OFFICIAL SETUP & ARCHITECTURE
Welcome to Ledger.com/start
Isolated Secure Element Protection
Hardware wallets insulate your private cryptographic keys inside certified Secure Element chips, completely detached from vulnerabilities on internet-connected computers and smartphones. Every transaction is authenticated and signed directly within this physical security boundary, ensuring that sensitive credentials never enter an exposed digital environment.
True Cold Storage & Asset Sovereignty
True self-custody guarantees that only you possess the authority to manage your digital assets. Initializing your hardware wallet through verified setup channels establishes an impenetrable cryptographic foundation, shielding your wealth against phishing attacks, malware, and centralized counterparty risks.
HARDWARE ARCHITECTURE
ENGINEERED FOR UNCOMPROMISED SECURITY
Explore the physical layers and military-grade components that protect your digital assets from remote and physical attacks.
01 / CORE CHIP
Secure Element Chip
Certified CC EAL5+/EAL6+ military-grade hardware isolation keeps private keys mathematically sealed against physical and side-channel exploits.
02 / DISPLAY
OLED Screen Verification
High-contrast independent display directly driven by the secure chip guarantees what you see on-screen is exactly what you sign.
03 / INTERACTION
Dual Physical Buttons
Tamper-proof manual confirmation requiring tactile user engagement prevents unauthorized remote execution or blind signature attacks.
04 / INTERFACE
USB-C & Bluetooth
Encrypted data channels enable seamless connectivity across mobile and desktop environments without ever exposing raw private keys.
HARDWARE ONBOARDING PROTOCOL
COMPLETE DEVICE SETUP GUIDE
Follow the certified five-stage initialization sequence to activate cold storage isolation, establish secure biometric thresholds, and secure your cryptographic keys.
01
PHASE 1 : PHYSICAL AUDIT
Unboxing & Device Verification
Inspect the tamper-evident packaging thoroughly. Ensure the inner security seal is intact, verify the package contents match the factory inventory, and confirm zero pre-printed PINs or seed words are included in the box.
02
PHASE 2 : INTERFACE PAIRING
Connecting to Computer or Mobile
Attach your hardware device using the high-shielding USB-C data cable or initialize encrypted Bluetooth Low Energy pairing with the Ledger Live companion application on desktop or smartphone.
03
PHASE 3 : ACCESS CONTROL
Setting Your Secure PIN
Define a 4 to 8 digit unique numerical passcode directly on the hardware buttons. The integrated Secure Element triggers an immediate factory wipe if 3 consecutive incorrect attempts are registered.
04
PHASE 4 : MNEMONIC SEED
Generating & Recording 24-Word Recovery Phrase
Record each of the 24 BIP-39 mnemonic seed words sequentially onto your physical recovery sheets. Never photograph, type into a computer, or store your phrase online—this seed is your sole root of key recovery.
05
PHASE 5 : CRYPTOGRAPHIC CHECK
Genuine Device Check
Initiate the automated cryptographic handshake via Ledger Live to authenticate the hardware unit against root certificate authorities, verifying authentic factory firmware before allocating assets.
OFFICIAL SOFTWARE REPOSITORY
GET LEDGER LIVE ACROSS ALL DEVICES
Manage your crypto, NFTs, and hardware wallets seamlessly with official, verified Ledger Live companion applications. Always ensure downloads originate from official channels.
UNIFIED ECOSYSTEM EXPERIENCE
DESKTOP AND MOBILE SEAMLESS SYNCHRONIZATION
Real-time asset tracking, secure staking, and direct Web3 dApp interactions protected by certified EAL5+ Secure Element architecture on your physical hardware.
DESKTOP
WINDOWS
Windows 10+ (64-bit architecture only). Native USB device communication support and automatic installer verification.
DESKTOP
macOS
macOS 10.15+ (Catalina, Big Sur, Monterey, Ventura, Sonoma). Universal binary for Intel & Apple Silicon (M1/M2/M3).
MOBILE
ANDROID
Android 8.0+ Oreo or newer. Bluetooth Low Energy (BLE) enabled for wireless pairing with Ledger Stax, Flex, and Nano X.
MOBILE
iOS
iOS 13+ or iPadOS. Secure encrypted Bluetooth connection compatible with Apple App Store official verification certificates.
AUTHENTICITY VERIFICATION & SECURITY ADVISORY
VERIFY SHA-256 HASH & OFFICIAL SOURCE
Never enter your 24-word Secret Recovery Phrase into any software application, website, or form. Ledger Live will never prompt you for recovery words. Validate the downloaded binary against official SHA-256 cryptographic signatures directly published on ledger.com to protect against unauthorized clones and phishing attempts.
Direct link destination: https://www.ledger.com/ledger-live
THE SECURE ECOSYSTEM
INSIDE LEDGER LIVE
One unified, end-to-end companion application to manage your crypto assets, stake tokens, verify transactions with clear-signing, and explore Web3 with uncompromising hardware security.
01 / PORTFOLIO
Real-Time Portfolio Management
Monitor multi-account balances, track dynamic market price feeds, and review historical performance analytics across 5,500+ coins and tokens without ever exposing your private keys.
• Multi-network account isolation & creation
• Live valuation charts & performance metrics
• Zero telemetry on private key derivation
02 / TRANSFERS
Secure Send & Receive Engine
Execute outgoing transfers and generate verified receive addresses with complete simulation, granular network fee controls, and mandatory physical device confirmation.
• Pre-execution transaction simulation
• Custom gas & fee parameter tuning
• Strict hardware display dual-verification
03 / WEB3 & EARN
Web3 & Staking Services
Delegate assets to earn staking rewards directly on native validators (ETH, SOL, ATOM, DOT) and explore vetted decentralized applications through the Discover catalog.
• Native validator delegation without custody loss
• Clear-signed smart contract interactions
• Vetted Web3 dApp Discover catalog integration
CRYPTOGRAPHIC DEFENSE PROTOCOLS
SECURITY LEARNING CENTER
Master hardware-grade self-custody principles. Review strict rules for key generation, offline phrase isolation, anti-phishing hygiene, and cryptographic clear signing verification.
CRITICAL PROTOCOL
01
24-Word Recovery Phrase Protection
Your 24 secret recovery words represent the master root of all your private keys. They must remain completely isolated from digital environments at all times.
Never type words into any computer keyboard, smartphone app, or web browser.
Never store backups in cloud storage, notes apps, password managers, or photos.
Only write words onto physical recovery sheets or punch them into industrial steel capsules.
HARDWARE ACCESS
02
PIN Code Best Practices
Your 4 to 8-digit PIN code unlocks the physical secure element chip. It serves as your first barrier against unauthorized local physical tampering.
Avoid trivial sequences such as 0000, 1234, 5555, or personal birthdates.
Always shield the physical keypad and display from surrounding bystanders and cameras.
Three consecutive incorrect entries trigger an automatic hardware wipe to protect assets.
THREAT MITIGATION
03
Phishing & Impersonation Defense
Attackers frequently deploy spoofed domains, fraudulent emergency emails, and fake social support channels to deceive users into disclosing secret phrases.
Legitimate support will never contact you directly or ask for your 24-word phrase.
Beware of sponsored search engine results imitating official manager applications.
Directly bookmark authentic application portals and verify cryptographic SHA256 hashes.
TRANSACTION INTEGRITY
04
Clear Signing & Verification
What you see on your computer screen can be intercepted by malware. The physical hardware display is the single source of cryptographic truth.
Never approve blind signature requests without readable contract and token details.
Always compare character-by-character the recipient address shown on the physical screen.
Verify the transfer amount and network gas fees before double-button physical confirmation.