How to Set Up a Ledger Nano Wallet Safely

Setting up a Ledger Nano safely means buying the device from an authorized source, verifying its firmware and packaging authenticity before use, generating a new seed phrase on the device itself, and backing up that phrase securely offline — in that order, without skipping steps. Getting this sequence right is what makes a hardware wallet meaningfully safer than a software-only wallet.

Step 1: Buy from an authorized source

Purchase directly from Ledger's official site or an authorized reseller listed there. Avoid marketplaces like general online classifieds or resellers you can't verify, since a tampered device — pre-loaded with a known seed phrase or modified firmware — is a documented attack vector. If a device ever arrives with a seed phrase already written on an included card, do not use it; a legitimate device generates its own seed only during your setup process.

Step 2: Verify the device before setup

Ledger devices run a genuine-device check during initial setup via the Ledger Live companion app, cryptographically verifying the device's authenticity against Ledger's servers. Don't skip this check even if the packaging looks untampered — visual inspection alone can't catch more sophisticated tampering.

Step 3: Set up as new, never restore from an unknown phrase

Choose "set up as a new device" rather than "restore," unless you are intentionally restoring your own previously backed-up wallet. Setting up as new causes the device to generate a fresh seed phrase internally, using its own secure hardware random number generator — this is the phrase that will control your funds.

Step 4: Write down the seed phrase correctly

The device will display a sequence of words (typically 24 for Ledger devices) one at a time. Write each one down by hand, in order, on the physical recovery sheet provided or a metal backup plate — never type it into a phone, computer, or any app, and never photograph it. See our guide on what a seed phrase actually is for why this string of words is functionally equivalent to your entire wallet.

Step 5: Confirm the seed phrase on-device

Ledger devices require you to re-enter or confirm several words from the phrase to verify you recorded it correctly, directly on the device's own screen — not through the connected computer. This step exists specifically so a compromised computer can't intercept or alter your seed phrase during confirmation.

Step 6: Set a PIN

Choose a PIN (not your seed phrase, not a birthday or obviously guessable number) that unlocks the device itself for daily use. The PIN protects against someone picking up your physical device and using it without your seed phrase; it does not replace the seed phrase as the ultimate recovery mechanism.

Step 7: Install apps and add accounts

Using Ledger Live, install the specific coin/chain apps you need (Bitcoin, Ethereum, and so on) and generate receive addresses. Always verify a receiving address on the device's own screen before sharing it or sending funds to it, since this closes off malware-based address-swapping attacks on the connected computer.

Step 8: Back up the seed phrase redundantly

A single paper copy in one location is a single point of failure. Follow the redundancy and geographic-separation practices in our guide to backing up a crypto wallet safely, and consider a metal backup plate for fire and water resistance.

Choosing which Ledger Nano model to buy

Ledger offers several device tiers with different screen sizes, connectivity options (USB-only versus Bluetooth-enabled), and storage capacity for multiple coin apps simultaneously. The core security architecture — the certified secure element chip and offline signing — is consistent across the current lineup, so model choice mostly comes down to convenience factors: whether you want mobile connectivity, a larger screen for reviewing transaction details more comfortably, or the ability to install more apps at once without needing to swap them in and out for less frequently used chains.

Ongoing maintenance after setup

Setup isn't a one-time event. Keep the Ledger Live companion app and device firmware updated, since manufacturers periodically release updates that expand supported coins, improve transaction decoding (reducing how often you'll encounter blind signing), and patch any discovered vulnerabilities. Periodically revisit your backup to confirm it's still physically intact and legible, particularly for paper backups, which can degrade over years even under reasonable storage conditions — this is one more reason many users eventually migrate to a metal backup plate for long-term storage.

Quick reference checklist

Step	Key risk it addresses
Buy from authorized source	Pre-tampered devices
Run genuine-device check	Counterfeit or modified hardware
Set up as new (don't restore unknown phrase)	Pre-seeded "poisoned" wallets
Write seed phrase by hand, never digitally	Remote theft of seed phrase
Confirm phrase on-device	Malware intercepting confirmation
Set a device PIN	Physical theft of the device
Verify receive addresses on-device	Address-swapping malware
Back up redundantly, geographically separated	Fire, flood, single-location loss

Bottom line

A Ledger Nano is only as secure as its setup process. Buy from an authorized source, verify device authenticity, generate the seed phrase on-device and record it by hand, confirm every receiving address on the device screen itself, and back up the phrase redundantly using durable, separated storage. Done correctly, this moves your private keys fully offline and out of reach of the malware and remote attacks that threaten software-only wallets — see our broader explainer on how hardware wallets work for the mechanics behind why this matters.