iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
The safest route is to buy a hardware wallet from the manufacturer’s official shop or from a reseller the manufacturer identifies as authorized. If you use a marketplace, verify both the official storefront and the individual seller. Before moving any cryptocurrency, inspect the package, initialize the device in the manufacturer’s software, generate the recovery backup yourself, and reject any wallet that arrives with a prewritten recovery phrase or PIN.
Where to buy a hardware wallet
Your purchase channel determines how much of the supply chain you must trust. A device can look unopened and still be unsafe if it was diverted, returned, altered, or sold by an unapproved merchant. Use this order of preference.
1. The manufacturer’s official shop
Start by typing the manufacturer’s domain yourself or using a bookmark you created previously. Navigate from that site to the company’s store rather than following a sponsored search result, a social-media post, or an unsolicited message. The official shop gives you the clearest route to the correct model, regional terms, support contacts, and return process.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minutePC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Check the exact model name and the country or region selected at checkout. Hardware-wallet accessories and editions can look similar, while availability, taxes, delivery, warranty terms, and return windows can differ by region. Save the order confirmation and seller details until the wallet has passed its authenticity checks.
2. A reseller listed by the manufacturer
An authorized reseller can be a safe alternative when the official shop does not serve your country or has no stock. Find the reseller through the manufacturer’s own reseller directory or support page. Do not treat a seller’s claim of authorization as proof; the listing must be independently reachable from the manufacturer’s domain.
#1 Best Overall
- Unparalleled Security: Protect your assets NDA-free EAL 6+ Secure Element, offering robust defense and complete transparency
- Simple & Secure Interface: Manage your digital assets easily with a clear OLED screen for secure on-device confirmations
- Supports 1000s of Coins & Tokens: Securely handle thousands of assets, including Bitcoin, Ethereum, and more, all in one wallet
- Effortless Asset Management: Monitor and transact seamlessly with Trezor Suite, our intuitive desktop and mobile app
- Enhanced Backup Solution: Rest assured with Multi-share Backup, eliminating single points of failure for secure cold wallet recovery
Match the reseller’s legal or marketplace name exactly. A similarly named storefront, a seller with a single extra character in its name, or a listing that merely uses the manufacturer’s logo is not enough. Keep a copy of the product page showing the seller identity, model, condition, and return terms.
3. A marketplace listing
Marketplaces require an additional identity check. Ledger’s official guidance allows purchase from its official shop, an official Ledger storefront on Amazon, or an authorized reseller, followed by its Genuine Check. Trezor says its official shop is best and that its official Amazon storefront or authorized resellers are generally safe.
“Sold by” and “shipped by” are separate fields. Confirm the seller named in the listing, not only the platform that handles delivery. Open the seller profile, compare the name with the manufacturer’s authorized listing, and make sure the listing is for a new device rather than an open-box, refurbished, or previously returned unit. If the seller identity cannot be verified from the manufacturer’s information, choose another listing.
How to check the package when it arrives
Do not connect the wallet to a computer or transfer funds immediately. Perform a physical inspection first, in good light, and photograph anything that appears opened or altered.
Look for signs of opening or substitution
- Inspect the shipping carton and retail box for cut tape, resealing, crushed corners, mismatched labels, or evidence that an inner package was removed.
- Check whether seals, labels, or tamper-evident elements are missing, lifted, or replaced with a different material.
- Compare the model, color, serial information, and included items with the order you placed and the manufacturer’s current product description.
- Look for handwritten notes, loose cards, inserted instructions, or packaging that appears to belong to another product.
Packaging evidence is a warning signal, not a substitute for software verification. A clean-looking box does not prove that the device is genuine, and a damaged shipping carton does not by itself prove compromise. If the contents or identity do not match your order, stop and contact the official support channel before setup.
Rank #2
- Unparalleled Security: Protect your assets with EAL 6+ Secure Element, offering robust defense and complete transparency
- Simple & Secure Interface: Manage your digital assets easily with a clear OLED screen for secure on-device confirmations
- Supports 1000s of Coins & Tokens: Securely handle thousands of assets, including Bitcoin, Ethereum, and more, all in one wallet
- Effortless Asset Management: Monitor and transact seamlessly with Trezor Suite, our intuitive desktop and mobile app
- Enhanced Backup Solution: Multi-share Backup eliminates single points of failure for secure cold wallet recovery
Reject any prewritten recovery phrase or PIN
A legitimate Ledger device never comes with a recovery phrase or PIN code pre-configured. Trezor’s Safe 3 guidance likewise says there is no default seed because the backup is generated during setup. A card or screen that supplies words, a QR code, or a PIN is a decisive stop sign.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Clear out junk files and repair common Windows errors3Fix the driver behind crashes, sound loss and screen glitchesDo not “test” a supplied phrase by entering it into the device, typing it into a website, or importing it into wallet software. Whoever created that phrase could retain a copy and control any funds assigned to it. Photograph the evidence if needed for a return or report, then keep the device unfunded while you contact the manufacturer through its official support route.
Initialize the wallet without exposing the backup
Once the package passes inspection, the safest setup is one you start yourself. Use only the manufacturer’s official companion application downloaded from the manufacturer’s website or from an app-store listing linked by that site. Avoid download links sent in email, direct messages, pop-ups, or “support” chats.
- Install the official companion software. Confirm the publisher and application name before opening it. For Trezor Safe 3, the documented setup path uses official Trezor Suite. For a Ledger device, use the official Ledger software and follow its Genuine Check process.
- Connect the device only when the official software requests it. If an application asks you to enter a recovery phrase before the device has generated one, close it and verify that you installed the genuine application.
- Choose the option to create a new wallet. The device should generate the recovery backup during this process. Never select a recovery or restore path merely because a card arrived in the box.
- Write the recovery words yourself. Record them exactly as displayed, in order, on the supplied backup medium or another durable offline medium. Do not photograph them, store them in cloud notes, email them to yourself, or paste them into a password manager unless the manufacturer’s documented process specifically requires a separate encrypted arrangement.
- Complete the device’s confirmation checks. The wallet may ask you to confirm selected words or a PIN on the hardware itself. Perform those confirmations on the device, not in a web page or chat window.
- Run the manufacturer’s authenticity or safety check. Ledger’s process is called Genuine Check. Follow the official software’s result and stop if it reports a problem or cannot identify the device.
- Record where the backup is stored without revealing its contents. Anyone who obtains the words can usually control the assets protected by them, so treat the backup as the highest-value secret in the setup.
The hardware screen is the trusted display for transaction approval. Before confirming a transfer, compare the destination address and amount shown on the device with the details you intended to send. Malware on a computer or phone can alter information displayed in software; approving only after checking the device’s own screen reduces that risk.
Protect the recovery phrase and PIN
The recovery phrase is a master backup, not a customer-service credential. Ledger’s phishing guidance states: “Never share the 24 words of your recovery phrase with anyone under any circumstances.” That includes people claiming to be employees, exchange staff, moderators, investigators, or recovery specialists.
Rank #3
- Unparalleled Security: Protect your assets with EAL 6+ Secure Element, offering robust defense and complete transparency
- Simple & Secure Interface: Manage your digital assets easily with a clear OLED screen for secure on-device confirmations
- Supports 1000s of Coins & Tokens: Securely handle thousands of assets, including Bitcoin, Ethereum, and more, all in one wallet
- Effortless Asset Management: Monitor and transact seamlessly with Trezor Suite, our intuitive desktop and mobile app
- Enhanced Backup Solution: Multi-share Backup eliminates single points of failure for secure cold wallet recovery
Keep the backup offline and private
- Store the written words where other people cannot casually photograph, copy, or remove them.
- Do not put the phrase in a website form, support ticket, chat, email, cloud drive, screenshot, or unencrypted document.
- Do not create extra digital copies simply for convenience. More copies create more places for the phrase to leak.
- Do not tell a seller, courier, marketplace representative, or friend the words while troubleshooting a delivery or setup issue.
A PIN protects access to the physical device; it does not replace the recovery phrase and does not make a pre-seeded wallet safe. Choose and confirm the PIN during your own initialization, and do not accept a PIN printed on a card or supplied by another person.
Recognize phishing pressure
Unsolicited messages, urgent “verification” requests, warnings that your wallet will be suspended, and demands for the recovery phrase are phishing indicators. Close the message and open the manufacturer’s site using your own bookmark or a manually entered address. Use the support contact shown there, not a reply address or link in the message.
Support staff can help diagnose a device or software problem without receiving your recovery words. If someone insists on the phrase, asks you to “synchronize” it on a web page, or tells you to move funds to a new address for protection, treat the request as malicious.
Ledger and Trezor buying workflows compared
The two manufacturers’ published safety instructions emphasize the same core control: purchase through an official or authorized channel, generate the backup during your own setup, and verify the device in official software.
Recommended Free Tools
| Check | Ledger hardware wallet | Trezor Safe 3 |
|---|---|---|
| Preferred purchase route | Ledger’s official shop, an official Ledger storefront on Amazon, or an authorized reseller | Trezor’s official shop; its official Amazon storefront or an authorized reseller is generally considered safe |
| Recovery setup | A legitimate device never arrives with a pre-configured recovery phrase or PIN; generate the backup during your own setup | No default seed; the backup is generated during setup |
| Device or software check | Run Ledger Genuine Check in official Ledger software | Set up through official Trezor Suite and follow its on-device checks |
| What to do with a supplied phrase or PIN | Do not use the device; contact official support or the seller for a return | Do not use the device; contact official support or the seller for a return |
Supported assets, connection methods, warranty coverage, return periods, stock, and regional prices depend on the specific model and country. Confirm those details on the current product page and purchase terms before ordering; the safe-buying instructions above do not establish a universal specification or price for either brand.
Rank #4
- UNPARALLELED SECURITY: Protect your assets with Trezor Safe 5's NDA-free EAL 6+ Secure Element, offering robust defense and complete transparency.
- EFFORTLESS NAVIGATION: Experience seamless crypto management with the vibrant color touchscreen, designed for intuitive and user-friendly interactions.
- ENHANCED USER EXPERIENCE: Enjoy tactile confirmation with Trezor Touch Haptic Engine, making each interaction precise and engaging.
- SUPPORTS 1000s OF COINS & TOKENS: Securely handle thousands of assets, including Bitcoin, Ethereum, and more, all in one wallet.
- EASY ASSET MANAGEMENT: Monitor and transact seamlessly with Trezor Suite, our user-friendly desktop and mobile app
How to buy safely on Amazon or another marketplace
A marketplace can be safe when the manufacturer identifies the storefront or seller as authorized, but the platform name alone is not enough. Use this sequence before paying:
- Open the manufacturer’s official website in a separate browser tab.
- Locate its authorized-reseller information or official marketplace storefront.
- Return to the marketplace and compare the seller name character for character.
- Check that the listing is new, sealed, and the exact model you intend to buy.
- Read the seller’s return terms and save a copy of the listing and invoice.
- After delivery, perform the package, seed, PIN, and official-software checks before adding funds.
Do not rely on a high sales count, a “best seller” badge, customer photographs, or reviews that discuss delivery speed rather than authenticity. Those signals describe marketplace activity, not cryptographic integrity. A listing that changes seller identity, price, or fulfillment details between order and delivery deserves another verification.
What to do if a wallet fails a check
The box is opened or the contents do not match
Do not initialize or fund the device. Keep the packaging, labels, invoice, and photographs. Use the manufacturer’s official support channel and the seller’s documented return process. Describe the specific discrepancy without sending a recovery phrase, PIN, private key, or other secret.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →A phrase or PIN was supplied
Stop immediately. Never enter the supplied words into the device or any application. Request a return or replacement through the seller and notify the manufacturer through its official support route. If you already transferred assets to a wallet created from that phrase, treat the phrase as compromised and move the assets to a newly generated wallet only after obtaining a device that passes verification.
Official software cannot verify the device
Disconnect it and check that you installed the companion software from the manufacturer’s official source. Retry once using the documented setup path. If the check still fails, do not override the warning or proceed because a marketplace seller says the result is normal; ask official support to interpret the result and provide the next step.
A message asks for the recovery phrase
Do not reply. Navigate independently to the manufacturer’s website, report the message through its official channel if available, and secure any account credentials that may have been exposed. The recovery phrase itself must remain private.
Final pre-funding checklist
- The seller was the manufacturer’s official shop or appeared in the manufacturer’s authorized-reseller information.
- The marketplace seller identity matched the manufacturer’s record exactly.
- The package and device showed no unexplained alteration or substitution.
- No recovery phrase, seed, PIN, or “activation” card was supplied.
- The wallet generated its recovery backup during your setup.
- You wrote the backup offline and have not shared or digitized it.
- The companion software came from the manufacturer’s official site or its linked app listing.
- The manufacturer’s authenticity or safety check completed successfully.
- You can verify the destination address and amount on the hardware screen before approving a transaction.
If any item fails, leave the wallet unfunded until the manufacturer or an authorized seller resolves the issue. The safest purchase is not simply the device that arrives fastest; it is the one whose seller, packaging, initialization, and verification chain you can independently establish.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
