Ledger products are built around a combination of hardware and software security, meant to protect your private keys from a wide range of potential attacks. Use this guide to make sure your Ledger device is genuine, and not fraudulent or counterfeit.
A few simple checks will assure you that your device is a genuine Ledger product:
- the origin of your Ledger product;
- the content of the box of the Ledger device;
- the condition of the Recovery sheet;
- the initial state of the Ledger device.
Note: advanced users that want to check the device hardware integrity: please refer to the last section of this article.
Purchase your device directly from Ledger or through the authorized distributor / reseller network to make sure you receive an authentic Ledger product. Our official sales channels include:
- our official e-commerce website www.ledger.com
- our official Australian reseller store: www.encryptedhardware.com.au
Note: Ledger devices purchased from other vendors are not necessarily dubious. However, we do strongly recommend that you meticulously perform the safety checks below to ensure that your Ledger is genuine.
Check the box contents
The package of a Ledger hardware wallet should include:
- A Ledger device (Ledger Nano S, a Ledger Blue, etc.)
3 paper cards, including:
- a Getting started card;
- a Did you notice card;
- A blank Recovery sheet, of which there may be 3 copies;
- Additional accessories, such as a keychain and a lanyard;
- Additional packaging (unmarked foam / cardboard).
Note: The paper cards and their envelope do not necessarily carry the Ledger logo.
Box contents of the Ledger Nano S
Check the Recovery sheet came blank
- Make sure your Recovery sheet came in blank
- Ledger never provides a 24-word recovery phrase in any way, shape or form. Only accept a recovery phrase obtained from the screen of the Ledger device.
- If your Recovery sheet already has words on it: the device may be preconfigured. It is not safe for you to use the device. Please contact Ledger Support for assistance.
a blank Recovery sheet
Check the device is not preconfigured
- Make sure your Ledger device was not preconfigured with a PIN code that you did not choose yourself. The device should display Welcome and Press both buttons to begin when you turn it on for the first time.
- Ledger never provides a PIN code in any way, shape or form. Always choose the PIN code yourself.
- If a PIN code is given to you or if the device requires a PIN code you did not choose: it is not safe for you to use the device. Please contact Ledger Support for assistance.
Ledger Nano S: Welcome
Ledger Nano S: Press both buttons to begin
Check authenticity with Ledger applications
- Connect your Ledger device to any of Ledger’s applications to verify its authenticity.
- Genuine Ledger devices hold a secret key that is set during manufacture.
- Only a genuine Ledger device can use its key to provide the cryptographic proof required to connect with Ledger’s secure server.
- Check your Recovery sheet came in blank;
- Initialize your Ledger device yourself at first use. The Welcome screen should be displayed when connecting your device for the first time;
- Choose your own PIN code;
- Contact Ledger Support in case of doubt.
Anti tamper seals
Ledger deliberately chooses not to use anti tamper seals on its packaging. These seals are easy to counterfeit and can therefore be misleading. Rather, genuine Ledger devices contain a secure chip that prevents physical tampering: this provides stronger security than any sticker possibly could.
Hardware integrity check
Advanced users can check the hardware integrity on the inside of their Ledger device. This article provides a non-exhaustive chronology of the different revisions of the Ledger Nano S build. Please be aware that normal usage does not involve opening your Ledger device. Proceed to do so at your own risk. Ledger can not be held liable for any possible damage resulting from opening the device.