Where should I buy a hardware wallet?

Buy only from the manufacturer directly or a listed authorized retailer. Amazon third-party sellers, eBay, and used listings carry real supply-chain attack risk — counterfeit and tampered devices have been shipped to real users. The $20 you'd save is not worth it.

Can a hardware wallet be hacked?

The device itself is highly resistant to direct extraction, but the whole system can still fail if you approve a malicious transaction on-screen, leak the seed phrase, or fall for a fake support rep. The hardware wallet protects the private key — it can't protect you from signing the wrong thing.

Do I need to verify every transaction on the device screen?

Yes. The on-device screen is the trust anchor — the computer showing you a transaction may be compromised. Check the recipient address and amount on the hardware device's screen before confirming, every time.

Is Ledger or Trezor better?

Both are solid mainstream options. Ledger uses a secure element chip (closed-source firmware); Trezor uses open-source firmware (no secure element on most models). For the highest-assurance self-custody setup, Coldcard (Bitcoin-only) or Foundation Passport is often preferred. For most users, Ledger or Trezor is fine if used correctly.

Hardware Wallet Best Practices: Setup, Use, and Recovery

Hardware wallets work by keeping the private key on a dedicated, network-isolated device. The computer you use for transactions is treated as untrusted. The device screen, not the computer monitor, is the source of truth for what you're actually signing.

Used correctly, a hardware wallet neutralizes the overwhelming majority of crypto attacks that target individuals. Used incorrectly, it becomes a $100 paperweight guarding a seed phrase you already leaked on setup.

Buying It Right

Buy direct from the manufacturer. Ledger.com, Trezor.io, Coldcard.com, Foundationdevices.com. Not Amazon third-party, not eBay, not a crypto-influencer discount code that redirects you to a mystery site.
Check tamper-evident packaging. Factory seals, plastic wrap, holographic labels. If anything looks off, return it and contact the manufacturer.
Initialize the device yourself. A legitimate hardware wallet is never pre-initialized. If it arrives with a pre-printed seed card or a "starter" wallet, assume compromise and do not use it.

Real case patternWe've investigated multiple cases where a user received a Ledger in the mail they didn't order, along with a "recovery card" telling them to set up the device using the pre-written seed. Every wallet set up this way was drained. If a hardware wallet shows up unexpectedly, it's a scam.

Setting It Up

Use a clean computer if possible — a freshly-imaged laptop, or a secondary machine that isn't your main daily driver.
Download companion software from the official URL only. Bookmark it. Search results are routinely poisoned by ads for lookalike sites.
Generate a new seed on the device itself. The device shows you the words; you write them down. Nobody and no software ever types the seed into a connected device.
Double-check the seed by wiping and restoring. Before funding the wallet, factory-reset the device and restore from your written backup. If it recovers cleanly, your backup works. Do this before sending real money.
Set a strong PIN — not 123456, not your birthday. The PIN guards against the device being stolen.

Using It Safely

Verify the recipient on the device screen

Before confirming any transaction, read the full recipient address from the hardware device screen, not your computer. Clipboard-swapping malware is real — the address on your monitor can be different from the address the device is actually about to sign.

Read the transaction data, not just the amount

On EVM chains especially, you're not always sending money — you might be approving an unlimited allowance, signing a meta-transaction, or calling a function that sweeps your wallet. Newer Ledger and Trezor firmware show "clear signing" data for popular contracts. If the device shows a blind signing warning for an ordinary-looking action, stop and investigate.

Don't blindly trust connected dApps

A hardware wallet signing a transaction constructed by a malicious dApp still sends the transaction. See our wallet drainer guide for specific approval-phishing patterns.

Keep firmware up to date

Firmware updates patch real vulnerabilities. Always update from within the official companion app, never from a link someone sent you.

Seed Phrase Hygiene

Most hardware wallet "hacks" we investigate turn out to be seed phrase compromises. See our full seed phrase storage guide — the short version:

Never type the seed into any internet-connected device.
Never photograph it.
Never share it with "support" — no legitimate support ever asks.
Back it up in at least two physical locations.
Consider a BIP-39 passphrase for higher-value wallets.

Operational Patterns the Pros Use

Dedicated signing environment. A separate browser profile or dedicated laptop used only for hardware wallet transactions — no general browsing, no random extensions.
Separate wallets for separate risk tiers. A "cold" hardware wallet for long-term storage and a different hardware wallet (or hot wallet) for DeFi interaction. If DeFi wallet gets compromised, cold stays safe.
Test recovery annually. Wipe and restore on a second device. A seed backup that's never been tested is a seed backup that might be wrong.
Log what's in it. Keep a paper note of expected balances and last-verified date, stored with the seed backup. Helps heirs — and helps you — confirm the backup matches reality.

When a Hardware Wallet Is Compromised

If your hardware wallet address has been drained:

Move any remaining funds immediately to a new wallet set up on a clean device.
Assume the seed is exposed — do not reuse it, ever.
Check whether the compromise was approval-based (still-exposed open allowances) or seed-based. See our first 72 hours guide.
Document the tx hash, chain, and approximate USD value for any recovery or legal action.

Bottom Line

A hardware wallet properly set up, with its seed stored correctly, protects against almost everything a self-custody user faces except their own approvals. Read what the device shows, verify before you sign, and keep the seed offline and duplicated. Do those three things and the device does its job.

← Back to Wallet Security Book Free Consultation →