How to Set Up a Crypto Wallet — Step by Step

To set up a crypto wallet safely: choose the wallet type for the amount you will hold, install it only from the maker's official site, write the recovery phrase on paper and nowhere else, confirm the backup, and send a small test amount before anything significant. The whole process takes about half an hour for a software wallet. This guide walks through each step using MetaMask as the example, explains when a hardware wallet is the better choice, and lists the mistakes that cause permanent losses.

Setting up a crypto wallet correctly is the most important security step you will take. One mistake (photographing your seed phrase, buying a hardware wallet from a third party, entering your phrase on a phishing site) can result in permanent, unrecoverable loss of funds.

Step 1: Choose your wallet type

| | Software wallet (MetaMask, Phantom) | Hardware wallet (Ledger, Trezor, Tangem) | |---|---|---| | Cost | Free | A one-off purchase; check the maker's current price | | Where the keys live | Encrypted on your phone or computer | On a dedicated device that signs offline | | Exposure | Connected to the internet, so permanently exposed to online threats | Keys never leave the device | | Suits | Small amounts and active DeFi use | Larger holdings and long-term storage |

Decision rule: if you are holding more than one month's salary in crypto, get a hardware wallet. For getting started with small amounts, MetaMask is fine. The trade-offs are covered in more depth in hot wallet vs cold wallet and our best crypto wallets guide.

This tutorial covers MetaMask setup. For hardware wallet setup, follow the official Ledger, Trezor or Tangem guide directly from their websites, and buy the device only from the maker or an authorised reseller.

Step 2: Download from the official source only

Go directly to metamask.io; do not search "MetaMask download" and click an ad. Phishing sites that clone MetaMask's interface are among the most common crypto scams.

MetaMask's own support pages say the browser extension is available for Chrome, Firefox, Edge and Brave, installed via "Get MetaMask" on metamask.io, and that on mobile you should use the App Store or Google Play and "Be VERY CAREFUL that you don't install a fake MetaMask app", checking for the official app with 10M+ downloads (MetaMask support). In Brave, set the browser's built-in wallet default to "None" if MetaMask does not appear.

Step 3: Create a new wallet

Open MetaMask and select "Create a new wallet." Set a strong password; this protects the wallet on this specific device. This password alone does not protect your funds; the seed phrase does.

MetaMask will display your Secret Recovery Phrase: 12 words in a specific order. This is the master key to your wallet. Anyone who has these 12 words has complete access to your funds on any device, forever. MetaMask's support page puts it bluntly: "DO NOT share this phrase with anyone!", and states that MetaMask cannot retrieve it for you if it is lost (MetaMask support).

Step 4: Write down your seed phrase (offline only)

Write the 12 words on paper, in order, with the number of each word. Do not:

Type it anywhere

Photograph it

Copy it into a notes app, password manager, or email

Store it in the cloud in any form

If it ever touches the internet, even briefly, assume it is compromised.

Write it twice, on two separate pieces of paper. Store copies in two different physical locations (home and a trusted family member's home, for example). Consider a metal seed phrase backup for fire and water resistance. Why the phrase is safe from guessing but not from being seen is explained, with the arithmetic, in our wallet security guide.

Step 5: Verify your seed phrase backup

MetaMask will ask you to confirm your seed phrase by selecting the words in the correct order. Do not skip this. It confirms you wrote it down correctly.

Afterwards you can view the phrase again only through the settings, behind your password. In the extension, MetaMask's current path is Settings > Security and password > Manage wallet recovery, then Reveal; on mobile it is Settings > Security and privacy > Reveal Secret Recovery Phrase (MetaMask support). Only ever do this on your own device, offline from prying eyes, and never because a message asked you to.

Step 6: Set up 2FA on connected exchanges

Your wallet is now set up. The next vulnerability is your exchange account, where you buy crypto before sending it to your wallet.

Enable 2FA on your exchange account using an authenticator app (Authy or Google Authenticator). Never use SMS 2FA; it is vulnerable to SIM-swapping.

Use a unique, strong password on every exchange account. NordPass generates and stores strong passwords securely.

Step 7: Test with a small transaction

Before moving significant funds, test the wallet with a small amount: 1. Copy your MetaMask wallet address (the 0x... string) 2. Send a small amount (€5-10 worth) from your exchange to the wallet address, on a network your exchange and MetaMask both support 3. Confirm it arrives in MetaMask

Triple-check the address before sending: compare the first and the last several characters with the source, and never copy an address from your transaction history, where scammers plant look-alikes (address poisoning explained). Crypto transactions are irreversible. If you send to the wrong address, the funds are gone.

Worked example. Suppose the exchange charges a flat withdrawal fee that is the same for any amount. A 10 euro test transfer pays that fee once more than sending everything in one go; it buys you proof that the address, the network and the wallet all work before 1,000 euros or more depend on them. On networks where the fee is high, choose a cheaper supported network for the test and the real transfer alike; crypto trading fees explained covers withdrawal costs.

Once the test transaction confirms successfully, you know your wallet is set up correctly. For the full off-exchange move, follow how to move crypto to self-custody.

For enhanced security on all your crypto accounts, use a VPN (NordVPN) on public WiFi and keep your operating system and browser updated.

Frequently asked questions

How should you store a crypto wallet seed phrase safely? Write your 12 words on paper, in order, with the number of each word. Do not type it, photograph it, or store it in the cloud. Write it twice on separate pieces of paper and store copies in two different physical locations. You can also consider a metal seed phrase backup.

Can MetaMask recover my seed phrase if I lose it? No. MetaMask states that managing the Secret Recovery Phrase is your responsibility and that it cannot retrieve it if lost. Without the phrase, a wallet on a lost or wiped device cannot be restored.

Why should you avoid SMS 2FA on crypto exchange accounts? SMS codes can be intercepted through SIM-swapping. Use an authenticator app such as Authy or Google Authenticator instead, and a unique, strong password on every exchange account.

How do you test a new crypto wallet before transferring funds? Copy your MetaMask address and send €5-10 worth from your exchange on a supported network, then confirm it arrives. Crypto transactions are irreversible, so check the address characters against the source before sending any crypto.

Do I need a hardware wallet? For small amounts used in DeFi, a software wallet is reasonable. Once you hold more than you would be comfortable losing, roughly more than a month's salary, a hardware wallet keeps the keys offline and is the safer choice.

Capital at risk. This is general information, not financial advice.