored from is a piece of paper you believe in. rule 08 is the whole difference between the two.

What we would do

Set aside an hour, alone, with the door shut and the phone in another room. Not because the setup takes an hour — it does not — but because the two failure modes here are being rushed and being watched, and neither is fixable afterwards.

Do the steps in the order on your device’s page, and do not skip ahead to funding it. That order is not ours to shuffle: it is the same order your checklist runs in, and the build refuses to publish a walkthrough that reorders it. The single most expensive mistake available to you in that hour is moving real money in before the restore has been proven, because everything looks completely fine either way.

Keep the maker’s guide open beside ours. Theirs has the exact wording and the exact menu; ours has what to refuse and why. They answer different questions and you want both open at once.

And if the device does something these pages did not lead you to expect, stop and find out why before you continue. That is not a counsel of paranoia. It is the one moment in the life of this setup when stopping costs you nothing at all.

Why these devices and not every device

This cluster covers the devices we rate built for cold storage, and it stops there on purpose. A step-by-step walkthrough is an endorsement wearing a diagram’s clothes: it makes a device easier to follow onto, and doing that for hardware our own published standard says we would not put a decade of savings on would be arguing with ourselves in a format nobody reads as an argument. The two devices we rate for spending and the one that does not clear our bar are covered in full on Hardware wallets, with the reasoning attached — they are simply not walked through here.

The list above is not typed anywhere. It is the cold tier, read from the same file that decides the ratings, so a device cannot quietly appear here without clearing the bar or disappear from here while still clearing it.

Not sure which device yet? Find your setup settles what kind of setup you need first, which is the question that decides how many devices you are buying at all. There are 9 walkthroughs here and you only need the one.