1 — Before you begin: threats and preparation
Decide what you are protecting against. Are you worried about casual malware, physical theft, or targeted attackers? Your threat model influences choices like passphrases, multisig, or steel backups.
Essential preparation:
- Ensure you received the device sealed and from an authorized seller.
- Have a clean, updated computer (or dedicated setup machine) with internet access for installers and updates.
- Use pens and the supplied recovery cards — do not use phones or cloud tools to record the seed.
- Plan where you will store backups (safe, deposit box, steel plate).
2 — Unboxing and physical checks
Inspect the packaging for tamper evidence. The contents typically include the Ledger device, a USB cable, recovery sheets, quickstart leaflet, and possibly a lanyard. If packaging looks altered, stop and contact the seller. Do not proceed with a suspicious device.
3 — Installing Ledger Live (official companion)
Ledger Live is the official application that handles pairing, firmware, app installation, account creation, and transactions. Steps:
- Go to Ledger.com/Start® and select the correct installer for your OS (Windows/macOS/Linux) or mobile platform.
- Verify checksums or digital signatures if available — this reduces supply-chain risks.
- Install Ledger Live and open it to begin the guided onboarding.
4 — Firmware checks and updates
When you first connect, Ledger Live will check device firmware and, if applicable, prompt an update. Firmware updates are signed and should be applied only through Ledger Live. During updates, the device requires physical confirmation for critical steps — always read the device screen carefully.
5 — Initializing your device
You will be asked to Create new device or Restore from recovery phrase. For new users:
- Select Create new device on the device and in Ledger Live.
- Set a strong PIN using the device interface; do not write the PIN on your recovery card.
- The device will generate a recovery phrase (typically 24 words). Write each word in order on the supplied recovery cards. Double-check spelling and order.
- Confirm the phrase when prompted by the device.
6 — Passphrase — optional but powerful
A passphrase (sometimes called a 25th word) creates an additional hidden wallet derived from the same seed. It enhances privacy and plausible deniability but increases complexity and risk: losing the passphrase renders associated funds unrecoverable. Use passphrases only if you have a robust process for backing and testing them.
7 — Installing blockchain apps and creating accounts
Ledger devices use apps for each blockchain (Bitcoin, Ethereum, etc.). From Ledger Live’s Manager, install the apps you need and create accounts. Installing or uninstalling an app does not delete funds — keys are derived from your seed and remain intact.
8 — Receiving funds safely
When receiving funds, request an address in Ledger Live and always verify that the address shown in the desktop/mobile app exactly matches the address displayed on your Ledger device. The device screen is your final source of truth — it cannot be tampered with by host software.