​​Web3 wallets play the crucial role of handling your private credentials, so you can easily control your blockchain accounts, and use them to send payment or interact with applications to, for example, swap tokens or act on proposals in Trezu. Broadly speaking, there are two main types of wallets:

• Hot wallets are online applications—such as browser, mobile, or desktop apps—that store private keys on your computer or mobile device. Their convenience and simplicity make them the most common choice for daily blockchain interactions and transaction signing. However, this constant connectivity also makes them more vulnerable to attacks, as malicious actors can target the device you use to extract private keys and steal crypto assets.
  
  

• Cold wallets, on the other hand, store private keys completely offline, generally on dedicated hardware devices such as Ledger. These hardware wallets keep the keys encrypted within themselves, and require users to physically connect the device to the computer in order to approve transactions. Since private keys never leave the hardware or interact directly with the internet-connected computer, this setup greatly minimizes the attack surface and protects against malware, phishing, and remote hacks.

When to Use a Hardware Wallet

While you do not need a hardware wallet to use Trezu, it is highly recommended using one for your most critical operational roles.

For example, the Governance role controls your core rules, allowing members to add new users or change voting thresholds. Because of this immense structural power, you should assign the Governance role to a Ledger. This ensures no one can alter your treasury's foundation without a physical, offline signature.

A Ledger is also highly effective for the Finance role. If your team routinely executes massive bulk payrolls or high-value multichain swaps, requiring a Ledger signature to approve the batch adds a necessary layer of offline protection.

(Operational Tip: If your team relies on hardware wallets, keep a backup Ledger securely locked in a physical safe. This provides a clear recovery path if your primary daily devices are ever lost).

Optimized for Cold Storage

Trezu is built to make cold-storage operations smooth. Signing in with a Ledger is as simple as using a any other wallet. Simply connect your device and select "Sign in with Ledger." Trezu supports standard devices as well as wireless models like the Ledger Nano Gen5, Ledger Flex, or Ledger Stax.

How to Connect to Trezu

What you’ll need

• A Ledger Device: Models with screens (like the Nano Gen5, Flex, or Stax) are recommended so you can easily review transaction details.

• Updated Firmware: Ensure your device is running the latest software via Ledger Live.

• The NEAR App: Installed directly on your Ledger device. (Note: Because Trezu's underlying smart contracts operate via NEAR, this specific app is required to authenticate, even when managing other cross-chain assets).

• An Account: An account associated with your Ledger.

Step 1: Initiate the Connection

1. Unlock your Ledger device and open the NEAR app on the device itself.

2. Go to trezu.app and click Connect Wallet.

3. Select Ledger from the wallet options.

Step 2: Verify Your Details

1. Trezu will ask for a Derivation Path. In most cases, simply select the default path and click Continue.

2. Look at your Ledger screen. It will display a Public Key and an Address. Carefully review these on the physical device and approve them if they match your expectations.

Step 3: Sign In

1. In Trezu, you will be prompted to enter your NEAR Account ID (e.g., yourname.near) or use your 64-character implicit account address.

2. Click Confirm. Trezu will send a login signature request to your device.

3. On your Ledger, review the message details to ensure it is a Trezu login request.

4. Hold both buttons for approximately 3 seconds to approve the login.

You will automatically be redirected to the Trezu Dashboard. Your Ledger is now connected, and all future transactions will require physical confirmation on your device.

Governance Safety Patterns

If you are using Ledgers to secure your treasury's rules, keep these best practices in mind:

• Multi-Ledger Governance: Distribute Ledgers among trusted team members and use a shared threshold (e.g. requiring 2-of-3 Ledgers to approve a rule change). Store at least one backup Ledger in a separate physical location.

• Separation of Duties: Only connect your Governance Ledger for critical settings changes. Use a separate hot wallet for daily payment approvals.

• Documentation: Keep internal records of which Ledger belongs to which team member, and clearly document your recovery process.

Troubleshooting & Pitfalls

• Test with Small Amounts: When using a new Ledger or a new treasury setup for the first time, create a test proposal with a very small amount of crypto. This allows you to confirm the end-to-end signing flow and ensure you are comfortable with the device before managing significant funds.

• Blind Signing: Always verify the transaction details on your device's screen before approving. If you see a "blind signing" prompt, pause and only proceed if you fully trust the application and understand what the signature is for.

• Separation of Duties: Only connect your Governance Ledger for critical settings changes. Use a separate hot wallet for daily payment approvals.

• "Transaction Failed" Errors: If a proposal fails after you approve it, double-check that your Ledger firmware and NEAR app are fully updated, and that the signing account has enough NEAR to cover network fees.

• Connection Issues: If your Ledger won't connect, try using Google Chrome, testing a different USB cable, or closing other apps (like Ledger Live) that might be competing for the connection.

• Lost Device vs. Lost Phrase: If you lose your physical Ledger device, your funds remain secure on the blockchain. You can restore your account on a new Ledger using your 24-word recovery phrase. (Note: Never store this phrase digitally. If you lose the recovery phrase, your funds become permanently inaccessible).

By integrating a Ledger into your Trezu setup, you establish a professional, offline foundation for your team's capital.

Review your treasury security settings at trezu.app.

(Next up: Don't want to use a Ledger for every small task? Read our guide on connecting Meteor Wallet to speed up your daily payment operations).