Guide

How to Safely Update Hardware Wallet Firmware: A Security Guide for Ledger and Trezor

Featured short answer

Related Guides

Things to Consider When Buying a Cold Wallet
How to Back Up a Crypto Wallet?
What Are Crypto Wallet Recovery Phrases?

A hardware wallet firmware update is a software upgrade performed to update the device’s security patches, add support for new coins, fix bugs, and ensure app compatibility.

If done securely, it is a routine maintenance procedure. However, the following three mistakes pose serious risks:

Updating without verifying the seed phrase backup.
Using a fake app instead of Ledger Live or Trezor Suite.
Writing down your seed phrase on a computer, phone, website, or to a support representative during the update.

Who is this guide for?

This guide is for:

Users of the Ledger Nano S Plus, Ledger Nano X, Ledger Stax, or Ledger Flex,
Users of Trezor Model One, Model T, and Safe series devices,
Those who see the “Firmware update available” notification,
Those who haven’t updated their hardware wallet in a long time,
those wondering if their seed phrase backup is correct before updating,
those afraid their device will be reset during the update,
those who want to protect themselves from fake Ledger Live or Trezor Suite apps,
those who receive warnings such as “bootloader mode,” “unofficial firmware,” “update failed,” or “device reset,”
and those who use a hardware wallet for long-term storage

this guide is for you.

Critical Risk Warning

The real danger during a hardware wallet firmware update is often not the update itself, but fraud carried out under the guise of an update.

The following requests are signs of a scam:

“Enter the 24-word recovery phrase for the firmware update.”
“Ledger Live has encountered an error; please verify using your seed phrase.”
“Trezor Suite won’t open; enter your recovery words into the form.”
“A private key is required to synchronize the device.”
“Let us perform the update via a remote connection.”
“Send the wallet activation fee for the new firmware.”
“Read your recovery words during screen sharing.”

The official update process does not require you to enter your seed phrase to a support representative, via a web form, by email, through a Telegram bot, or in a desktop application.

What is firmware?

Firmware is the low-level software that runs inside a hardware wallet.

A hardware wallet is not just a USB drive. It contains:

secure key generation,
transaction signing,
PIN verification,
screen verification,
application execution,
coin support,
security policies

On the Ledger side, this process is referred to as a “Ledger OS update” or a device firmware update; on the Trezor side, it appears as a firmware update via Trezor Suite.

Why are firmware updates performed?

1. Security patches

The manufacturer can address security vulnerabilities in the device’s software.

2. Application compatibility

Ledger Live, Trezor Suite, MetaMask, or other wallet interfaces may require the latest firmware.

3. Support for new coins and networks

A firmware update may be required for new applications, address types, or transaction formats.

4. Bug fixes

Errors related to connectivity, signing, the display, coin applications, or transaction visualization may be fixed.

5. Performance and user experience

Menus, on-screen alerts, or the transaction confirmation flow may be improved.

6. End of Support for Older Firmware

Devices that haven’t been updated for a long time may become incompatible with new app versions.

Does a firmware update delete coins?

Coins are not stored on the device; they are recorded at addresses on the relevant blockchain.

Hardware wallet:

securely stores the private key,
signs transactions,
generates addresses,
and displays transaction details to the user.

A firmware update does not normally delete coins on the blockchain. However, if the device is reset during the update, you will need your seed phrase backup to use the same wallet again.

The most important check before updating: Your seed phrase backup

Before starting the firmware update, ensure your seed phrase backup is:

complete,
in the correct order,
legible,
accessible,
protected against fire, water, and loss,
and stored in a manner inaccessible to others

What should you do if you don’t have a backup?

If you do not have a backup of your seed phrase, stop before starting the firmware update.

If the device still turns on and you can access the wallet:

Set up a new and secure hardware or software wallet.
Generate a new seed phrase.
Store the new backup securely.
Transfer the assets from the old device to the new wallet.
Only then should you update or reset the old device.

How do you verify the backup?

You can use the manufacturers’ official backup verification tools:

Methods similar to Recovery Check, which run on the device within the Ledger ecosystem,
and "dry-run recovery" on the Trezor side.

Do not “verify” your seed phrase by entering it on a website.

Does a firmware update require your seed phrase?

A normal firmware update should not require you to enter your seed phrase on a computer.

In some cases, the update may fail, the device may reset, or a recovery process may be required. In such a situation, you may need to restore the wallet using your seed phrase.

Safe usage

Seed phrase:

on the hardware wallet’s own screen,
using the device’s physical buttons,
as part of the official recovery process

Dangerous usage

Seed phrase:

on a computer keyboard,
a phone screen,
on a website,
a fake Ledger Live app,
a fake Trezor Suite app,
Google Forms,
a Telegram support bot

How do you verify the official app?

For Ledger,

Download the Ledger app only from the official Ledger website or a verified app store page.

Check:

Is the domain name correct?
is the app name up to date,
did the downloaded file come from an ad link,
did you type the address yourself instead of clicking an email link,
Is your device going through the "genuine check" process in the official app,
Does the app not ask for a seed phrase?

For Trezor

Download Trezor Suite only from the official Trezor website or use the official web interface.

Check:

Is the domain name correct?
is the app the official Trezor Suite,
does the firmware notification appear within the app,
Are the expected confirmation details displayed on the device screen?
Does the app ask you to write down your seed phrase on your computer?

Be wary of search engine ads

The safest method:

Manually type the manufacturer’s domain name.
Add it to your bookmarks.
Open the download link from there.
Do not update via links in emails or private messages.

Preparations to make before updating the firmware

1. Locate your seed phrase backup

Don’t start searching for your backup on the day of the update.

2. Verify that the backup belongs to the correct device

If you have multiple hardware wallets, you might mistake the wrong seed phrase for the correct one.

Ledger Nano X - Main Wallet - 2024 Trezor Safe 3 - BTC Vault - 2025 Test Wallet - Do Not Use

3. Perform a quick access test

Verify that basic operations—such as viewing addresses, signing small transactions, and checking your balance—work properly.

4. Clean up your computer

The operating system must be up to date,
a security scan must be performed,
unknown browser extensions should be disabled,
remote access applications must be disabled,
screen sharing should not be enabled,
there should be no fake wallet apps.

5. Check the USB cable and connection

Use a high-quality cable.
Connect directly to the computer instead of using a USB hub.
Make sure the laptop is plugged into a power source.
Do not disconnect the device during the update.

6. Update the official app

First, make sure you are using the latest official version of Ledger Live/Ledger Wallet or Trezor Suite.

7. Do not plan urgent transactions

Do not perform the update immediately before a large transfer. First, perform the update, check the device, and run a small test; then carry out the large transaction.

How do I safely update my Ledger firmware?

Open the official Ledger app.
Update the app.
Verify your seed phrase backup.
Connect the device and enter the PIN on the device.
Verify that the app recognizes the device and that the genuine check was successful.
Read the firmware/OS update notes.
Follow the prompts on the device screen.
Start the update; do not disconnect the cable.
If necessary, reinstall the coin apps.
Verify the old purchase address on the device screen.
Perform a small test transaction.

Reinstalling the crypto apps does not mean your coins have been deleted.

How do I safely update Trezor firmware?

Open Trezor Suite from the official source.
Connect the device.
Verify that the wallet backup is accessible.
Read the firmware notification.
Confirm the information on the device screen.
Start the update; do not disconnect.
Check your accounts and addresses after the update.
If a passphrase is used, open the correct hidden wallet.
If the device has been reset, use the official recovery process.

What should you do if the device resets during the update?

Don’t panic; your coins haven’t been removed from the blockchain.
Prepare your seed phrase backup.
Use the official wallet restore/recovery process.
If you’re using a passphrase, enter the exact same passphrase.
Re-add your coin accounts in the app.
Compare the old public addresses with the new ones displayed.
Perform a small test before making a large transaction.

If the addresses do not match, there is a possibility of an incorrect seed, an incorrect passphrase, a different account, or a different derivation path.

What should you do if the update fails?

The device is stuck in bootloader mode

Check the cable and the USB port.
Reopen the official app.
Follow the manufacturer’s official bootloader/firmware reinstallation instructions.
Do not write the seed phrase to the computer.
If the issue persists, open an official support ticket.

The app doesn’t recognize the device

Does the cable support data transfer?
Try a different USB port.
Restart the app.
Is the device unlocked?
Have the necessary operating system permissions been granted?
Is another wallet app using the connection?

The update was interrupted

Do not reset the device randomly. Follow the manufacturer’s official recovery and firmware reinstallation instructions.

The device is asking for the seed phrase

The device may have been completely reset. First, make sure the app is official, and only use the words within the secure flow of the hardware device.

Balances are not showing

Possible causes:

coin apps have not been reinstalled,
accounts haven’t been re-added,
the passphrase is incorrect,
the hidden wallet hasn’t been opened,
incorrect seed phrase,
network or token visibility is missing,
synchronization issue.

How can you tell if a firmware update is fake?

The update email redirects to an unknown domain.
The app asks you to enter your seed phrase using your computer’s keyboard.
It says, “Your wallet is locked; verify with the 24-word recovery phrase.”
You are asked to download an APK for the update.
A support representative establishes a remote connection.
The app interface looks genuine, but the domain name is different.
It says, “Send money to sync the wallet.”
The expected confirmation messages do not appear on the device screen.
An app downloaded from a social media ad is being used.

How can you safely boot a device that hasn’t been updated in a long time?

Find the location of your seed phrase backup.
Check that the backup is readable.
Download the latest version of the official app.
Connect the device.
Check if the app recognizes the device.
If a firmware update is required, check the backup first.
Add accounts after the update.
Verify the old addresses.
Perform a small test.
Don’t rush into large transactions.

If there is no backup, transfer your assets to a new, verified wallet while the device is still operational.

Special warning for those using a passphrase

No passphrase → Wallet A Passphrase present → Wallet B Different passphrase → Wallet C

Before the update, check whether you use a passphrase, its exact spelling, spacing, and case sensitivity, and—if it’s linked to a PIN—which PIN is used.

Post-update checklist

Does the device turn on normally?
Does the PIN work?
Does the app recognize the device?
Are the Coin apps installed?
Have the accounts been re-added?
Is the old public address the same?
Does the hardware device display the correct address on the screen?
If there is a passphrase, did the correct hidden wallet open?
Can a small test transfer be made?
Are the token and NFT balances displayed on the correct network?

Practical Scenarios

Scenario 1: Ledger Live asks for the seed phrase after an update

Close the app.
Disconnect from the internet.
Check the app’s source.
Perform a clean installation from the official Ledger website.
Scan your computer for malware.
If you’ve written down your seed phrase, assume your wallet has been compromised.
Create a new wallet on a clean device and transfer your assets.

Scenario 2: No backup before the Trezor firmware update

Postpone the update. Create a new, secure wallet, verify the new backup, and transfer your assets from the old device.

Scenario 3: Accounts are not visible after the update

Coin accounts may not have been re-added, the passphrase may have been forgotten, an incorrect seed phrase may have been entered, or the app may not have synced. Check the old public address on an explorer.

Scenario 4: Device displays an “unofficial firmware” warning

Do not send funds to the device. Open the official app and support documentation. Do not use a device obtained from a second-hand or suspicious source.

Scenario 5: Connection was lost during the update

Do not reset the device randomly. Reopen the official app, change the cable or port, and follow the manufacturer’s firmware recovery instructions.

Troubleshooting table

Security checklist

☐ I have a backup of my seed phrase.
☐ I know the backup belongs to the correct device.
☐ I did not write the backup down anywhere online.
☐ I used the official Ledger/Trezor app.
☐ I did not download the app from a search engine ad.
☐ I checked my computer before the update.
☐ I turned off remote access and screen sharing.
☐ I used a high-quality USB cable.
☐ I did not disconnect the device during the update.
☐ I read the prompts on the device’s screen.
☐ I verified the addresses after the update.
☐ If I use a passphrase, I opened the correct hidden wallet.
☐ I reinstalled the coin apps.
☐ I performed a small test transaction.
☐ I stopped the process when a fake app asked for a seed.
☐ If there was no backup, I postponed the update.
☐ I transferred my assets to a secure wallet before resetting my old device.

Frequently Asked Questions

Will the firmware update delete my coins?

No. Coins are recorded on the blockchain. However, if the device is reset, you’ll need a backup of your seed phrase to access the same wallet.

Is a seed phrase required before the firmware update?

The update normally does not require you to enter your seed phrase on the computer. However, if the update causes issues, you may need the backup to recover the device.

Does the Ledger update require a seed phrase?

The official update process should not ask you to enter your seed phrase on a computer or on the app screen.

What should be done before a Trezor firmware update?

Make sure your wallet backup is accessible and accurate.

What happens if the device resets during the update?

The wallet can be restored using the correct seed phrase and, if applicable, the correct passphrase.

Can I write the seed phrase on my computer?

No. The seed phrase must be used in the hardware device’s secure recovery process.

How can you tell if Ledger Live is fake?

Requesting a seed phrase, being downloaded from an unknown domain, coming from an ad link, and displaying unusual error messages are red flags.

Should I update the firmware if I don’t have a backup?

No. If the device is reset, you may lose access to your funds.

If my crypto apps were deleted after a firmware update, are my coins gone?

No. You may need to reinstall the coin apps; your assets are on the blockchain.

If I use a passphrase, what should I watch out for after the update?

You must enter the exact same passphrase. Differences in uppercase/lowercase letters, spaces, and punctuation may open a different wallet.

Is the “unofficial firmware” warning safe?

This is a serious warning. Do not send funds until the official firmware has been verified.

Conclusion

Hardware wallet firmware updates are a normal part of a secure storage plan. However, if performed without verifying a backup, using a fake app, or in a panic, they can pose serious risks.

The safest approach:

Locate your seed phrase backup.
Verify that the backup belongs to the correct device.
Use the official Ledger or Trezor app.
Do not type your seed phrase into the computer during the update.
Read the warnings on the device’s screen.
Check your addresses and accounts after the update.
Do not initiate a high-value transfer without first performing a small test transaction.