1 · Purchase & Setup

A trustworthy start

Bought direct from the manufacturer.Never used, never marketplaces — tampered devices with preinstalled seeds are the industry's oldest trick. Verified authenticity, firmware current.Seals, authenticity check, update — always via the official software, never via email links. Seed generated offline.Only the device shows the words — no camera, no onlookers, no rush.

2 · Backup

The seed outlives you (almost)

Seed on steel, two locations.Paper to start, steel medium-term (fireproof) — in two separate locations. Recovery tested.Device reset and restored from the backup — before the first deposit. Untested is no backup. No digital copy.No photo, no cloud note, no password manager — or the key is online again.

3 · Transaction Routine

Every transfer equally safe

Receiving address verified on device.Malware swaps clipboard addresses — only the display counts. Test transaction first.Send a small amount, verify receipt — then the rest. Never sign blindly.What you don't understand, you don't sign — the display shows what gets signed. Cross-check addresses.Validate format and checksum before sending again — e.g. with the Address Validator.

4 · Worst Cases

Fire, loss, inheritance

Second medium, second location.One backup is no backup — only geographic separation makes it resilient. Instructions for family.Who finds what, and understands the steps — even without you? Write down, discuss, deposit. Updates official only, never rushed.“Critical update, act now” is also a phishing lure.

5 · Advanced

When it gets serious

Large amounts: multisig.2 of 3 keys instead of one — no single failure is fatal. Separate wallets.Saving, spending, experimenting — separate addresses, separate risks.

All 15 points done? Then custody is routine.

For everything beyond — multisig setups, company processes, payment flows, and technical reviews — a conversation with finance and engineering perspective helps.

Start a conversation Read the hardware guide

Self-Custody Checklist