Before you begin
Gather the following: your Ledger device (Nano S Plus, Nano X, or the specific Ledger model), the original USB cable, a desktop or laptop to run the Ledger Live desktop app for onboarding, a pen and the physical recovery card included in the box (or a durable metal backup device), and 30–60 minutes of uninterrupted, private time. Avoid public or shared machines while initializing or restoring a wallet.
Download & Install Ledger Live
Open the official Ledger website and navigate to the Ledger Live download page. Always ensure you are on the vendor domain and that the TLS certificate is valid. Download the installer for your operating system and run it. On macOS you may need to allow the application in System Preferences → Security & Privacy; on Linux you may need to add udev rules for USB access and install distribution-specific packages.
If your environment requires additional assurance, check provided checksums or signatures. For most users, downloading directly from the official site and ensuring the URL is correct is sufficient.
Connect & Initialize Your Device
Plug the Ledger device into a computer using the supplied cable (avoid unknown USB hubs). Launch Ledger Live, then follow the onboarding wizard. Choose to set up a new device unless you are restoring an existing wallet. The device will prompt you on its screen to set a PIN — always enter the PIN using the device's physical buttons or touchscreen. The PIN prevents casual access if the device is lost or stolen.
Generate & Secure Your Recovery Phrase
The device will generate a recovery phrase (commonly 24 words). Write each word in order on the supplied recovery card. Confirm the words using the device’s verification prompts — this ensures you recorded everything correctly. Consider making two physical backups and storing them in geographically separate secure locations (for example, a home safe and a bank deposit box). A metal backup is recommended for fire and flood resilience.
Do not: take photos of the seed, type it into cloud notes, or store it in password managers. Digital copies are easily exfiltrated or accidentally backed up to cloud services.
Firmware & Device Authenticity
Ledger Live checks device authenticity and will prompt you to install verified firmware updates when necessary. Apply firmware updates only through Ledger Live and confirm update prompts on the device screen. Firmware updates often contain security fixes and must be applied from official sources. If any authenticity verification fails, stop and consult official support and the vendor's guidance.
Add Accounts & Install Blockchain Apps
Ledger devices use small on-device apps for specific blockchains (e.g., Bitcoin, Ethereum). In Ledger Live’s Manager, install the apps you need. Then add accounts in the Portfolio or Accounts tab to view balances and transaction history. Ledger Live discovers derived addresses based on the seed and installed apps. Label accounts clearly to separate personal, business, and savings funds.
Receiving & Sending — Verify on Device
When receiving funds, generate a receive address in Ledger Live and verify the identical address on the device screen before sharing it. Host-side malware can alter what your app shows; the device screen is the authoritative source. When sending, Ledger Live composes a transaction, sends it to the device, and the device displays recipient, amount, and fee. Approve only after carefully verifying those details on the hardware display.
For unfamiliar services or smart contracts, perform a small test transfer first and confirm it on-chain before sending larger amounts.
PIN & Passphrase (Advanced)
The device PIN is a local access control mechanism. Choose a PIN that you can remember but others cannot guess. Repeated incorrect attempts may wipe some devices as a security precaution — ensure you have the recovery seed before experimenting.
Passphrases are an optional extra secret appended to the seed that create hidden wallets. Passphrases improve privacy and provide a separate wallet but increase operational risk: if you forget your passphrase, the hidden wallet is irretrievable. Use passphrases only if you have a disciplined secret-management plan.
Advanced Workflows: Multisig & Air-gapped Signing
For institutional or very high-value holdings, consider multisignature wallets where multiple keys are required to sign transactions. This reduces single-point-of-failure risk but requires well-documented operational procedures. Air-gapped signing keeps a device offline for signing, transferring transactions via QR codes or secure USB between an offline and an online machine. These setups are powerful but require planning, testing, and documentation.
Practice & Recovery Drills
Rehearse a full restore on a test device to ensure backups are valid and recovery procedures work. For teams, run regular drills and document roles: who can restore, who approves transfers, and where backups are stored. Practicing reduces human error during an actual incident.
Troubleshooting
Device not detected
Try a different USB cable and port; avoid USB hubs. Restart Ledger Live and the host computer. On Linux, ensure udev rules are installed to allow non-root USB access. If issues persist, consult Ledger Live diagnostics or official support channels.
Forgot PIN
If you forget your device PIN you must reset the device and restore from the recovery seed. Do not reset unless you have a secure copy of your seed — resetting without the seed will permanently remove access to funds on that device.
Phishing & suspicious prompts
Any request asking for your seed on a website or in an app is a scam. Disconnect, close the session, and seek remediation via official vendor resources. Keep a list of official support channels and confirm contact methods via the vendor's site before sharing sensitive details.