Set up a cold wallet on a genuine device, let it generate the recovery secret internally, verify receive addresses on the trusted display and keep redundant offline backups in separate secure locations. Never photograph, email or type the seed into a general-purpose computer.
How the problem works#
Cold storage reduces online key exposure, but it shifts risk toward setup integrity, physical loss and recovery mistakes. An unreadable backup or untested inheritance plan can be as final as theft.
Make the final call#
Two physical backups protect against local disaster; a well-managed passphrase can protect a found seed but creates another secret that heirs must understand. Add complexity only when you can test it.
The operating procedure#
- Buy through an authorized channel and inspect tamper indicators. Compare the exact domain, address, network or permission with an independent official source before continuing.
- Initialize as new; reject any device arriving with a preset phrase. Write the boundary down first so urgency cannot quietly expand what the wallet or account is allowed to expose.
- Write and verify the backup without cameras or networked devices. Compare the exact domain, address, network or permission with an independent official source before continuing.
- Install authentic firmware and perform a small receive-and-send test. Keep the first exposure small enough that a wrong assumption can be corrected without a material loss.
- Document recovery and inheritance without exposing the secret. Keep the original timestamp, identifier and unedited record so another person can reproduce the conclusion.
Avoid these shortcuts#
- Keeping device and only backup together. This weakens a control that should limit the blast radius of cold wallet setup.
- Using a metal backup without checking character legibility. This weakens a control that should limit the blast radius of cold wallet setup.
- Adding a passphrase without a recovery drill. This can expose the root credential; a later password change may not remove the attacker’s access.
- Typing the seed into a website to “verify” it. This can expose the root credential; a later password change may not remove the attacker’s access.
For cold wallet setup, a clean result is not merely a completed transaction or setting. It is a result you can independently verify, reproduce and recover from if the surrounding service fails.
Confirm the result#
Do not judge the outcome of cold wallet setup only by whether the interface shows a success message. Use evidence that can still be checked after the page is closed.
| Checkpoint | Evidence | Stop condition |
|---|---|---|
| Buy through an authorized channel and inspect tamper indicators | Dated screenshot or onchain record with sensitive data removed | Keeping device and only backup together |
| Initialize as new; reject any device arriving with a preset phrase | Dated screenshot or onchain record with sensitive data removed | Using a metal backup without checking character legibility |
| Write and verify the backup without cameras or networked devices | Dated control check, recovery test or authenticated settings record with secrets removed | Adding a passphrase without a recovery drill |
Keep transaction hashes, official case numbers or dated screenshots when they help document cold wallet setup, but exclude seed phrases, private keys and authentication codes.
Frequently asked questions#
Does the hardware device contain my coins?
No. Assets remain onchain; the device protects keys used to authorize transactions.
Can I restore on another brand?
Often, if both follow compatible standards, but derivation paths and coin support can differ. Test the documented recovery process.
How often should I check backups?
Inspect periodically for damage and run a recovery drill using a safe, documented method without exposing the live secret.
Related guides#
Sources#
- Ethereum.org: Security and Scam Prevention
- MetaMask: Wallet Security
- CISA: Avoiding Social Engineering and Phishing Attacks
Risk notice: Crypto actions can be irreversible. Never share a seed phrase, private key, password or authentication code, and verify every domain and wallet prompt independently.
Editorial standard
This guide is educational and source-led. Security controls, exchange rules and legal requirements can change; verify critical steps through the relevant official service before acting.
