01 / FUNDAMENTALS
COLD STORAGE ARCHITECTURE
The Architecture of Cold Storage
Navigating to Ledger.com/start initiates your genuine device verification and establishes an isolated cryptographic environment, keeping your private keys entirely offline and invulnerable to remote network exploits.
Secure Element Certification
Unlike hot wallets or software storage, your hardware device utilizes a bank-grade Secure Element chip (CC EAL5+ certified) engineered to withstand sophisticated physical tampering, side-channel attacks, and hardware extraction.
Hardware-Level Verification & Validation
When you start setup via the official portal, Ledger Live performs a cryptographic handshake with your device’s secure operating system (BOLOS) to verify genuine manufacturing integrity before generating your master recovery seed phrase.
01 / CHECKLIST
Before you begin the setup process.
Review these three essential preparation steps to ensure the physical authenticity of your device and guarantee complete privacy before generating keys.
STEP 01
Device & box inspection
Verify the packaging is pristine with unbroken tamper-evident seals. Check the USB-C cable and recovery sheet inserts inside the box to confirm zero physical interference.
Never use pre-filled recovery sheets.
STEP 02
Compatible device setup
Ensure your computer (macOS 12+, Windows 10+, Ubuntu 20.04+) or smartphone (iOS 15+, Android 10+) has a functional USB-C or Bluetooth connection ready for Ledger Live synchronization.
Requires admin permissions for app installs.
STEP 03
Quiet, private space
Choose an uninterrupted area free from observers, active smart speakers, and cameras. Keep a pen ready to manually write down your 24-word Secret Recovery Phrase.
Allow 20–30 undisturbed minutes.
02 / SETUP
Five-step hardware initialization guide
Follow these sequential, verified steps to securely initialize your hardware wallet, configure isolated keys, and establish encrypted local access.
01
Connect & Visit Ledger.com/start
Connect the device with the provided USB cable and navigate to the official portal to download Ledger Live. Always verify URL security certificates before downloading software.
02
Set Up as New Device
Turn on the hardware wallet using the side buttons. Navigate the on-screen prompts and select Set up as new device to instruct the Secure Element chip to generate pristine cryptographic keys.
03
Create Your Secure PIN
Choose a 4 to 8-digit PIN directly on the physical device interface. This PIN unlocks your hardware unit and protects against unauthorized physical access. Never use sequential digits or birthdays.
04
Write Down 24-Word Recovery Phrase
Carefully write each of the 24 secret words onto your recovery sheet in exact numerical order. Never photograph, type, or store these words digitally under any circumstances.
05
Verify Authenticity & Add Accounts
Complete the Genuine Check within Ledger Live to cryptographically attest that your device is untampered. Once confirmed, install asset manager apps and create your first accounts.
03 / SOFTWARE
LEDGER LIVE ECOSYSTEM
Understanding Ledger Live as your crypto command center
Ledger Live is the companion software interface for your hardware wallet. It allows you to supervise your balance, initiate secure transactions, and manage protocol apps without ever exposing private keys to your computer or internet connection.
FEATURE 01
Account & Asset Management
Create and structure distinct accounts across Bitcoin, Ethereum, Solana, and thousands of supported tokens. Every incoming or outgoing transaction must be physically confirmed and signed on your hardware device screen.
EXPLORE ACCOUNT ARCHITECTURE
FEATURE 02
Portfolio & Market Analytics
Monitor total net asset valuation in real time across multiple fiat currencies. Track historical asset performance, analyze price metrics, and manage staking rewards transparently without depending on custodial exchanges.
VIEW ANALYTICS GUIDE
FEATURE 03
Secure App Installation
Use the My Ledger manager to install and update protocol-specific apps directly onto your device's Secure Element chip. Cryptographic isolation prevents individual coin apps from accessing information or keys of other networks.
LEARN APP ISOLATION SECURITY
03 / SECURITY
Security made simple.
Self-custody places absolute sovereignty in your hands. Mastering three foundational security principles guarantees your digital assets remain invulnerable against phishing, malware, and social engineering.
PRINCIPLE 01
On-Device Verification
Always verify recipient addresses, token amounts, and network fees on the physical device screen before confirming. Never trust your computer or mobile display blindly—malware can alter clipboard values or manipulate browser interfaces, but it cannot compromise the secure element display of your hardware wallet.
PRINCIPLE 02
Offline Secret Phrase Storage
Your 24-word Secret Recovery Phrase is the singular master key to your funds. Keep it strictly offline written on physical paper or stamped into steel backup plates. Never enter these words into any website, software form, cloud storage, password manager, or smartphone photo.
PRINCIPLE 03
Robust PIN Code Protocols
Choose a unique 4 to 8 digit PIN that avoids birth dates, repeating numbers, or sequential digits. The hardware device automatically wipes all private data after three consecutive incorrect attempts, guaranteeing physical defense against unauthorized access.
OFFICIAL DIRECTIVE
Official software applications and genuine customer support representatives will never prompt you for your 24-word recovery phrase. Any website, email, or social media account requesting it is an active phishing attempt.
[ 04 / TROUBLESHOOTING ]
Common setup challenges & quick resolutions
Hardware wallets operate in an isolated environment. If you encounter communication interruptions, firmware pauses, or synchronization stalls during configuration, follow these verified resolution steps.
CASE 01
HARDWARE LAYER
Device connection & USB recognition
Operating systems or browser shields may restrict direct WebUSB communication. Verify you are utilizing the original data-capable cable, disable active third-party wallet extensions temporarily, and grant OS-level port permissions.
USB DRIVER & PORT GUIDE
CASE 02
OS & BOOTLOADER
Firmware update stalls & loader mode
If the device remains on the update progress screen, do not disconnect abruptly. Enter manual Bootloader Mode by holding the left button while plugging in the USB, then trigger the firmware repair tool in the companion app.
BOOTLOADER RECOVERY STEPS
CASE 03
NODE SYNC
Synchronization delays & node indexing
Account balance discrepancy or prolonged loading spinners occur when local explorer caches fall out of sync with blockchain nodes. Navigate to Settings > Help > Clear Cache to re-index all account balances safely.
CLEAR CACHE & RE-INDEX
CASE 04
SECURITY PROTOCOL
PIN lockout & passphrase restoration
Three consecutive incorrect PIN entries initiate an automated secure hardware wipe to protect keys. As long as you possess your physical 24-word recovery phrase, select 'Restore from Recovery Phrase' to regain full asset control.
RECOVERY PHRASE RESTORATION
05 / VERIFICATION & SECURITY
Frequently Asked Questions
Everything you need to know about setting up your hardware wallet, verifying authenticity, and safeguarding recovery keys.