Hardware wallet (Ledger)

Your Ledger keeps your signing keys on the device and asks you to approve wallet actions. Anon uses two Ledger apps: the RAILGUN app for private actions, and the Ethereum app for your public address, sign-in messages and public transactions. The RAILGUN app also exports a viewing key to Anon so the wallet can read your private activity; that key is not a spending key.

This page covers the Anon browser extension. Install the RAILGUN app through Anon and the Ethereum app through Ledger Live. Follow the app name Anon asks you to open.

Note: Hardware features depend on your Anon build. The current production build enables sign-in with an existing Ledger account, but creating a hardware account and Bluetooth are not enabled. Some flows below are available only in builds that enable them.

Find your screen

Which app signs what

Supported devices and browsers

Anon bundles the RAILGUN app for Nano S Plus (USB) and Flex (USB, Bluetooth). A build without an app for your model says “This build has no RAILGUN app for your Ledger model.”

For USB, use a desktop browser with WebHID support, such as Chrome or a compatible Chromium browser. Bluetooth also needs Web Bluetooth support and an Anon build that enables it. If unavailable, use USB. Installing or updating the RAILGUN app always needs USB, including on Flex.

Connect in a full tab

The browser’s device chooser needs a full tab for Bluetooth pairing and initial USB access. Anon’s handoff explains whether your request will wait or must be started again.

1. Open tab: use the handoff to open Anon in a full tab.
2. Pair your Ledger: choose your device in the browser’s window. For USB permission, press Allow USB when asked. Confirm on the Ledger if prompted.
3. Come back: return to the toolbar popup or side panel when instructed. If Anon says Continue in this tab, finish there instead.

Keep the Bluetooth tab open while using the Ledger: its connection stays in that tab.

Pair over Bluetooth

Use a Flex after installing the RAILGUN app over USB. Nano S Plus is USB only.

1. In Settings → Hardware, disconnect first if Anon shows Disconnect to change mode, then choose Bluetooth.
2. Turn on Bluetooth on your Ledger and computer. Unlock the Ledger and keep it nearby.
3. Press Pair via Bluetooth, following the full-tab handoff if shown.
4. Choose the Ledger in the browser’s window and confirm on the device if asked.

If pairing is cancelled or the window does not open, press Pair via Bluetooth again. If Bluetooth is unavailable, choose Use USB instead. For a lost connection, close Ledger Live and other apps or tabs using the Ledger, then pair again. If necessary, remove the Ledger from your computer’s Bluetooth settings and retry, or restart the browser.

Device not found or disconnected

For Connect your Ledger or Looking for your Ledger…, connect and unlock the device, then open the app Anon names. For Ledger disconnected, press Reconnect; Cancel request ends the waiting request. For Your Ledger didn’t respond, check the device, then press Try again. If a previous request is still visible on the Ledger, reject it there before retrying.

For USB communication problems:

1. Unplug and reconnect the Ledger. Try another USB port or cable.
2. Close Ledger Live and other apps or tabs using the device.
3. If needed, follow Anon’s recovery instruction: in Ledger Live, Settings → Help → Clear Cache, then run pending firmware and app updates. Close Ledger Live again.
4. In Anon, press Forget device, then Connect Ledger and choose the device in the browser’s window.
5. Restart the browser or try another computer if it still fails.

Not the Ledger for this account means the address differs from the account you selected. Connect the original Ledger and use the account index you used when creating that account. For Something went wrong, check Details and get help if retrying does not resolve it.

Unlock your Ledger

Wake your Ledger and enter its PIN on the device. Anon waits and continues automatically once it is unlocked. If it locks again during a request, unlock it again. Never enter your Ledger PIN or recovery phrase into Anon or a support form.

Open the RAILGUN app

Return to the Ledger’s app list and open the RAILGUN app using your device’s controls. Anon shows Open now and Needed, and continues once the requested app is open. If the app is missing, install it through Anon.

A request may need one app and then the other. Follow each prompt; the RAILGUN app handles private actions.

Open the Ethereum app

Return to the Ledger’s app list and open the Ethereum app. Anon uses it to read your public address, sign messages for that address and sign public transactions. If missing, install it from Ledger Live.

Confirm on your Ledger

Read the request in Anon and on the device before approving. Anon cannot approve for you.

• For a private spend, compare every hash with the corresponding hash on the Ledger, in the order requested.
• For a public transaction, compare all details shown, including the full address, amount, network, maximum fees and transaction hash where present. Checkboxes in Anon only help you keep your place.
• For a message, review the message on the Ledger. A matching hash does not explain a transaction’s meaning; if you cannot verify what you are approving, reject it and get help.

You declined on your Ledger means nothing was signed for that request. Try again requests approval again. If Anon reports a timeout, reject any request still displayed on the Ledger before starting again.

Approve this device

Where sign-in keys are enabled, this screen asks the Ethereum app to approve a sign-in key for this computer. Compare Key · compare with your Ledger in Anon with the key in the Ledger’s sign-in message. Approve only if they match and you initiated the request.

That approval lets the computer sign in without a Ledger confirmation each time. Wallet actions that require a Ledger signature still need the device. This feature is not enabled in the current production build.

Install the RAILGUN app

Open Settings → Hardware and press Install for the RAILGUN app. Anon installs it over Ledger’s secure channel using Anon’s installer key. Ledger Live cannot install or update this app.

Connect over USB, unlock the Ledger, close any open Ledger app and return to its dashboard. Close Ledger Live and keep Anon’s installation tab open. The installer has four steps:

1. Allow Anon’s installer on your Ledger. Before approving Allow unsafe manager on the device, verify the installer key.
2. Install the RAILGUN app. Keep the Ledger connected and unlocked while Anon copies the app; the installer says this takes about a minute.
3. Verify the app on your Ledger. Check the app code hash before approving the device’s installation request.
4. Installed and verified. Press Done so Anon can check the device again.

“This build can’t install the RAILGUN app. Use an official Anon release.” means the build has no installer key. Use an official release from Anon downloads. Cancel install stops at the next exchange with the device; reject any prompt already showing on the Ledger too.

Verify the installer key

Allow unsafe manager asks you to authorize a third-party installer. The public key offered to the Ledger is Anon’s installer root key, which signs the secure-channel installation. Verify it before approving.

Anon has already compared the key it is about to offer with its bundled signed attestation. Key matches means those values agree; it does not read or confirm what you see on the physical screen. Check that screen yourself against Anon’s published fingerprint and full key.

If even one digit differs, or you cannot identify the value being displayed, reject the request on the Ledger, press Cancel install, then use Report this to Anon support if offered. Key does not match — do not approve means Anon has already stopped; that report opens a pre-filled support form. If the report button is unavailable, use Get help. Do not approve to get past a mismatch.

The attestation is signed by Anon’s own installer key, so its connection to Anon relies on the trusted HTTPS publication at anon.inc, not on the signature alone. Its current status is experimental and it has no revocation mechanism; a match establishes agreement with the published key, not a guarantee that software is safe.

The version history links archived attestations. Its appVersion labels the ledger-client package that bundles the app, not the RAILGUN app version shown on the Ledger.

Note: Device confirmation is pending: current sources disagree on whether Nano S Plus and Flex show the full key or a short fingerprint. The instructions above cover either form; if your screen cannot be compared, stop and contact support.

Check the app code hash

Anon checks the install bundle against the attestation for your Ledger model. App matches Anon’s release shows Code hash · compare with your Ledger. The card currently displays only the first 20 hexadecimal characters of codeId; the signed attestation contains the complete value (nanosp for Nano S Plus, flex for Flex).

The website’s App identifier is a different value, appIdentifier. Do not compare it to the code hash. If the device clearly identifies a code hash, compare it with codeId; if it identifies an app identifier, use appIdentifier. Compare the complete value shown, not just the card’s shortened prefix.

Note: The exact hash labels and screens still need confirmation on both devices. If you cannot identify which value the Ledger shows, reject the request and get help.

For App does not match — do not approve, Anon has stopped. Reject any device prompt, cancel the install and report the mismatch through Get help.

Install the Ethereum app

Use Ledger Live to install the latest Ethereum app on your connected, unlocked Ledger. Follow Ledger Live’s device prompts, then close it so Anon can use the connection. Return to Anon and press I’ve installed it to check again.

Update the RAILGUN app

Update available means the installed app hash differs from Anon’s bundled app; an update uses the same installer to reinstall the app. Update required means the installed version is too old to continue signing.

Connect over USB, open Settings → Hardware and press Update. Follow all four installation steps, including both verification checks. If connected over Bluetooth, disconnect and switch to USB first. Ledger Live cannot perform this update.

Update the Ethereum app

Update the Ethereum app in Ledger Live, then close Ledger Live and press I’ve updated it in Anon. The request shows Installed and Required versions; Settings → Hardware shows Update required when the app is too old.

Update your Ledger firmware

For Outdated device firmware, open Ledger Live and connect your device. Run pending firmware, MCU or app updates through Ledger Live, then close it and press Retry in Anon. Afterwards, check Settings → Hardware again; if the RAILGUN app is missing, reinstall it through Anon. Never share your recovery phrase to troubleshoot an update.

Free up space on your Ledger

For Not enough space on your Ledger, remove an app you do not use through Ledger Live, then close Ledger Live and press Try again in Anon. Use Ledger Live’s app-management controls; do not reset the device to make space.

Get help

Open Settings → Help & feedback in Anon. Include your Ledger model, the app versions shown in Settings → Hardware, the screen title and the text under Details. For an installer-key or app mismatch, you can also contact [email protected], as listed on Anon’s verification page.

Never send your recovery phrase, private key, viewing key or PIN to support.