A step-by-step guide to safe crypto signing without internet
Preparing Your Ledger Nano S Plus for Offline Use
Before you start signing offline transactions, make sure your Ledger Nano S Plus is in a ready, secure state. First, update its firmware to the latest stable version—you can do this by plugging it into an internet-connected computer, opening Ledger Live, and following the on-screen prompts. I’ve heard of users losing funds because they skipped firmware updates, so this step can’t be rushed. Next, confirm your Ledger is initialized with a unique 24-word recovery phrase stored on a durable metal backup (like a steel notebook), not a phone or cloud. For example, if you bought a Ledger secondhand, always reset it fully via the device’s settings before using it for offline signing—used devices might have pre-loaded malware or compromised seeds. Also, keep the Ledger’s screen clean and buttons responsive; if a button sticks, contact Ledger support immediately, as this could interfere with your confirmation steps.
Setting Up Separate Online and Offline Devices
The core of offline signing is keeping your Ledger (which holds private keys) completely disconnected from the internet during the signing process. You’ll need two distinct devices: one online device (like a regular laptop or phone) to draft the transaction, and one offline device (the same laptop, once you disconnect it) to connect your Ledger. Let’s say you want to send 0.3 SOL to a family member: use your internet-connected laptop to open Ledger Live, navigate to your SOL account, and input the recipient’s verified address and amount. This online device never accesses your private keys—it only generates the transaction data to send to your Ledger. A critical rule here: never plug your Ledger into an internet-connected device when you’re not actively signing a transaction, as even a small malware infection could steal your keys if the Ledger is exposed online. I once made the mistake of leaving my Ledger plugged into an old online laptop for a day, and I immediately disconnected it after reading about similar risks.
Executing the Offline Transaction Signing
Now comes the hands-on signing step. First, disconnect your laptop from all internet sources—turn off Wi-Fi and Ethernet, or unplug the cable, to ensure it’s fully air-gapped. Next, plug your Ledger Nano S Plus into this offline laptop via its USB cable. On the Ledger, open the relevant crypto app (for SOL, that’s the Solana app) and confirm the app is authorized by Ledger Live. The Ledger’s screen will show a transaction summary: recipient address, amount, and network fees. You must physically check every detail here—this is the most important part to prevent fraud. For example, if the recipient address on the Ledger’s screen is missing a character compared to what you typed on the online device, hit both buttons to reject immediately. If all details match, press both buttons to confirm the signature. The Ledger will now sign the transaction offline, generating a .txn file that holds the signed data—this process takes only a few seconds, and the Ledger won’t store any of this data long-term.
Verifying and Broadcasting the Signed Transaction
Once you have the signed .txn file from your Ledger, it’s time to broadcast it to the blockchain. Reconnect your laptop to the internet, but keep your Ledger disconnected for now. Open Ledger Live, go to the “Sign Transaction” section, and select the option to import a signed file. Choose the .txn file you saved earlier, then double-check the transaction details one last time (they should match what you confirmed on the Ledger). Click “Broadcast” and wait for the blockchain to process the transaction—this usually takes a few minutes, depending on the network. After broadcasting, always verify the transaction on a block explorer (like Solscan for SOL) to ensure it went through correctly. If something goes wrong, like the transaction failing, don’t panic—you can re-sign it by going back through the steps, as your Ledger’s keys are still secure. Never share the signed file or your recovery phrase with anyone, even if they claim to be Ledger support; scammers often use this tactic to steal funds.
