Wallet resilience
Buying a hardware wallet: a practical provenance checklist
By Jolly Ledger editorial · Published · Reviewed · 4 min read
Short answer
Buy through the manufacturer or a reseller listed by the manufacturer, then follow the official arrival and setup checks. Packaging and device authentication provide useful evidence, not a guarantee about every part of your setup.
A hardware wallet’s history matters before it ever holds your keys. A convincing product photo, unopened-looking box or low price does not establish where a device came from. The practical goal is a purchase and setup path you can explain, with a clear stopping point if something does not match the manufacturer’s instructions.
Start with the seller, not the listing
Navigate independently to the wallet maker’s official website. If buying elsewhere, check its current reseller list rather than accepting a marketplace badge or the seller’s claim of authorization. Confirm the actual seller at checkout: a marketplace can show several merchants on one product page.
Keep the order confirmation, seller identity and delivery date. These are useful if the parcel is wrong or support needs to establish its origin. Store them separately from wallet secrets. Consider what contact information the purchase requires, without providing false delivery details or assuming any seller can promise permanent privacy.
Treat arrival checks as layers
Read the model-specific arrival instructions before opening the parcel. Look for unexpected items, visible damage, inconsistent packaging and signs the device has already been configured. Packaging designs change, so compare against current official guidance rather than an old unboxing video.
BitBox describes several supply-chain controls, including packaging, casing construction and device checks. Its account is a useful illustration of layered protection, not evidence that every manufacturer uses identical controls. A seal is one clue; it cannot tell you everything about electronics or firmware.
Where supported, perform the official device-authentication procedure through the manufacturer’s verified app or documented workflow. Read what authenticity checks can and cannot tell you. A successful result should not overrule a contradictory warning, such as a device arriving with a recovery phrase already supplied.
Reject a preselected recovery phrase
For a new wallet, follow the manufacturer’s initialization instructions so the wallet generates its own backup. Do not use words printed on a card by the seller, supplied in a message or described as an activation code. A blank backup card is different from a completed one. Never send recovery words to a seller or enter them into a website or software form.
Before you proceed
- Verify the seller through the manufacturer’s own site.
- Read the current checks for the exact model and inspect the parcel.
- Obtain the setup app through the manufacturer’s official route.
- Stop if supplied secrets or unexpected setup instructions appear.
- Keep receipts, but never include recovery words in a support ticket.
If something looks wrong
Do not connect a questionable device merely to satisfy an unsolicited support request. Preserve non-secret evidence such as order details and packaging photographs. Use message verification steps to reach the maker directly, and ask for its model-specific return or investigation instructions.
An odd parcel is a reason to investigate, not proof that your existing wallet keys have been stolen. If you already used the device, explain exactly what happened without disclosing secrets. Whether you need another device or a different wallet depends on that evidence; replacement and new-wallet creation are separate decisions.
Sources
Reported facts are attributed to their sources. Spotted an error? Read our corrections approach.
Turn this into a preparation plan
Answer 16 calm questions about your setup. Get findings, scenario walkthroughs and a family briefing — on your own device, no account, no wallet connection, no recovery words.