Reconciling Hardware Wallet Holdings Against Your Register
Practical steps for verifying that your cold wallet register matches devices on hand and recorded derivation paths.
Quarterly reconciliation is the heartbeat of register maintenance. Without it, even a well-built register becomes a historical artefact rather than a governance tool. This article outlines the verification sequence we follow during client sessions—steps your internal team can adapt between professional maintenance visits.
Step one: physical device count
Begin by locating every hardware wallet listed in the register. Compare serial numbers on device labels against register entries. Note any device present in the register but absent physically, and any device found that lacks a register entry. Photograph labels for the amendment file.
Step two: firmware and model confirmation
Device models and firmware versions change over time. A register entry that says “Ledger Nano S” when the device on the shelf is a Nano X indicates either a replacement that was never documented or a labelling error. Record the actual model and firmware for each unit.
Step three: passphrase custody verification
Without asking anyone to reveal a seed phrase, confirm that custody locations described in the register remain accurate. Has a phrase moved from a home safe to a bank deposit box? Has a cosigner departed and taken their copy? Update the seed custody map accordingly.
Step four: holdings verification
Using view keys, signed messages, or xpub exports that your family office already controls, verify that derivation paths in the register correspond to current balances. Discrepancies here may indicate unrecorded transactions, wrong path notation, or devices holding assets the register does not yet cover.
Step five: amendment and memo
Document every finding in the discrepancy log. Update amendment pages in the register. Draft a brief summary for principals who will not read the full log—one paragraph on register status, open discrepancies, and recommended next actions.
When to call for help
If reconciliation reveals a missing device, an unreachable cosigner, or holdings that cannot be verified with available keys, pause internal updates and seek professional assistance. Continuing to amend a register without resolving underlying custody gaps creates a false sense of completeness.