The security of a hardware wallet is fundamentally based on one principle: your private key must be generated and controlled by you, and you alone. Only when used correctly can it truly safeguard your assets. A common scam looks like this: An attacker purchases a genuine hardware wallet through official channels, initializes the device, and records the generated seed phrase. They then forge the instruction manual, repackage the device to make it look factory-sealed, and resell it as “brand new and unopened.” The victim receives the device and, following the fake manual, uses the pre-set seed phrase, mistakenly believing they are performing a standard setup. In reality, they are taking over a wallet whose private key has already been compromised. Once assets are transferred into it, the attacker can immediately drain them. To defend against this type of supply chain attack, OneKey has implemented multiple layers of protection: > All devices are shipped with tamper-evident packaging and self-destruct seals that clearly indicate if the box has been opened or altered. > Users can verify the authenticity of their device directly in the OneKey App to ensure it is an official product. > We strongly recommend initializing the device yourself on first use, generating a new seed phrase, and storing it securely. This ensures your private key is known only to you. > In addition to the physical manual, complete official setup guides are available on our Help Center, allowing you to cross-check all instructions and avoid being misled by counterfeit materials. A hardware wallet is merely a vessel for your private key—and your private key is the true heart of your security. If the private key is exposed, it’s like someone has already duplicated the key to your front door—no matter how strong the lock is, your assets remain at risk. You can find the full initialization process and security guidelines on the OneKey Help Center. We’ve placed the link in the comments—bookmark it for quick access whenever you need it. 👇