Hardware Wallets Explained: When You Need One and How to Use It

In November 2022, FTX — the world's second-largest crypto exchange at the time — filed for bankruptcy. Customer assets were missing. An estimated €8-10 billion in user funds were gone. Users who had kept Bitcoin, Ethereum, and other assets on FTX lost everything. Users who had self-custodied their assets on hardware wallets the day before FTX's collapse still had every coin.

FTX was not a small, sketchy exchange. It was a regulated, venture-backed, celebrity-endorsed institution. Sam Bankman-Fried was on the cover of Forbes. Their balance sheet appeared healthy until it did not. The FTX collapse is the clearest possible illustration of why 'not your keys, not your coins' is not paranoia — it is fact.

The same pattern played out with Mt. Gox (2014), Quadriga (2019), Celsius (2022), Voyager (2022), and BlockFi (2022). Every single major exchange or custodian failure has followed the same script: appeared legitimate, attracted user deposits, failed, froze withdrawals, entered insolvency. The funds available to recover user claims were a fraction of what was owed.

Self-custody via a hardware wallet is the only complete protection against this risk.

Ledger and Trezor are the two most trusted hardware wallet manufacturers with the longest operational track records. Both are solid choices; the differences are practical rather than fundamental.

Ledger Nano X: Bluetooth connectivity for mobile use, supports 5,500+ crypto assets, proprietary Ledger Live software, battery-powered. The most popular hardware wallet globally. Note: Ledger experienced a data breach in 2020 that exposed customer email and shipping addresses (not private keys or funds). This was a marketing database breach, not a device security breach.

Ledger Nano S Plus: Wired-only (no Bluetooth), more affordable, same security chip as the Nano X. Good choice if you do not need mobile connectivity.

Trezor Model T: Open-source firmware (auditable by anyone), touchscreen interface, no Bluetooth. Trezor's open-source model gives security researchers the ability to verify the code, which some users prefer over Ledger's partially closed-source approach.

Trezor Model One: Wired, two-button interface, most affordable option. Limited asset support compared to Ledger.

Both brands have strong security records at the device level — no documented hardware-level exploit has successfully stolen funds from either brand's devices in normal use.

Setup is straightforward, but two steps are absolutely critical. Getting them wrong means losing your assets.

Step 1: Buy directly from the manufacturer. Never buy a hardware wallet from Amazon, eBay, or any third-party reseller. Pre-configured or tampered devices have been sold through third-party channels with compromised seed phrases. Ledger sells direct at ledger.com; Trezor at trezor.io.

Step 2: Generate your seed phrase on the device. When you first set up your hardware wallet, it generates a new seed phrase — 12-24 random words — displayed on the device screen. Write every word down in the exact order shown, on paper. Store the paper in a physically secure location. This is the only moment you will see these words — the device does not remember them, and there is no cloud backup. If you lose the seed phrase and the device is lost or damaged, your funds are gone permanently.

Step 3: Verify the device with the manufacturer's verification process. Both Ledger and Trezor have verification steps to confirm the device has not been tampered with.

Step 4: Test recovery before depositing significant funds. Restore your seed phrase on the device (or through manufacturer test tools) to confirm the backup works before depositing large amounts.

Once your hardware wallet is set up, using it correctly means building a few habits.

Always verify the receive address on the device screen, not just in software. Malware on computers can swap clipboard addresses — you think you are sending to your wallet address but you are actually sending to an attacker's address. Confirming on the device screen bypasses this attack.

Never enter your seed phrase on any website, software, or form — ever. Ledger Live, Trezor Suite, and all legitimate hardware wallet software never ask for your seed phrase during normal operation. Any request for your seed phrase is a scam, regardless of how legitimate the interface looks.

Store your seed phrase backup in two physically separate locations. A house fire, flood, or theft should not be able to eliminate all copies. Metal backup plates (available for €20-€50) are worth considering for primary large-value wallets.

For very large holdings (above €50,000), consider a multi-signature setup — requiring two or more hardware wallets to authorize any transaction. This eliminates single-point-of-failure risk from device theft or seed phrase exposure. Setup is more complex but provides the highest level of self-custody security available to retail investors.