Hardware wallet — how to buy safely & set it up (Cardano)
A hardware wallet keeps your private keys inside a dedicated device — they never touch software, so malware and fake apps can't extract them. This is the official recommendation for moving funds after the SecondFi incident. Community guide, not financial advice, not affiliated with any vendor.
- Buy ONLY from the manufacturer's official website. Type the domain yourself or use a bookmark — do NOT use ads, search-result ads, social links, DMs, or someone else's QR.
- Cross-check the domain on cardano.org/apps and the vendor's verified (blue-check) social account. Beware look-alikes (.com vs .net, swapped letters).
- Never buy from Amazon / eBay / AliExpress / marketplaces / resellers — devices can be pre-tampered.
- A genuine device arrives with NO recovery phrase set. You generate it yourself on first setup. A pre-filled phrase / “scratch-card seed” = scam → return it.
All three support Cardano (ADA) and pair with Eternl. Ledger/Trezor also work with Lace/Yoroi; Trezor stakes ADA in Trezor Suite; Keystone is fully air-gapped (QR, no USB/Bluetooth).
Use one of the verified links above. Type the address yourself or use a bookmark — never reach it through an ad, a search-result ad, a social-media link, a DM, or someone else's QR code.
On arrival, check tamper-evidence. Then run the official genuine-check inside the vendor app (Ledger Live / Trezor Suite / Keystone). A real device arrives with NO recovery phrase set.
Set up as a new device. It generates a brand-new recovery phrase ON the device screen. Write it on the supplied card / paper and store it offline. NEVER photograph it or type it into any computer, phone, website, or app.
Choose a PIN you don't use elsewhere. A passphrase (25th word) adds an extra layer but you must remember it — losing it means losing access.
Ledger: open My Ledger in Ledger Live → search “Cardano (ADA)” → Install. Trezor / Keystone: Cardano support is built in.
Open Eternl / Lace / Typhon / Yoroi → choose “Connect / Add hardware wallet”. Your keys stay on the device; the software only sees public data and asks the device to sign.
Copy your address (addr1…) and confirm it MATCHES the address shown on the hardware device screen before you use it. Then send a small test amount first, confirm it arrives, then move the rest.
Stake-pool delegation and DRep / governance voting are signed on the device too. You approve each action on the hardware screen.
- Buy ONLY from the manufacturer's official site (links above). Never from Amazon, eBay, AliExpress, marketplaces, or a reseller — devices can be tampered with.
- A genuine device NEVER comes with a pre-set recovery phrase. If a phrase, a “scratch card” seed, or “use this phrase” instructions are included, it's a scam — do not use it, return it.
- Your recovery phrase is the key to your money. Never type it into any website, support chat, email, Google Form, or DM. A hardware wallet never needs you to enter the phrase on a computer.
- Always verify the receiving address on the device's own screen — clipboard-hijacking malware can swap a pasted address.
- Watch for look-alike domains (ledger.com vs ledqer / .com vs .net). Cross-check on cardano.org/apps and the vendor's verified social account.
A new hardware wallet secures funds GOING FORWARD (and can receive your recovered assets). It does NOT un-expose your old SecondFi seed — the same keys stay exposed no matter which wallet you restore them into. So do NOT restore your SecondFi phrase here. Per SecondFi (2026-06-29): keep BOTH the app and your seed phrase, do not delete the app, and await the official recovery. Details: /secondfi-recovery ↗
Sources (verified June 2026): ledger.com & support.ledger.com (Cardano), trezor.io/coins/wallet/cardano, keyst.one & guide.keyst.one, cross-checked with cardano.org/apps. Community educational guide — not financial advice, not affiliated with or endorsed by any vendor. Always verify the official domain yourself before purchase.