Step-by-Step: Setting Up Cold Storage From Scratch (Ledger Nano S+)

Before connecting your Ledger, inspect the packaging carefully. Check that the hologram seal on the box is fully intact and shows no signs of peeling or resealing. The device itself should have no pre-existing PIN set — if the device prompts you to enter an existing PIN on first connection, it has been used before. Do not use it. Return it immediately.

Open Ledger Live on your computer and navigate to My Ledger. If a firmware update is available, install it — approve on the device by pressing both buttons when prompted. After firmware update, install the coin apps you need. Each app is downloaded from Ledger's official app catalog and stored on the device's flash memory.

This is the most critical step in the entire setup. Your 24-word seed phrase is generated here — and how you handle it in the next 4 minutes determines whether your cold wallet setup is truly secure or secretly vulnerable. Read every warning below before proceeding.

After writing down your 24 words, the Ledger will ask you to confirm them by re-entering groups of words in a randomised order using the device buttons. This step verifies that you wrote the seed phrase correctly before you rely on it. Do not skip or rush this — a single incorrectly written word means total loss when you need to recover.

Before sending any significant amount, complete a test receive transaction with $20 CAD. This confirms your device generates correct addresses and that your Canadian exchange integration works. The critical habit: always verify your receiving address on the device screen — never trust an address displayed only on your computer.

Now send the $20 test amount back to your exchange. This is where you experience the physical device verification for the first time — and understand why it prevents every category of address manipulation attack described in Chapter 3. The process takes about 90 seconds but teaches you everything you need to know about secure sending.

If you hold ETH, ERC-20 tokens, or use DeFi protocols, set up the Ethereum app and optionally connect MetaMask. This gives you hardware wallet security for DeFi activity — every DeFi transaction requires the same physical device verification you used in Step 6.

This is the step most people skip — and the step that saves them when they need to recover a lost or damaged device. Before relying on your seed phrase backup, verify it actually works by resetting your device and restoring from the written backup. Do this while your test balance is small. Do not wait until you need it in an emergency.