Device Attestation

Device attestation is a check that the hardware wallet in your hands is a genuine unit running unmodified manufacturer firmware. The device holds a key placed in its secure chip during production; during setup, or on request from the companion application, it signs a challenge with that key and the manufacturer's service confirms the signature belongs to a device it issued. A passing check tells you the chip and the firmware are what they claim to be. It does not tell you that the package was sealed, that nobody else knows the recovery phrase, or that the box did not contain a phrase written on a card for you to use — those failures leave the attestation intact, because the device really is genuine and really is running official firmware. Treat a failed or skipped check as a reason to stop and contact the manufacturer, and a passing one as a reason to continue with the rest of the setup rather than to shorten it.