Ledger Nano S: Setup, Restore and Lost Device Steps
Ledger Nano S Backup and Recovery Guide for Self-Custody
Ledger Nano S Secure Crypto Hardware Wallet is the right choice if you want self-custody without exposing seed words to a computer, phone, or browser extension. The device generates its recovery phrase internally, stores it in a tamper-resistant chip, and signs transactions only after you verify the recipient address and amount on its screen. Use it with the Ledger Live desktop or mobile application to install coin-specific apps, create accounts, check balances, and prepare transfers; the final approval stays on the physical unit.
Security comes from separation: the recovery phrase never leaves the unit, and the PIN protects local access. A wired S model has no wireless radio, so an attacker cannot reach it over Bluetooth or Wi-Fi. When you connect it by USB, the host machine can request a signature but cannot read the private keys. If the unit is lost or damaged, restore requires the recovery phrase written on paper or metal; never type it into a website, chat, email, or cloud note.
For daily use, install the companion app from ledger.com, verify the download page address, and ignore lookalike domains. Set a PIN on first boot, write the recovery phrase by hand, and confirm the words on the device. Add accounts only for assets you actually hold, and send a small test amount before moving larger sums. Firmware updates should be done through the official app while the unit is connected; if an update stalls, check the USB cable, port, and official support notes rather than repeating random fixes.
The main trade-off is convenience: a wired device with a small screen asks for more deliberate clicks than a hot wallet, but that friction is the point. Keep the unit offline when not signing, use a passphrase only if you understand its backup implications, and treat every address change as a risk to verify on the display. For buying or selling, the companion app routes actions through third-party providers; identity checks, availability, and terms come from the provider. For staking, rewards and lock-up rules depend on the network and validator, while keys remain on the device.
What Security Chip and PIN Protections Does Ledger Nano S Use?
Set an eight-digit PIN and store your recovery phrase offline; the embedded ST33J2M0 controller enforces that code before any key operation and erases the seed after three consecutive failures.
That certified tamper-resistant microcontroller holds the seed and private keys inside a hardened boundary, runs the PIN check internally, and never exposes those secrets over USB. It includes detectors for voltage, clock, and temperature manipulation, shields against side-channel leakage, and a true random number generator for seed creation. The PIN itself is not saved in plain form; it derives the key that decrypts the stored material. Because the controller limits attempts and wipes the memory after the third wrong entry, an attacker cannot brute-force the code on the device. Your recovery phrase remains the only backup, so a forgotten PIN means restoring from those words, not resetting the code through software.
Use a unique PIN, never the same as a bank card or phone lock, and verify every transaction on the screen.
Three failed tries wipe the unit.
How to Set Up a Ledger Nano S and Restore from Recovery Phrase
Initialize the unit through the official companion application, and never type your 24-word recovery phrase into a computer, phone, or website.
For first-time setup, download the companion app only from the manufacturer’s official domain, connect the unit via USB, choose a PIN, and write the generated 24 words on paper in the exact order shown on the unit’s screen. Confirm each word by pressing both buttons when prompted. The phrase is the only master backup; anyone who obtains it can move your digital assets without the PIN. Keep it offline, never photograph it, and never store it in cloud notes, email, or password managers. The app installs coin-specific applications onto the unit and creates accounts, while private keys remain inside the protected chip and every outgoing transaction must be approved on the unit’s display.
To restore on a replacement unit, select “Restore from recovery phrase” in the companion app, choose the correct word count (12, 18, or 24), and enter each word directly using the unit’s buttons. The app will rebuild the accounts; if you used an optional passphrase, you must enter the same passphrase after the 24 words, otherwise a different set of accounts appears. After restoration, verify receive addresses on the unit’s screen before sharing them.
If the phrase is lost, no support agent, app, or firmware update can recover the funds; only the paper backup works.
Which Coins and Tokens Are Supported by Ledger Nano S?
Check the official supported-assets directory and the companion application before sending value; coverage is not a fixed list. Support is defined by installable network applications, account types, and third-party integrations, so a unit that handles one asset under one application may require an additional application or a different account setup for another asset.
The physical signer stores keys for whichever network applications you install. Each application is built for a specific chain, and the companion software uses that application to create accounts, display balances, and prepare transfers. If an application is missing from the manager, the corresponding asset cannot be managed through that signer until the publisher releases and you install the appropriate application. This mechanism keeps private keys isolated, but it also means asset coverage is modular rather than universal.
Token support adds another layer. A network application may handle the native unit and a set of token standards, while other standards need separate account logic or a different integration. The companion application must recognize the token contract and derive a compatible account; the physical screen then shows the transfer details for confirmation. When a token is absent from the official asset directory, do not assume it is supported because a block explorer or exchange shows the address.
| Coverage area | What controls it | How to verify |
|---|---|---|
| Native coin | A network-specific application installed on the physical signer. | Official supported-assets directory and the companion application’s app catalog. |
| Tokens | Token standard, account type, and the companion application’s recognition of the contract. | Official asset directory plus a test transfer after account creation. |
| Account types | Derivation scheme used when the account is created. | Guided account creation flow in the companion application. |
| Smart-contract actions | Application’s ability to display and confirm contract data. | On-device screen before approval and manufacturer documentation. |
| Firmware and app versions | Installed releases and compatibility between the signer and companion software. | Official release notes and the update section of the companion application. |
| Third-party services | Provider or application rules for networks, tokens, and account types. | Provider’s compatibility page and manufacturer support articles. |
Use the table as a verification map, not as a permanent asset list. The only reliable source for supported coverage is the manufacturer’s official supported-assets page and the installable app catalog inside the companion application. Cross-check both before depositing, and test with a small amount first when a network or token is added.
Account type matters. Some chains use one derivation path for all accounts, while others separate legacy, segwit-style, and token accounts. Choosing the wrong account type can make a balance invisible in the companion application even though the keys remain on the signer. Create accounts through the companion application’s guided flow rather than importing addresses from elsewhere.
Third-party services can extend or restrict practical support. A swap, stake, or decentralized application may accept only certain networks, account types, or token standards. The signer can confirm a transaction, but the service decides whether it will prepare one. Verify the service’s own compatibility notes and the manufacturer’s support documentation; never rely on a social-media post or a lookalike domain for asset coverage.
How to Install and Manage Apps with Ledger Live on Ledger Nano S
Connect the signer, enter its PIN, open the companion app’s manager, and install or delete each app individually; keep free storage in mind, because the device holds only a few apps at once and removing one does not erase its accounts.
For daily management, plug the signer into a trusted computer or pair it over Bluetooth with the mobile build, authenticate with the device PIN, then launch the manager. The manager reads the firmware version and offers only apps compatible with that version; if an app is missing, update the firmware first, because an outdated system may block newer app packages. Each installed app occupies flash memory, so adding a large app may require removing another. To add an app, select it in the catalog, press the physical confirmation button, and wait until the progress bar finishes; the signer verifies the package signature before writing it. To remove an app, choose it from the installed list, confirm on the device screen, and note that associated accounts remain visible in the companion app with balances and history, but signing requires reinstalling the app. For account management, use the companion app to add accounts after installing the relevant app, rename them, and verify receive addresses on the signer screen before sharing. Never enter the recovery phrase into the companion app or any website; the phrase is restored only on the device itself. If an app fails to install, check the USB cable or Bluetooth pairing, free storage, and the official support pages for troubleshooting steps rather than trying random downloads.
How to Send, Receive, and Verify Crypto Addresses on Ledger Nano S
Confirm every destination address on the device screen before you approve a transfer.
Receive coins and verify the displayed address
- Open the companion application, select the account for the relevant network, and choose Receive.
- Connect and unlock the signer, then open the matching coin or token application on its screen.
- Compare the address shown by the application with the address shown on the signer; they must match in full.
- Share the address only after the signer displays it. If the network requires a memo, tag, or destination identifier, verify that value separately.
For incoming funds, the signer’s display is the source of truth. Do not copy an address from an email, chat, or browser extension without checking it on the device. For account-based networks, the same address can be reused, but a fresh receive address from the companion application is safer for privacy where the network supports it. For networks with memos or tags, an omitted or wrong identifier can delay or lose the deposit; confirm both the address and the identifier before sharing. If the signer shows a different address, stop and reconnect through the official companion application.
Send funds and check the address on the signer
- Paste the recipient address into the companion application, then read the full address on the signer’s screen in every chunk.
- Confirm the amount, network fee, and destination address on the device; reject any mismatch, even one character.
- For a large transfer, send a small test amount first, confirm it arrives, then send the remainder.
- Check that the receiving account supports the asset and network; a token sent to an incompatible address may be unrecoverable.
When sending, paste the recipient address into the companion application, then compare it character by character with the address shown on the signer. Clipboard malware can replace a copied address, so the signer’s screen is the final check. Verify every segment of the address, not only the first and last characters, because altered addresses often share the same beginning and ending. If the signer displays a different address, amount, or fee, reject the transaction and rebuild it. After approval, the signer signs the transfer with keys stored in its dedicated chip; the companion application only broadcasts the signed result. For contract-based tokens, confirm that the destination address matches the intended recipient and that the network is correct. Keep the recovery phrase offline and never enter it into the companion application, a website, or a chat. If an address cannot be verified on the signer, do not send funds until the connection, application, and account are checked against the manufacturer’s official instructions.
What to Do If Ledger Nano S Is Lost, Stolen, or Damaged?
If the unit is missing, restore your 24-word recovery phrase on a replacement signer from the official vendor, then sweep all balances to addresses derived from a new seed.
For a stolen unit, assume the PIN is the only barrier. Repeated wrong entries erase the device, but an unlocked unit or a known PIN lets a thief sign transactions. No remote wipe exists, and no company can freeze self-custody accounts. File a police report for the theft, then restore the phrase on a fresh device and move assets to a new seed; blockchain transfers are irreversible.
If the case, screen, button, or port is damaged, do not send the unit to a repair shop. The protected chip holds secrets that cannot be extracted by normal means, yet a third party may attempt invasive attacks or replace components. A cracked screen that still responds can sometimes sign one final transfer, but the safer route is to restore the recovery phrase on a replacement and send every balance to new addresses. A unit that no longer powers on is treated like a lost one: recovery depends entirely on the phrase, not on the broken body.
Enter the recovery phrase only on the replacement device’s own screen. Never type it into the companion application, a browser, an email, a chat, or a cloud note. If you used a passphrase, restore with the same passphrase; without it, those hidden accounts stay unreachable. After restoring, update the device software through the official application, install the needed asset apps, add accounts, verify each receive address on the device display, and send a small test amount before moving the full balance.
A damaged unit with no recovery phrase and no passphrase cannot be recovered by any service. Do not pay anyone who claims they can extract keys from the chip; such offers are scams. If the phrase is lost but the device still works, create a new seed immediately and move all assets while you still can.
Anyone who calls, messages, or emails asking for your 24 words is a thief. Official support never requests the phrase, PIN, or passphrase. Store the backup offline, ideally stamped into metal, in at least two separate locations. If the original unit is gone, order a replacement only from the manufacturer’s official site, and confirm the package and device display before entering anything. A missing, stolen, or broken signer is a logistics problem when the phrase is safe; it becomes permanent loss when the phrase is gone.
| Situation | First move | What to avoid | Recovery route |
|---|---|---|---|
| Unit lost, PIN unknown | Restore phrase on replacement; thief faces PIN lockout | Do not buy recovery services | New signer, same phrase or fresh seed if phrase exposed |
| Unit stolen, PIN known or unlocked | Move all assets to new seed from a safe replacement | Do not delay; no remote wipe | Restore phrase, send to fresh addresses |
| Case or screen broken, phrase available | Restore on replacement; use broken unit only if needed for one transfer | Do not use repair shops | New signer, verify addresses |
| Unit broken, phrase missing | No technical recovery; protect remaining accounts | Do not trust key-extraction offers | None; create new seed for future funds |
| Passphrase setup | Restore phrase plus exact passphrase | Do not guess or store passphrase online | Hidden accounts appear only with correct passphrase |
Q&A:
If my laptop has spyware, can it empty my Ledger Nano S wallet?
Spyware on your laptop can read files, watch keystrokes, and see addresses you copy. It cannot read the private keys stored inside the Nano S because those keys stay in the device’s secure element and are not exposed to the computer. The main risk is transaction tampering. Malware could replace a recipient address in the software wallet, hoping you approve the payment without checking the Nano S screen. The device shows the destination address and amount; you must compare them with what you intended. If they differ, reject the transaction. Also keep the PIN private, install firmware updates only through Ledger Live, and never type your 24-word recovery phrase into the laptop. With those habits, spyware is a nuisance but not a direct key thief.
What happens if I lose my Nano S or it breaks? Are my coins gone?
Your coins are not stored on the Nano S. The blockchain records ownership, and the device holds the private keys that let you control those coins. If the device is lost, stolen, or damaged, you can restore access with the 24-word recovery phrase on another Ledger device or a compatible wallet. The phrase is the real backup. Without it, the funds tied to that wallet remain inaccessible. If someone finds the device alone, they still need your PIN. After several wrong PIN entries, many Ledger devices wipe themselves. That does not delete the blockchain balances; it only removes the keys from that device. Your recovery phrase can still rebuild them. Because of this, keep the phrase offline, private, and separate from the device. Do not store it in email, cloud notes, photos, or a password manager. A paper or metal backup in a secure location is common.
Does Ledger Nano S support every cryptocurrency and token?
No. The Nano S works with a large list of assets, but support is not universal. Ledger Live manages many major coins and tokens, including Bitcoin, Ethereum, and many ERC-20 tokens. Other networks may need third-party wallets that connect to the Ledger device. The Nano S also has limited memory, so you may need to install and remove coin apps when switching between assets. Your private keys and recovery phrase remain the same. Before buying, check Ledger’s official supported assets page for the specific coin, token, and network you plan to use. If an asset is not supported, the Nano S cannot sign transactions for it.
Is the Nano S outdated? Should I buy the Nano S Plus or Nano X instead?
The Nano S is older, but it still performs the core job: keeping private keys offline and requiring on-device confirmation for transactions. It has a small screen, no battery, no Bluetooth, and less memory than newer models. That memory limit matters if you use many different coin apps at the same time. The Nano S Plus has more storage and a larger screen, but no Bluetooth. The Nano X adds Bluetooth and a battery for mobile use. Choose based on your habits. If you hold Bitcoin and Ethereum, use a desktop, and do not mind installing apps as needed, the Nano S can be enough. If you use many chains, want a bigger screen, or prefer mobile signing, the Plus or X is easier to live with. Buy from Ledger or an authorized reseller to avoid tampered devices.
Why is the 24-word recovery phrase so dangerous to store digitally?
The 24-word recovery phrase can rebuild every private key in your wallet. Anyone who reads it can restore the wallet on another device and send the funds without needing your Nano S or PIN. That makes digital storage risky. Phones, laptops, cloud drives, password managers, email drafts, screenshots, and chat apps can be hacked, synced, backed up, or viewed by someone you trust. A photo of the words is enough. Use an offline backup. Paper works, but it can burn, flood, or fade. Metal backups survive more damage. Store the backup in a private, secure place, and consider a second copy in a separate location. Never enter the phrase into a website, browser extension, or software wallet. Ledger support will not ask for it. If anyone does, treat it as a theft attempt.
What happens if I lose my Ledger Nano S or forget my PIN? Can I still get my crypto back?
If you lose the Nano S, a thief cannot move your crypto unless they also know your PIN. After three wrong PIN entries, the device wipes itself. But your funds are not stored on the device; they are on the blockchain. The Nano S only holds the private keys that control them. To restore access, you need the 24-word recovery phrase you wrote down when you first set up the wallet. With that phrase, you can restore your accounts on another Ledger device or a compatible wallet. Without the phrase, no one, including Ledger, can recover the crypto. If you forget your PIN but still have the device, you can enter the wrong PIN three times to reset it, then restore using the recovery phrase. Keep the phrase offline, on paper or metal, and never type it into a computer, phone, website, or chat. Never share it with anyone. Anyone who has the phrase can spend your funds.
Is the Ledger Nano S safe if my computer has malware?
The Nano S is built so private keys stay inside its secure element and never go to your computer. A transaction must be approved on the device screen with its buttons. If malware changes a destination address or amount in your wallet software, you should see the difference on the Nano S before you confirm. Malware can still try to trick you: it might swap a copied address, show a fake Ledger Live window, or send you to a phishing site that asks for your 24-word recovery phrase. Ledger will never ask for that phrase. Check the address and amount on the device screen, download Ledger Live only from Ledger’s official site, and ignore any message requesting your recovery phrase. A compromised computer adds risk, but it cannot silently extract your keys from the Nano S.