Setting up a hardware wallet without making the three common mistakes
Ledger or Trezor, bought direct, initialised offline, seed written once on steel. The order matters.
Updated 2026-10-18
A manual, not a feed. Three layers: custody basics, one file per attack, and recovery. Updated when a new variant appears.
Ledger or Trezor, bought direct, initialised offline, seed written once on steel. The order matters.
An attacker moves your phone number to their SIM and receives your codes. Fifteen minutes of setup makes you immune.
Attackers send you dust from an address that looks like one you use, hoping you copy theirs next time.
Every DeFi interaction asks for approval to move your tokens. Unlimited approvals to a contract that later gets exploited are the most common silent loss.
No exchange, wallet or project will ever message you first, ask for your seed, or ask you to install remote-access software.