Skip to main content

Search...

Popular searches

How to Verify Your Hardware Wallet Is Genuine — Checklist

A tampered or fake hardware wallet can steal your funds. Use this quick checklist to confirm your device is genuine before you trust it with crypto.

Reading Time: 3 min
Published: Jun 2, 2026
Frost
Frost

Introduction

A counterfeit or tampered hardware wallet can be designed to steal your funds, so verifying authenticity before setup is essential. This is a practical checklist; for the deeper attack analysis, see our supply-chain threat model. Run through every point before trusting the device.
Open rating formula26 wallets analyzedUpdated Jun 2026No sponsored rankings

TL;DR

  • Buy only from the manufacturer or an authorised reseller — never a marketplace third party.
  • Inspect packaging and tamper-evidence on arrival.
  • Run the official app's genuine-check / device attestation.
  • A genuine device generates its own recovery — reject any pre-filled seed or PIN.

1. Buy from an official source

The single biggest protection is buying directly from the manufacturer or an authorised reseller. Avoid third-party marketplace sellers, where tampered or cloned units appear. Used devices should never be trusted.

2. Inspect the packaging and device

Check the box and any tamper-evidence against the manufacturer's official photos. Note that some brands rely on cryptographic attestation rather than seals — so packaging alone isn't proof; combine it with the steps below.

3. Run the official genuine check

Connect the device to the manufacturer's official app and run its genuine-check / attestation, which cryptographically confirms the hardware is authentic. Only use the official app downloaded from the official site.

4. Reject any pre-set recovery or PIN

A genuine device always generates your recovery phrase itself during first setup. If it arrives with a recovery phrase already printed, a 'use this PIN' card, or instructions to enter a provided phrase, it's a scam — do not use it.

Never set up a device that came with a pre-filled recovery phrase or that you can't verify as genuine. For how these attacks work, read our <a href="/en/guides/threat-models/supply-chain-attack-hardware-wallet-verification/">supply-chain attack threat model</a>.

Frequently Asked Questions

Common questions about hardware wallets and crypto security

How do I know my hardware wallet hasn't been tampered with?
Buy from an official source, inspect packaging, and run the manufacturer's genuine-check/attestation in the official app. Most importantly, a genuine device generates its own recovery — reject any pre-set seed.
Is a broken seal proof of tampering?
Not always — some brands use cryptographic attestation instead of seals. Combine packaging inspection with the official genuine check and the pre-set-seed rule.
I bought a used hardware wallet — is it safe?
No. Never trust a used or pre-owned device; it could be compromised. Buy new from an official source and set it up yourself.

Ready to Choose Your Wallet?

Now that you have the knowledge, take the next step toward securing your crypto.