Jeff asked the question I have been meaning to answer for weeks: if I am long TAO, at what point should I move it off the Tao Wallet and onto a Ledger? Answer: the second the dollar amount in the hot wallet makes you queasy.
The catch with TAO is that Ledger Live does not speak Bittensor directly. You bridge through the Polkadot app on the Ledger (Bittensor is a Substrate chain) and use Talisman as the wallet interface. Nova Wallet and Subwallet work too — pick whichever you already trust.
What you need
- Ledger Nano S Plus, Nano X, or Stax
- Ledger Live updated
- Talisman browser extension installed (Firefox or Brave, clean session)
- Pen and paper
Steps
- Initialize the Ledger with the 24-word seed. Write it down twice. Do not photograph it.
- In Ledger Live → My Ledger, install the Polkadot app on the device.
- Open Talisman → Add Account → Connect Ledger → choose Polkadot as the Ledger App, then select Bittensor in the network dropdown. Your TAO coldkey now lives behind the Ledger.
- Send a tiny 0.01 TAO test transfer before you move the bulk. Confirm the address on the Ledger screen, not just the browser.
- Stake from cold via Talisman + taostats.io (or
btcliif you prefer the command line). The Ledger signs each extrinsic — every stake, unstake, and delegation requires a physical button press.
A note on the architecture: Bittensor splits each wallet into a coldkey and a hotkey. The coldkey is the long-term store of TAO. The hotkey is the operations key that delegates and validates. Ledger secures the coldkey. The hotkey can stay on Tao Wallet for day-to-day, because even if it's compromised the attacker can't move your principal — that requires the coldkey signature.
For the curious: Bittensor's Finney mainnet endpoint is wss://entrypoint-finney.opentensor.ai:443 and its SS58 address prefix is 42. Most wallets handle this automatically; you'll only need it if you're poking around in polkadot.js or running a node.
What I do
A small operations account on Tao Wallet, the bulk on Ledger via Talisman, and a one-page doc that tells my family where the seed lives.
Cold storage is not done when the device boots. It is done when somebody you love could actually access it if you could not.