How to Set Up a OneKey Hardware Wallet Safely: Step by Step
From unboxing to your first transfer: what to do, what to check on the device screen, and which mistakes cost money. The first setup takes about 30 to 40 minutes.
6 min read · Updated: 2026-10-20
In short
We have an affiliate link to OneKey. We describe the upsides and the risks honestly, but keep that interest in mind.
- Buy only from the official site or an authorized reseller, never second hand.
- Write your seed phrase on paper only. No photos, notes apps or cloud.
- Download OneKey App only from the link on the official site.
- Check the receive address and every send on the device's own screen.
- Support never asks for your seed phrase or PIN. Anyone who does is a scammer.
Why a hardware wallet at all
Each common way to hold crypto has its own weak spot.
| Where you hold it | Who controls the keys | Main risk | |
|---|---|---|---|
| On an [[crypto-exchange | exchange]] | The exchange | Hack or collapse of the exchange, frozen account |
| In a hot wallet (app) | You | Malware or a [[wallet-drainer | wallet drainer]] on your phone or computer |
| In a [[hardware-wallet | hardware wallet]] | You | Losing the seed phrase, phishing, your own mistakes |
A hardware wallet keeps the private key inside the device. Your phone or computer only prepares a transaction; the wallet signs it after you approve on the device, so malware cannot quietly move your coins. See hot vs cold wallets.
The downside: all responsibility is yours. Lose both the seed phrase and the device, and the money is gone.
Step 1. Buy and check the device
As of October 2026 the official OneKey site lists OneKey Pro 2, OneKey Pro, OneKey Classic 1S and Classic 1S Pure (battery-free), plus a Bitcoin Edition. Check the site for the current lineup and prices.
- Buy only from the official OneKey site or a reseller it lists as authorized. Avoid used devices, unknown marketplace sellers and "discount" offers on Telegram.
- Check the box for signs of opening or damage.
- If the box holds a card with words already printed, or the device is already set up, do not use it. A real wallet arrives empty and generates the seed phrase itself.
- After connecting to the app, open the device in OneKey App, tap "Edit", then "Device authentication", and confirm on the wallet. The check verifies the serial number and does not touch the secure chip.
Step 2. Seed phrase and PIN
- Power on the device, choose a language and select Create New Wallet.
- Choose the phrase length. 12 words is the most common choice.
- Copy the words shown on the device screen, in order, onto the recovery sheet from the box. Check each word twice.
- Confirm the phrase by picking the right word for each position.
- Set a PIN. OneKey devices use the digits 1 to 9, no zero, and you enter it twice. Skip birthdays and 1234.
After 10 wrong PIN attempts the wallet resets to factory settings. With the seed phrase you can restore it; without it there is no way back.
Never do this with a seed phrase:
- photograph or screenshot it, or keep it in notes, email, cloud or a password manager;
- type it into any website or app;
- store it in the same place as the device.
Where to keep the paper and copies: how to store a seed phrase.
Step 3. Install OneKey App
OneKey App runs on macOS, Windows, Linux, iOS, Android and as a browser extension. Download it only via the official site's download page, not an app store search.
- Store copies with a similar name and icon exist. Ratings and ads prove nothing.
- No "special support builds", files from a cloud drive or TestFlight invitations.
- Desktop and extension connect over USB; the mobile app can use Bluetooth on models that have it.
Step 4. Receive coins
- In the app pick a coin and tap "Receive".
- Tap "Verify on device".
- Compare the full address in the app with the one on the wallet's screen.
- If they match, confirm on the device, then copy the address or show the QR code.
- Send a small test amount first.
Malware can swap the address on your monitor, but not what the wallet displays.
Withdrawing from an exchange? Pick the same network the wallet uses, or coins can be lost.
Step 5. Send
- Tap "Send", paste the recipient address and the amount.
- Check the address, amount and fee on the wallet's screen.
- Confirm on the device. Nothing goes out without that.
- Never copy addresses from your history: that is how address poisoning works.
- In DeFi, if the screen shows unreadable data or an unlimited token approval, cancel.
Step 6. Firmware updates
Updates fix vulnerabilities and add new coins. Update through OneKey App or the official firmware page.
- First make sure your seed phrase is written down and at hand.
- Start updates yourself. A message urging you to "update now" via another site is phishing.
If the device is lost or broken
Coins live on the blockchain; the device only holds the key.
- You have the seed phrase: buy a new wallet from the official store, restore from the phrase and set a new PIN. If someone may have seen the phrase, then create a fresh wallet and move everything.
- No phrase, but the device works and you know the PIN: create a new phrase now and move the coins.
- No phrase and no device access: the wallet cannot be recovered by anyone.
Common scams
- Fake support. A message on Telegram, Discord or X asks for your seed phrase to "verify" the wallet. Real OneKey support never asks for it or your PIN. This is social engineering.
- Fake app or site. It asks for your "12 words to sync". The phrase is only ever entered on the wallet's own screen.
- Pre-configured device. Any phrase you did not generate is known to someone else.
If you have already typed your seed phrase anywhere other than the device, treat the wallet as compromised: create a new one with a new phrase and move everything at once.
What next
Once the wallet is set up, walk through a recovery in your head: where the phrase is and who knows about it. You can pick a device at the official OneKey store, and read about other scams in how to spot scams and phishing.
Questions and answers
Can I keep my OneKey seed phrase in the cloud or as a photo?
No. Any digital copy can leak through a hacked email, cloud account or phone. Write the phrase on paper or metal and keep it away from the device.
What happens if I forget my OneKey PIN?
After 10 wrong attempts the device resets to factory settings. If you have the seed phrase, restore the wallet from it and set a new PIN.
How do I check that my OneKey is not a fake?
Buy only from the official store, then run "Device authentication" in OneKey App and confirm on the device. If the box already contains a printed phrase or the device is already set up, do not use it.
Related terms
Read next
Six settings that close the most common ways exchange accounts get taken over. It takes about half an hour.
Read →How to store your seed phrase and keys: a simple schemeYour seed phrase gives full access to a wallet. Where to keep it and what never to do.
Read →Partner links are marked. If you sign up through them, we may earn a commission at no cost to you. Details