Cold Hard Sats · Module 1: Your first hardware wallet setup

Buy direct from the manufacturer

• Type the maker's web address yourself. Do not follow ads, search sponsored links or emailed links.
• Buy only from the maker's own official store. Even listed or authorized resellers have been compromised (Galaxy Research, Oct 16, 2026).
• Never buy used, open-box or marketplace devices.
• Check the CHS Security Status page for the latest advisories before you order.
• Never restore an existing seed onto a device you didn't buy direct from the maker.

Inspect the packaging on arrival

• Check seals and the box against the maker's own photos.
• A device should never arrive with a seed card already filled in or a PIN already set.
• Treat any device that arrives already set up, or with a printed or pre-filled seed, as compromised. Don't use it.

Install the official app and verify firmware

• Install the maker's app from the address you typed yourself.
• Run the device's genuine or attestation check if it has one.
• Update to current firmware and confirm the version on the device's own screen.
• Compare it with the minimum listed on the CHS Security Status page.

Initialize offline and in private

• Choose a private room with no cameras, phones pointed at you or smart speakers.
• Create a new wallet on the device. Never restore words someone else gave you.
• Set a strong PIN on the device itself.

Write the seed on paper or metal

• Write each word in order, numbered, in clear block letters.
• Never photograph, type, scan, print or store it in a password manager or the cloud.
• Store it somewhere private, away from the device.

Verify your backup

• Re-read every word against the device's confirmation screen.
• Optional: wipe and restore the device from your paper copy before you add real money, then confirm the first receive address matches.
• Record the wallet's master fingerprint (not secret) so you can recognize the wallet later.

Check the receive address on the device

• Generate a receive address in the app.
• Press 'verify' or 'show on device' and compare every character on the device screen.
• Only then copy or share it.

Send a small test transaction first

• Send a small amount to your verified address and wait for it to confirm.
• Send part of it back out, approving the address and amount on the device.
• Once both work, move larger amounts, in stages if you like.