Quick answer
A hardware wallet stores your private keys on a physical device that never connects to the internet. To set one up: buy from the official manufacturer, initialise the device offline, write down your 24-word recovery phrase on paper (never digitally), and use the companion app to manage your accounts. Your funds are then secured even if your computer is hacked.
What is a hardware wallet and why do you need one?
When you hold crypto on an exchange — Coinbase, Binance, Kraken — you do not actually control your funds. The exchange holds the private keys. If the exchange is hacked, goes bankrupt, or freezes withdrawals, you may lose everything. This happened to users of Mt. Gox, FTX, Celsius, and many others.
A hardware wallet solves this problem by giving you direct custody of your private keys — the cryptographic secrets that prove ownership of your crypto. The device stores these keys on a secure microchip that never touches the internet, even when the device is plugged in. Transactions are signed inside the device and only the signed result is sent to the network.
Think of a hardware wallet as a super-secure USB drive whose entire purpose is to sign blockchain transactions without exposing your private keys. Even if your computer is completely infected with malware, an attacker cannot steal your keys because they are never on your computer.
Ledger vs Trezor: which should you buy?
Both are reputable devices with strong security track records. Ledger uses a certified secure element chip (like in credit cards and passports), which many experts consider a meaningful hardware advantage. Trezor is fully open-source, meaning the code can be independently audited by anyone. For most users, either is an excellent choice.
One critical rule: always buy directly from the manufacturer's official website or an authorised retailer. Never buy a hardware wallet second-hand or from an unverified seller on eBay or Amazon marketplace — devices can be tampered with before delivery.
| Feature | Ledger Nano X | Trezor Model T | Trezor Safe 5 |
|---|---|---|---|
| Price (approx) | £119 / $149 | £179 / $219 | £239 / $279 |
| Bluetooth | Yes | No | No |
| Touchscreen | No | Yes (colour) | Yes (colour) |
| Open-source firmware | Partial | Fully open-source | Fully open-source |
| Supported coins | 5,500+ | 8,000+ | 8,000+ |
| Secure element chip | Yes (CC EAL5+) | No (general MCU) | Yes (EAL6+) |
| Mobile app | Ledger Live | Trezor Suite | Trezor Suite |
Step-by-step: setting up your hardware wallet
- 01
Order from the official website only
Go to ledger.com or trezor.io directly. Never buy from third-party Amazon listings or eBay. The official sites have their own shops. When the device arrives, check the packaging is factory-sealed — any sign of tampering is a serious red flag.
- 02
Check the device hasn't been initialised
When you first turn on a legitimate hardware wallet, it should be blank — asking you to set it up fresh. If it boots showing an existing seed phrase or pre-configured accounts, return it immediately. The device has been tampered with.
- 03
Install the companion app
Install Ledger Live (ledger.com/ledger-live) or Trezor Suite (trezor.io/trezor-suite) on your computer. Only download from the official manufacturer's website. Verify the file's digital signature if possible.
- 04
Initialise the device and generate your seed phrase
Follow the on-screen instructions to create a new wallet. The device will generate a 24-word recovery phrase (Ledger) or 12/24-word phrase (Trezor) and display it on the device screen. This phrase is generated offline, inside the secure chip — it never passes through your computer.
- 05
Write the seed phrase on paper — never digitally
Write every word in the exact order on the recovery card provided. Use a pen, not pencil. NEVER type it into your phone, computer, cloud storage, email, or any digital device. The seed phrase is the master key to your funds. Anyone who has it can steal everything. Consider making two copies and storing them separately.
- 06
Verify the seed phrase
The device will ask you to confirm words from your seed phrase. This tests that you wrote it down correctly. Take this seriously — people have permanently lost funds because they miscopied one word.
- 07
Set a PIN
Create a PIN (typically 4–8 digits) that protects the physical device. This prevents a thief who steals the device from using it. After a set number of wrong PIN attempts, the device wipes itself — you can then restore it using your seed phrase.
- 08
Add your first account and fund it
In the companion app, add an account for Bitcoin, Ethereum, or whatever crypto you want to hold. The app generates a receive address. Send a small test amount first, verify it arrives, then move your main holdings. Your funds now live on the blockchain — secured by keys held inside your hardware device.
Keeping your seed phrase safe
The seed phrase is the single most important thing to protect. If you lose the seed phrase and your device is lost, stolen, or breaks, your funds are gone forever — there is no customer support line that can recover them. If someone else gets your seed phrase, they can steal everything instantly from anywhere in the world.
- Store seed phrase copies in physically separate locations (e.g., home safe + a trusted relative's house)
- Consider a fireproof safe or steel seed phrase backup product (Cryptosteel, Bilodeal, etc.) for fire/flood protection
- Never store the seed phrase in a password manager, Google Drive, iCloud, email, or photos
- Never enter your seed phrase into a website or app — legitimate software never asks for it
- Tell a trusted person where the seed phrase is stored in case of your death or incapacitation
Phishing attackers frequently pretend to be Ledger or Trezor support and ask you to 'verify' your seed phrase. These are scams. Never share your seed phrase with anyone under any circumstances.
Using your hardware wallet for DeFi
Hardware wallets pair seamlessly with browser wallets like MetaMask or Rabby. You connect the hardware device and import its addresses — the hardware wallet handles all signing while MetaMask or Rabby handles the DeFi interface.
When you approve a transaction: the browser wallet sends it to the hardware device, the device screen shows you exactly what you are signing (check this carefully), you physically press a button on the device to approve, the signed transaction is returned to the browser and broadcast to the network. Your private key never leaves the hardware device at any point.
Always read the transaction details on your hardware device's screen, not just what the website shows you. Malware can manipulate what a browser shows — but cannot fake what appears on the hardware device's own display.
Frequently asked questions
What happens if my hardware wallet breaks or is lost?
Nothing, if you have your seed phrase. Buy a new hardware wallet, select 'Restore from seed phrase', enter your words, and your accounts and funds are fully restored. The seed phrase is the wallet — the physical device is just a secure way to use it.
Do I need a hardware wallet if I only have a small amount of crypto?
It is genuinely a personal decision based on your risk tolerance and the value of your holdings. As a rough guide: if you hold more than a month's salary in crypto, a hardware wallet is strongly advisable. If you are experimenting with £50–100, the cost and complexity may not be justified yet.
Can hardware wallets be hacked remotely?
Not in normal circumstances. The private keys are stored on a secure element chip that is physically isolated from your computer and the internet. There is no wireless attack surface when the device is plugged in — it communicates via USB or Bluetooth only when actively in use. The primary risk is physical: someone stealing your device AND your PIN, or getting access to your seed phrase.
What is the difference between a seed phrase and a private key?
Your seed phrase (12 or 24 words) is a human-readable representation of your master secret. From it, the wallet derives individual private keys for every account you create. Think of the seed phrase as a master password that generates all other passwords. You never need to see the private keys themselves — backing up the seed phrase is sufficient to back up everything.
Can I use one hardware wallet for multiple cryptocurrencies?
Yes. Both Ledger and Trezor support thousands of cryptocurrencies. You add separate 'accounts' for each coin type within the companion app, and all of them are secured by the same device and seed phrase. You do not need a separate hardware wallet for Bitcoin and a different one for Ethereum.