Why a hardware wallet
Once your crypto exceeds HK$50k, a single malware infection can wipe you out. Hardware wallets keep private keys on an offline chip and require physical button presses for every signature.
Three popular options
| Brand | Price | Screen | Connection | Open source | Best for |
|---|---|---|---|---|---|
| Ledger Nano X / S Plus | HK$700–1,400 | Small | USB / BT | Partly closed | Mainstream, DeFi |
| Trezor Safe 3 / 5 | HK$700–1,800 | Medium | USB | Fully open | Maximum transparency |
| Keystone 3 Pro | HK$1,200–2,000 | Large color | QR code (fully offline) | Mostly open | Large balances, top security |
Our stores can help you buy a hardware wallet.
Standard setup SOP
1. Purchase
- Only from the official site or an authorised store.
- Avoid second-hand, listed-app, or sealed-but-pre-configured devices.
2. First boot
- Charge / connect.
- The device must boot brand-new and ask you to generate the seed.
- If a seed is already present, return it immediately.
3. Write down the seed
- Hand-write two paper copies, numbered 1–24, double-checked.
- Store paper and device separately (home safe + bank vault).
- Never photo, cloud-upload, paste into Notes, or share.
4. PIN + passphrase
- PIN: 6–8 digits, not your birthday.
- Passphrase ("25th word"): stored separately; even if the seed is stolen, the assets stay safe.
5. Small-amount test
- Send 50 BTC from an exchange to the wallet.
- Send 10 BTC back.
- Only then move serious balances.
Common mistakes
- Photographing the seed → iCloud / Google Photo sync → cloud breach → zeroed out.
- Setting up via a public USB port → MITM attack.
- Writing seed and passphrase on the same sheet → defeats the passphrase.
- Skipping yearly backup checks.
Annual maintenance
- Every 6 months: restore the seed onto a spare device.
- Update firmware via official channels.
- Rebalance: < 5% in hot wallets, > 90% in cold storage.
