Ledger genuine check: how it verifies your device is authentic

05 September 2026

The Ledger Genuine Check is not a simple serial number lookup. It is a cryptographic handshake between your computer’s Ledger Live software and the Secure Element chip inside the device itself. The process is called remote attestation, and it is the only way to be sure the chip is authentic - not just the packaging, and not just the hologram.

How remote attestation works

When you connect a new Ledger device and run the genuine check, Ledger Live sends a challenge to the device’s Secure Element. The Secure Element responds with a digital signature. That signature must have been created using a private key embedded in the chip during manufacture. Only chips produced in Ledger’s certified factory have that key.

Ledger Live sends the signature to a Ledger server. The server checks whether the signature matches a known, unrevoked device certificate. If it does, you see a green check mark. If it does not - or if the chip cannot produce a valid signature at all - the check fails. A failing device is either counterfeit or has been tampered with in a way that broke the Secure Element’s cryptographic integrity.

No software update can create that signature. No third-party application can fake it. The Secure Element's private key is physically isolated and cannot be read out, even by the device's own main processor. That is why passing the check carries real weight. It proves the chip is exactly what it claims to be: a genuine Secure Element from Ledger’s supply chain.

What a Passing Test Does Not Prove

A passing genuine check verifies the hardware. It does not verify what happened to the device after it left the factory.

Here is the uncomfortable part. A malicious actor could intercept a genuine Ledger device during shipping. They could open it, install a compromised firmware that records the PIN as you type it, and then reseal the box convincingly. If the Secure Element itself has not been physically replaced, the genuine check will still pass. The chip is real. The firmware is not.

Worse, there is a theoretical attack where the device is intercepted, the recovery phrase is pre-generated by the attacker, and the device is then re-sealed. When you unbox it, you run the genuine check. It passes. You trust it. But the recovery phrase the device shows you is the attacker’s seed. You fund the wallet; the attacker owns it.

This is not common. It requires physical access to the supply chain, resources to reseal packaging convincingly, and a targeted victim worth the effort. But it is possible. The genuine check was never designed to catch it.

The Packaging Fallacy

Many users believe that a factory-sealed box plus a passing genuine check equals total safety. That is wrong. The two things verify entirely different threats.

Sealed packaging confirms that the box has not been opened visibly. A genuine check confirms the Secure Element is authentic cryptographically. Neither confirms that the device’s firmware is untampered or that the recovery phrase it generates is not known to someone else. The only way to guard against that second scenario is to verify the device on a computer that has never been connected to the internet, or to physically purchase the device directly from a trusted retailer rather than a reseller.

For most users - people buying from Ledger’s official store or Amazon’s Ledger shop - the genuine check is enough. The risk of a supply-chain interdict on a retail purchase is vanishingly small. But it is not zero. And acting as if it is zero is how people lose funds.

What you should actually do

Run the genuine check every time you set up a new device. If it fails, return the device immediately. If it passes, you know the chip is real. That is a meaningful assurance.

Then, after generating your recovery phrase, wipe the device and reset it. Generate a new phrase. This step is tedious but important. Any pre-seeded phrase the device may have been loaded with is now gone. You start fresh with a seed that only you have seen.

Think of it this way. The genuine check proves the car is a real Ferrari. It does not prove nobody planted a bomb in the glovebox. Knowing the difference is what separates cautious users from people who get a lesson in operational security the hard way.

Back to ledger