FAQ
Common questions · Quick answers {pboot:if('YueQianBao — independent Ledger English service hub (not official). Focused on three things: verifying the official portal, comparing models, and following usage guides; with seed/PIN safety and phishing awareness.'!='')}YueQianBao — independent Ledger English service hub (not official). Focused on three things: verifying the official portal, comparing models, and following usage guides; with seed/PIN safety and phishing awareness.
{/pboot:if}Ledger FAQ — Safety and Usage Essentials
Overview: What are the essential safety and usage points in the Ledger FAQ?
Key takeaway: Follow the official guidance, and make sure your environment and the information source are trustworthy before you act.
Points / steps:
- Step through the connection and version checks in order.
- Protect your recovery phrase and PIN.
Safety reminder: Never enter your recovery phrase or PIN into software or websites; trust only the domain ledger.com and official apps, and if anything looks suspicious, stop immediately, disconnect, and migrate assets with a new recovery phrase.
Extra tip: Keep photos of the seals and serial number, record the channel and time of purchase, and contact official support the moment anything looks off.
Can Ledger Be Hacked Remotely or Assets Moved Behind the Scenes?
Overview: Can hackers remotely break into Ledger or move funds out behind the scenes?
Key takeaway: Ledger assets stay in user self-custody. Keep to official channels, keep the private key offline, protect the recovery phrase, and migrate at the first sign of trouble.
Points / steps:
- Confirm that the private key never leaves the device — no attacker can read it remotely.
- Keep firmware up to date so known vulnerabilities are patched.
- Reject unknown plug-ins or remote-control software that could hijack the UI.
- Verify the address and amount on the device screen before signing.
- If you suspect an attack, disconnect immediately and migrate assets under a fresh recovery phrase.
Safety reminder: Never enter your recovery phrase or PIN into software or websites; trust only the domain ledger.com and official apps, and if anything looks suspicious, stop immediately, disconnect, and migrate assets with a new recovery phrase.
Could Ledger Walk Away or Remotely Freeze Your Assets?
Overview: Could Ledger as a company walk away or remotely freeze user assets?
Key takeaway: Ledger doesn't custody your private keys. The company cannot touch or freeze user assets — as long as your recovery phrase is safe, you can restore funds in any compatible wallet.
Points / steps:
- Recognise that you hold the private key; no company has authority to move or freeze it.
- Back up your recovery phrase and periodically verify that it still restores correctly.
- If you ever worry about brand risk, run a recovery test on another compatible wallet using the recovery phrase.
- Keep firmware and apps updated so a lack of support doesn't leave security gaps.
- If you see rumours or fake support, don't type your recovery phrase anywhere — verify through official channels.
Safety reminder: The real risk is on the user side — leaking the recovery phrase or trusting a fake support rep. A company shutdown doesn't affect on-chain assets, but a leaked phrase means instant loss of control.
What Are the Most Common Ledger Misconceptions?
Overview: What are the key points to address around common misconceptions about Ledger?
Key takeaway: Follow the official guidance, and make sure your environment and the information source are trustworthy before you act.
Points / steps:
- Step through the connection and version checks in order.
- Protect your recovery phrase and PIN.
Safety reminder: Never enter your recovery phrase or PIN into software or websites; trust only the domain ledger.com and official apps, and if anything looks suspicious, stop immediately, disconnect, and migrate assets with a new recovery phrase.
Extra tip: Keep photos of the seals and serial number, record the channel and time of purchase, and contact official support the moment anything looks off.
Beginner Ledger Questions — a Round-up
Overview: What are the key points newcomers to Ledger typically ask about?
Key takeaway: Follow the official guidance, and make sure your environment and the information source are trustworthy before you act.
Points / steps:
- Step through the connection and version checks in order.
- Protect your recovery phrase and PIN.
Safety reminder: Never enter your recovery phrase or PIN into software or websites; trust only the domain ledger.com and official apps, and if anything looks suspicious, stop immediately, disconnect, and migrate assets with a new recovery phrase.
Extra tip: Keep photos of the seals and serial number, record the channel and time of purchase, and contact official support the moment anything looks off.
What Are the Risks of Using Ledger on a Public Computer?
Overview: What risks should you be aware of when using Ledger on a public computer?
Key takeaway: Ledger assets stay in user self-custody. Keep to official channels, keep the private key offline, protect the recovery phrase, and migrate at the first sign of trouble.
Points / steps:
- Avoid transfers or firmware updates on public computers.
- If you must connect, view balances only, and clear caches afterwards.
- Don't plug into unknown USB devices or charging ports in public environments.
- Disconnect immediately when done and check for anomalous prompts.
- Reconfirm account balances later on a trusted device.
Safety reminder: Never enter your recovery phrase or PIN into software or websites; trust only the domain ledger.com and official apps, and if anything looks suspicious, stop immediately, disconnect, and migrate assets with a new recovery phrase.
Does Ledger Need to Be Online All the Time? Does It Affect Security?
Overview: Does Ledger need to be online at all times, and does that affect its security?
Key takeaway: Signing happens offline on the device itself. The computer only goes online to broadcast and sync, so you don't need a constant connection — security hinges on official channels and device verification.
Points / steps:
- Always verify the address and amount on the device screen before signing — signing doesn't depend on network security.
- Only open Ledger Live on a trusted network; once sync is done you can disconnect for offline signing and delayed broadcast.
- If the network is unstable, sign offline, export the signed transaction, and broadcast it from a safer device.
- Update firmware and apps regularly, but never while connected to public Wi-Fi.
- If you see a suspicious prompt or anything asking for your recovery phrase, disconnect immediately and stop.
Safety reminder: The network is only for broadcast and sync — the private key never leaves the device. Do not update firmware or enter sensitive info on public or untrusted networks.
Which Coins Does Ledger Support, and What to Watch When Adding New Ones?
Overview: Which coins does Ledger support, and what should you watch for when adding a new one?
Key takeaway: Ledger assets stay in user self-custody. Keep to official channels, keep the private key offline, protect the recovery phrase, and migrate at the first sign of trouble.
Points / steps:
- Confirm the target coin on the official supported-coin list.
- Install the matching app if needed and keep firmware up to date.
- When adding an account, verify the address on the device screen.
- For unsupported coins, use watch-only mode in a compatible wallet.
- If you see an 'unsupported' prompt, never import the recovery phrase into a third-party site.
Safety reminder: Never enter your recovery phrase or PIN into software or websites; trust only the domain ledger.com and official apps, and if anything looks suspicious, stop immediately, disconnect, and migrate assets with a new recovery phrase.
Does Ledger Live Upload Private Keys or Collect Private Data?
Overview: Does Ledger Live upload the private key or collect user privacy data?
Key takeaway: Ledger assets stay in user self-custody. Keep to official channels, keep the private key offline, protect the recovery phrase, and migrate at the first sign of trouble.
Points / steps:
- Use official hardware with Ledger Live; keep firmware and apps on their official versions.
- Never enter the recovery phrase or PIN on a computer or webpage — the private key must stay on the device.
- Download and seek support only from ledger.com and the official Ledger Live app; reject unfamiliar links.
- If you see a suspicious prompt or an unexpected balance, disconnect, pause, and verify against the device screen.
- If needed, rotate to a new recovery phrase, migrate assets, preserve evidence, and contact official support.
Safety reminder: Never enter your recovery phrase or PIN into software or websites; trust only the domain ledger.com and official apps, and if anything looks suspicious, stop immediately, disconnect, and migrate assets with a new recovery phrase.
Does Closed-source Firmware Mean Ledger Isn't Secure?
Overview: Does Ledger's closed-source firmware mean the product isn't secure?
Key takeaway: Ledger assets stay in user self-custody. Keep to official channels, keep the private key offline, protect the recovery phrase, and migrate at the first sign of trouble.
Points / steps:
- Use official hardware with Ledger Live; keep firmware and apps on their official versions.
- Never enter the recovery phrase or PIN on a computer or webpage — the private key must stay on the device.
- Download and seek support only from ledger.com and the official Ledger Live app; reject unfamiliar links.
- If you see a suspicious prompt or an unexpected balance, disconnect, pause, and verify against the device screen.
- If needed, rotate to a new recovery phrase, migrate assets, preserve evidence, and contact official support.
Safety reminder: Never enter your recovery phrase or PIN into software or websites; trust only the domain ledger.com and official apps, and if anything looks suspicious, stop immediately, disconnect, and migrate assets with a new recovery phrase.
Why Ledger Will Never Ask You to Type Your Recovery Phrase on a Computer
Overview: Why does Ledger never require you to enter your recovery phrase on a computer?
Key takeaway: Any request for your recovery phrase or PIN is a scam — the private key is generated and used only inside the device.
Points / steps:
- Use official hardware with Ledger Live, and keep firmware and apps on their official versions.
- Never enter the recovery phrase or PIN on a computer or webpage — the private key must stay on the device.
- Download and seek support only from ledger.com and the official Ledger Live app; reject unfamiliar links.
- If you see a suspicious prompt or an unexpected balance, disconnect, pause, and verify against the device screen.
- If needed, rotate to a new recovery phrase, migrate assets, preserve evidence, and contact official support.
Safety reminder: Never enter your recovery phrase or PIN into software or websites; trust only the domain ledger.com and official apps, and if anything looks suspicious, stop immediately, disconnect, and migrate assets with a new recovery phrase.
If the Device Is Lost, Are My Assets Gone? What Should I Do?
Overview: If you lose the device, are your assets lost, and what should you do?
Key takeaway: Ledger assets stay in user self-custody. Keep to official channels, keep the private key offline, protect the recovery phrase, and migrate at the first sign of trouble.
Points / steps:
- Confirm your recovery phrase is safe and intact — never type it into an online device.
- In a trusted environment, restore it onto a new device.
- After restoring, set a new PIN and verify address and balance.
- If the original device turns up later, reset it before reusing it.
- Update your recovery plan with the new device and backup locations.
Safety reminder: Never enter your recovery phrase or PIN into software or websites; trust only the domain ledger.com and official apps, and if anything looks suspicious, stop immediately, disconnect, and migrate assets with a new recovery phrase.
Can You Sign and Send Transactions Offline?
Overview: Is it possible to sign and send transactions while offline?
Key takeaway: Yes. Signing happens offline on the device, and you can export the signed transaction for broadcast from an online machine — what matters is keeping the private key on the device.
Points / steps:
- Prepare and verify the transaction data on a trusted device or network.
- Send the unsigned data to the Ledger device and sign offline.
- Export the signed transaction (no private key leaves the device).
- Broadcast the transaction from a trusted online device.
- Never type your recovery phrase into any software or website during this process.
Safety reminder: Make sure the broadcasting device is trusted. Avoid importing signed transactions on public machines — keeping the signing step fully offline is safest.
Is It Safe to Use a Browser Extension to Connect to Ledger?
Overview: Is it safe to connect Ledger through a browser wallet extension?
Key takeaway: Ledger assets stay in user self-custody. Keep to official channels, keep the private key offline, protect the recovery phrase, and migrate at the first sign of trouble.
Points / steps:
- Only use officially supported wallet extensions; avoid unknown plug-ins.
- Verify the signing payload on the device screen — confirm both address and amount.
- Disable suspicious extensions and clear the cache before reconnecting.
- Never type the recovery phrase into any extension UI; keep signing on the device.
- Update the browser and extensions regularly to reduce known vulnerabilities.
Safety reminder: Never enter your recovery phrase or PIN into software or websites; trust only the domain ledger.com and official apps, and if anything looks suspicious, stop immediately, disconnect, and migrate assets with a new recovery phrase.
Can You Use a Second-hand or Gifted Ledger? What Are the Risks?
Overview: Can you use a second-hand or gifted Ledger, and what are the risks?
Key takeaway: For any high-risk channel, always perform a fresh initialisation and verify the seals and serial number — if you're not fully confident, return the unit and switch to the official channel.
Points / steps:
- Use official hardware with Ledger Live; keep firmware and apps on their official versions.
- Never enter the recovery phrase or PIN on a computer or webpage — the private key must stay on the device.
- Download and seek support only from ledger.com and the official Ledger Live app; reject unfamiliar links.
- If you see a suspicious prompt or an unexpected balance, disconnect, pause, and verify against the device screen.
- If needed, rotate to a new recovery phrase, migrate assets, preserve evidence, and contact official support.
Safety reminder: Never enter your recovery phrase or PIN into software or websites; trust only the domain ledger.com and official apps, and if anything looks suspicious, stop immediately, disconnect, and migrate assets with a new recovery phrase.
