Firmware is the software that runs on your hardware wallet. Updates matter, and they are also a favorite disguise for scammers. This guide is part of our guide to hardware wallets explained.
Why updates exist
Updates fix bugs, close security holes and add support for new coins and features. Reputable makers sign their firmware, so that the device can check that an update is genuine.
When to update
| Situation | What to do |
|---|---|
| Critical security fix | Update soon |
| New coin or feature that you need | Update |
| Minor improvements, and you rarely use the device | No hurry |
| Update just released | Waiting a little can be sensible |
| You received an unexpected message | Ignore it, and check the official app |
How to update safely
- Check your backup. You should be able to find your words, and you should know that they work. See how to test your backup.
- Open the official app yourself. Do not follow links in emails or messages.
- Read the release notes on the maker's site.
- Start the update and follow the prompts.
- Check the device screen. It should confirm the version.
- Do not unplug it during installation.
- Check your wallet afterwards. Confirm that your first receiving address is the same.
The fake update scam
This is one of the most common attacks on hardware wallet owners. A fake email, pop-up or letter warns of a "critical update" or says that your wallet is compromised. It leads to a fake app, which asks for your recovery phrase.
Some older updates may require you to re-enter your phrase on the device itself. If so, the words go on the device, never on a computer.
If an update goes wrong
If the device gets stuck, do not panic. Your funds are safe on the blockchain. Check the maker's official guide. Many devices have a recovery mode. If it cannot be fixed, restore your phrase on another device.
Your other software matters too
Keep your computer and wallet app up to date too, and download them only from official sources. Air-gapped users should see air-gapped signing.