Hardware Wallet Comparison
Cold storage comparison of hardware wallets with security features and GitHub metrics
Summary: Cold storage comparison of hardware wallets with security features and GitHub metrics
Complete Hardware Wallet Comparison
Wallet | Score | GitHub | Air-Gap | Open Source | Secure Elem | Display | Price | Conn | Activity | Founded | Funding |
|---|---|---|---|---|---|---|---|---|---|---|---|
92 | ✅ Full | ✅ Full | ✅ 3× SE | Touch Color | ~$149 | QR | ✅ Active | 2017 | 🟡 VC | ||
88 | ✅ Full | ✅ Full | ✅ Dual SE | Mono LCD | ~$160‡ | MicroSD | ✅ Active | 2011 | 🟢 Self | ||
86 | ✅ Full | ✅ Full | ✅ Dual SE | LCD | ~$219 | MicroSD/NFC | ✅ Active | 2011 | 🟢 Self | ||
84 | ✅ Full | ✅ Full | ✅ Dual SE | LCD | ~$319 | QR/MicroSD/NFC | ✅ Active | 2011 | 🟢 Self | ||
83 | ✅ Full | ✅ Full | ✅ SE | Touch Keypad | ~€129 | QR/USB | ✅ Active | 2017 | 🟢 Status | ||
78 | ❌ | ✅ Full | ✅ Optiga | Touch Color | ~$129 | USB-C | ✅ Active | 2013 | 🟢 SatoshiLabs | ||
78 | ❌ | ✅ Full | ✅ Tropic01 + Optiga | Touch Color | ~$249 | USB-C/BT | ✅ Active | 2013 | 🟢 SatoshiLabs | ||
77 | ❌ | ✅ Full | ✅ Optiga | Mono OLED | ~$59 | USB-C | ✅ Active | 2013 | 🟢 SatoshiLabs | ||
76 | ✅ Full | ✅ Full | ✅ ATECC | Color LCD | ~$199* | MicroSD/QR | ❌ Inactive | 2020 | 🟡 VC | ||
74 | ✅ Full | ✅ Full | ❌ None (virtual SE) | Color LCD | ~$67 | USB/BT/QR | ✅ Active | 2014 | 🟡 VC | ||
73 | ❌ | ✅ Full | ✅ ATECC | Touch Edge | ~€149 | USB-C | ✅ Active | 2015 | 🟢 Self | ||
73 | ❌ | ✅ Full | ✅ ATECC | Touch Edge | ~€175 | USB-C | ✅ Active | 2015 | 🟢 Self | ||
70 | ✅ Full | ✅ Full | ❌ None (virtual SE) | Color LCD | ~$149 | USB/BT/QR | ✅ Active | 2014 | 🟡 VC | ||
70 | ❌ | ✅ Full | ✅ SE | Touch Color | ~€381 | BT/NFC/USB-C/QR | ✅ Active | 2020 | 🟡 VC | ||
70 | ✅ Full | ✅ Full | ❌ None | LCD | ~$30-100* | QR | ✅ Active | 2021 | 🔴 Community | ||
70 | ✅ Full | ✅ Full | ❌ None | LCD | ~$50-100* | QR | ✅ Active | 2020 | 🔴 Community | ||
69 | Private | ✅ Full | ⚠️ Partial | ✅ SE | LCD | ~$50 | QR | 🔒 Private | 2018 | 🟢 Binance | |
67 | ❌ | ✅ Full | ✅ ATECC + EAL6+ Cards | OLED | ~$179 | USB-C/NFC | ⚠️ Slow | 2019 | 🟡 VC | ||
67 | ❌ | ⚠️ Partial | ✅ ST33K1M5 EAL6+ | Mono OLED | ~$69 | USB | 🔒 Private | 2014 | 🟢 Ledger | ||
67 | ❌ | ✅ Full | ✅ SE | Touch Color | ~$278 | USB/BT | ✅ Active | 2019 | 🟡 VC | ||
67 | ✅ Full | ✅ Full | ❌ None | LCD | ~$50-150* | QR | ⚠️ Slow | 2020 | 🔴 Community | ||
65 | ❌ | ✅ Full | ✅ CC | None | ~€29 | NFC | ✅ Active | 2017 | 🟢 Status | ||
65 | Private | ✅ Full | ⚠️ Partial | ✅ SE | Touch Color | ~$398 | QR | 🔒 Private | 2018 | 🟡 VC | |
64 | ❌ | ⚠️ Partial | ✅ ST33K1M5 EAL6+ | Mono E-Ink Touch | ~$179 | USB/BT/NFC | 🔒 Private | 2014 | 🟢 Ledger | ||
64 | ❌ | ✅ Full | ✅ SE | Mono OLED | ~$79 | USB | ❌ Inactive | 2019 | 🟡 VC | ||
62 | ❌ | ⚠️ Partial | ✅ ST33K1M5 EAL6+ | E-Ink Touch | ~$249 | USB/BT/NFC | 🔒 Private | 2014 | 🟢 Ledger | ||
62 | ❌ | ⚠️ Partial | ✅ SE | Mono OLED | ~$59* | USB | ❌ Inactive | 2014 | 🟢 Ledger | ||
62 | ❌ | ✅ Full | ✅ SE | Mono OLED | ~$99 | USB | ❌ Inactive | 2019 | 🟡 VC | ||
61 | ❌ | ✅ Full | ❌ None | OLED | ~$60 | USB | ✅ Active | 2014 | 🟢 ShapeShift | ||
61 | ❌ | ⚠️ Partial | ✅ ST33J2M0 EAL5+ | Mono OLED | ~$99 | USB/BT | 🔒 Private | 2014 | 🟢 Ledger | ||
59 | ❌ | ⚠️ Partial | ✅ ST33K1M5 EAL6+ | E-Ink Touch | ~$399 | USB/BT/NFC | 🔒 Private | 2014 | 🟢 Ledger | ||
58 | ❌ | ✅ Full | ❌ None (virtual SE) | Color LCD | ~$99 | USB/BT | ✅ Active | 2014 | 🟡 VC | ||
55 | ❌ | ✅ Full† | ❌ Not documented | OLED Touch | ~€230 | NFC/USB-C | ✅ Active | 2009 | 🟢 Block | ||
Firefly (partial data) | 55 | ✅ Full | ✅ Full | ❌ None | OLED | ~$5* | TBD | ❌ Inactive | TBD | 🔴 Unknown | |
imKey Pro (partial data) | 53 | TBD | ⚠️ Partial | ✅ SE EAL6+ | TBD | ~$110 | USB/BT | ❌ Inactive | 2018 | 🟢 Self | |
52 | Private | ❌ | ⚠️ Partial | ✅ SE | LCD | ~$70 | BT | 🔒 Private | 2018 | 🟢 Binance | |
OneKey Pro 2 (partial data) | 51 | TBD | ❌ | ✅ Full | ✅ SE | Touch Color | ~$299 | USB/BT/NFC | TBD | 2019 | 🟡 VC |
48 | Private | ✅ Full | ❌ Closed | ❌ None | Touch Color | ~$169 | QR | 🔒 Private | 2018 | 🔴 Unknown | |
48 | Private | ❌ | ❌ Closed | ✅ SE | Touch Color | ~$99 | USB/BT | 🔒 Private | 2018 | 🔴 Unknown | |
46 | Private | ❌ | ⚠️ Partial | ✅ SE | None | ~$55 | NFC | 🔒 Private | 2017 | 🟡 VC | |
41 | Private | ❌ | ❌ Closed | ✅ SE | None | ~$60 | NFC | 🔒 Private | 2000 | 🟢 CompoSecure | |
40 | ❌ | ⚠️ SDK only | ✅ SE | 5" Touch | ~$397 | WiFi/USB | 🔒 Private | 2017 | 🔴 Unknown | ||
30 | Private | ❌ | ❌ Closed | ❌ None | OLED | ~€160 | USB | 🔒 Private | 2014 | 🔴 Unknown |
* DIY wallets — price varies based on components purchased; requires self-assembly
‡ Price UNVERIFIED on 2026-10-17: ColdCard Mk4 is not sold any more (coldcard.com/mk4: "replaced by Mk5") and has no current price, so ~$160 is the previous value. Arculus ~$60 is the current sale price on getarculus.com (list $99), read from the product page on 2026-10-17.
Prices are USD from official stores on 2026-10-15 (BitBox02, BitBox02 Nova, Cypherock X1 Standard, imKey Pro, Jade Core and OneKey Pro 2 on 2026-10-17) unless the cell shows € (scored by face value, like a USD amount) (store sells in euros and no USD price was available: Keycard, Passport Prime, Bitkey, BC Vault, BitBox02 and Nova at €149 and €175 on shop.bitbox.swiss). Blockstream Jade is on sale at $67 (list $79); Jade Plus is $149 plastic, $169 metal.
Cypherock X1 Standard $179 is the sale price (list $209, cypherock.com/shop). Keycard Shell €129 is the sale price (regular €149, keycard.tech). imKey Pro is $109.99 (shop.imkey.im). Jade Core is $99 on blockstream.com/jade and store.blockstream.com/products/blockstream-jade-core; the page lists USB-C, Bluetooth and a 1.9" LCD but no camera or air-gap feature, so Air-Gap reads ❌. OneKey Pro 2 ($299, onekey.so/products/onekey-pro-2/) is partial data: the page lists 4 EAL6+ secure elements, Bluetooth, NFC, USB-C and Air-Gap, and says all software and firmware are open source, but no public Pro 2 firmware repo was identified, so GitHub and Activity are TBD and Air-Gap is ❌ to match the existing OneKey Pro row, although the vendor spec table lists camera-based QR signing; the Connectivity cell omits QR for the same reason.
Jade and Jade Plus use a "virtual secure element" (open-source blind oracle) instead of a physical chip, so the Secure Elem cell reads None.
Activity follows the linked firmware repo (default-branch commits; the weekly refresh sets the Activity and Last Commit cells). OneKey Classic 1S rows link the firmware repo, so they read Inactive even though the device is still sold. Discontinued devices (Passport Core, Ledger Nano S) are set to Inactive.
† Bitkey publishes app, server, schematics, and firmware code under MIT, but external parties still cannot build every firmware component because the fingerprint matching library remains proprietary.
Note: Strikethrough indicates discontinued/inactive wallets. Ledger Nano S was discontinued in 2023; limited storage (2-3 apps max) compared to Nano S+. Foundation Passport Core (the original Passport) is discontinued per a Foundation staff reply dated 2026-07-16; Passport Prime is its successor.
Security notice (ColdCard): On 2026-07-30 Coinkite disclosed that seeds generated on affected firmware (Mk2/Mk3 4.0.1-4.1.9, Mk4/Mk5 before 5.6.0, Q before 1.5.0Q) used a weak software random generator. Funds were stolen offline from affected seeds. Updating the firmware does not repair an existing seed; affected seeds must be migrated. Fixed firmware is 4.2.0 (Mk2/Mk3), 5.6.0 (Mk4/Mk5) and 1.5.0Q (Q). Sources: Coinkite advisory, Bitcoin Optech newsletter 2026-07-31 (estimated losses above 1,000 BTC). The score formula uses table columns only and does not price this incident in.
Details
📊 View the comparison table: See all wallets at a glance →
Source of truth note: Current
ScoreandRecvalues are generated from the visible columns in HARDWARE_WALLETS.md viascripts/sync_table_scores.js(2026-04-visible-columns-v3). If a long-form section below mentions older numeric scores, trust the main comparison table.
TL;DR: The generated snapshot below mirrors the current main-table ordering and scores. Use it for the latest rankings; the long-form sections below explain security architecture, firmware transparency, and tradeoffs in more detail.
Current generated snapshot: Keystone 3 Pro (92, ✅ Active, 🟢), ColdCard Mk4 (88, ✅ Active, 🟢), ColdCard Mk5 (86, ✅ Active, 🟢), and ColdCard Q (84, ✅ Active, 🟢). Regenerated from HARDWARE_WALLETS.md by
scripts/sync_table_scores.jsusing methodology2026-04-visible-columns-v3.
Current Top Rows (generated)
| Rank | Wallet | Score | Activity | Rec |
|---|---|---|---|---|
| 1 | Keystone 3 Pro | 92 | ✅ Active | 🟢 |
| 2 | ColdCard Mk4 | 88 | ✅ Active | 🟢 |
| 3 | ColdCard Mk5 | 86 | ✅ Active | 🟢 |
| 4 | ColdCard Q | 84 | ✅ Active | 🟢 |
| 5 | Keycard Shell | 83 | ✅ Active | 🟢 |
Last Updated: October 17, 2026 | Scoring Methodology | GitHub Activity Data | Company Aggregates
Related: See Software Wallet Comparison for EVM wallet recommendations and integration details. Companies: See Company Aggregates for aggregated scores and wallet counts by manufacturer.
Column Definitions
Complete explanations for all table columns:
| Column | Values | Meaning |
|---|---|---|
| Score | 0-100 | Weighted score prioritizing security, transparency, privacy, activity, company track record, and UX. See Scoring Methodology |
| GitHub | Link or "Private" | Firmware repository link |
| Air-Gap | ✅ Full / ❌ | ✅ Full = QR/MicroSD only (never connects to computer during signing) |
| Open Source | ✅ Full / ⚠️ Partial / ❌ Closed | ✅ Full = Firmware + bootloader open source |
| Secure Elem | ✅ Type / ❌ None | ✅ = Has Secure Element chip (Optiga, ATECC, STM32, etc.) |
| Display | Type | Screen type: Touch Color, Mono OLED, Color LCD, LCD, E-Ink Touch, None (NFC card) |
| Price | ~$XXX | Approximate USD price (verify on official site). *DIY wallets = component cost varies |
| Conn | USB, BT, QR, NFC, MicroSD, WiFi | Connection methods: USB-C, USB, Bluetooth (BT), QR codes, NFC, MicroSD card, WiFi |
| Activity | ✅ / ⚠️ / ❌ / 🔒 | ✅ = Active (≤30 days since last commit) |
| Rec | 🟢 / 🟡 / 🔴 | 🟢 = Top half of active rows |
Special Notes:
Strikethrough= Abandoned/inactive wallet- *DIY wallets = Requires self-assembly, price varies based on components
Top Picks by Use Case
| Use Case | Top Pick | Score | Runner-Up | Budget Option |
|---|---|---|---|---|
| Highest Score | Keystone 3 Pro | 92 | ColdCard Mk4 (88) | Trezor Safe 3 (~$59) |
| Bitcoin Only | ColdCard Mk5 | 86 | Blockstream Jade Plus (70) | Blockstream Jade (~$67) |
| Air-Gapped | Keystone 3 Pro | 92 | ColdCard Q (84) | SafePal S1 (~$50) |
| Best Value | Trezor Safe 3 | 77 | Blockstream Jade (74) | Tangem (~$55) |
| Beginners | Trezor Safe 5 | 78 | BitBox02 (73, ~€149) | Blockstream Jade (~$67) |
| DIY/Self-Build | Specter DIY | 70 | SeedSigner (70) | Krux (~$30-100, UNVERIFIED) |
DIY Signing Devices
For technically-inclined users who want maximum transparency and control:
| Device | What You Need | Difficulty | Best For |
|---|---|---|---|
| Specter DIY | ESP32 board + camera + display | Medium | Multi-chain, experienced users |
| SeedSigner | Raspberry Pi Zero + camera + display | Easy-Medium | Bitcoin maximalists, popular community |
| Krux | M5StickV or similar | Easy | Beginners to DIY, cheapest option |
DIY Trade-offs:
- ✅ Pros: Fully open source, air-gapped, no supply chain trust, educational, cheap
- ❌ Cons: No Secure Element (lower physical security), requires assembly, no manufacturer warranty
2026 Security Incidents
Checked 2026-10-15. Primary sources are named; anything only reported by news sites is marked.
| Date | Vendor | What happened | Source |
|---|---|---|---|
| 2026-07-30 | Coinkite ColdCard | A build error in the 2021 library migration made seed generation use a software PRNG instead of the hardware TRNG. Attackers regenerated seeds offline and stole funds. Affected: Mk2/Mk3 firmware 4.0.1-4.1.9, Mk4/Mk5 before 5.6.0 (Edge before 6.6.0X), Q before 1.5.0Q (Edge before 6.6.0QX). Updating does not repair an existing seed; it must be migrated. Losses: Bitcoin Optech states above 1,000 BTC; TRM Labs (secondary) reports about 1,816 BTC. | Coinkite advisory, Bitcoin Optech |
| 2026-06-03 | Trezor Safe 7 (Tropic Square TROPIC01 chip) | Ledger Donjon found a laser fault-injection attack in late January 2026; Tropic Square then extracted one more secret tied to PIN protection. Trezor says funds, PIN and backups are not exposed, no user action is needed, and the issue cannot be fixed by firmware. | Trezor blog |
| 2026-08-13 and 2026-09-04 | Trezor | Shipping provider ShipMonk was breached. 13,689 customers affected in the first notice, about 67,000 more US customers added on Sep 4 (80,689 total per Trezor). Names, emails, phone numbers and addresses exposed. Devices, keys and backups not affected. | Trezor blog |
| 2026-08-17 | BitBox | Dixence update (firmware 9.26.5) fixed two severe firmware flaws found in internal audits; no exploitation reported. BitBox's GitHub release firmware/v9.26.5 (2026-08-17) confirms the release and lists "Security improvements"; the "two severe flaws" detail is from news reports only (UNVERIFIED against BitBox, whose blog was not found on 2026-10-17). | BitBox release, Cointelegraph |
No 2026 vulnerability reports for Keystone, OneKey, Tangem, Jade or SafePal turned up in searches run on 2026-10-15; this is an absence of search results, not an audit.
Recheck log (2026-10-17, pass 3)
| Item | Result | Source |
|---|---|---|
| Arculus price | ~$100 (UNVERIFIED) -> ~$60. Product page "Arculus Cold Storage Wallet" shows $59.76 current price and $99.00 non-sale price (page metadata product:price:amount and og:price:standard_amount), in stock. Fetched with headless Chromium after plain fetches returned 403. The sale price can end; list is $99. Score 39 -> 41. | https://www.getarculus.com/products/arculus-cold-storage-wallet.html |
| ColdCard Mk4 price | Still unresolved, ~$160 kept with ‡. coldcard.com/mk4 says "COLDCARD Mk4 has been replaced by Mk5"; the Coinkite store lists Mk4 only as a compatible-device note on an accessory, with no Mk4 product price. | https://coldcard.com/mk4, https://store.coinkite.com/store |
Manufactured Wallets
- Trezor — GitHub
- Keystone — GitHub
- BitBox02 — GitHub
- Blockstream Jade — GitHub
- ColdCard — GitHub
- Foundation Passport — GitHub
DIY Signing Devices
- SeedSigner — GitHub — Raspberry Pi-based
- Specter DIY — GitHub — ESP32-based
- Krux — GitHub — M5StickV/similar
Verification & Research
- WalletScrutiny — Open source verification
- Bitcoin Wiki - Hardware Wallets
Company Aggregates (derived)
Derived from HARDWARE_WALLETS.md by scripts/sync_table_scores.js: the aggregated score is the mean of the company's row scores, grouped by the same rules as the companies page. Do not edit by hand.
| Company | Aggregated Score | Wallet Count | Wallets |
|---|---|---|---|
| Keystone | 92.0 | 1 | Keystone 3 Pro |
| Coldcard | 86.0 | 3 | ColdCard Mk4, ColdCard Mk5, ColdCard Q |
| Trezor | 77.7 | 3 | Trezor Safe 5, Trezor Safe 7, Trezor Safe 3 |
| Keycard | 74.0 | 2 | Keycard Shell, Keycard |
| BitBox | 73.0 | 2 | BitBox02, BitBox02 Nova |
| Foundation | 73.0 | 2 | Foundation Passport (Core), Foundation Passport Prime |
| Krux | 70.0 | 1 | Krux |
| SeedSigner | 70.0 | 1 | SeedSigner |
| Blockstream | 67.3 | 3 | Blockstream Jade, Blockstream Jade Plus, Blockstream Jade Core |
| Cypherock | 67.0 | 1 | Cypherock X1 Standard |
| Specter | 67.0 | 1 | Specter DIY |
| NGRAVE | 65.0 | 1 | NGRAVE ZERO |
| Ledger | 62.5 | 6 | Ledger Nano S+, Ledger Nano Gen5, Ledger Flex, Ledger Nano S, Ledger Nano X, Ledger Stax |
| KeepKey | 61.0 | 1 | KeepKey |
| OneKey | 61.0 | 4 | OneKey Pro, OneKey Classic 1S Pure, OneKey Classic 1S, OneKey Pro 2 |
| SafePal | 60.5 | 2 | SafePal S1, SafePal X1 |
| Bitkey | 55.0 | 1 | Bitkey |
| Firefly | 55.0 | 1 | Firefly |
| imKey | 53.0 | 1 | imKey Pro |
| Ellipal | 48.0 | 1 | Ellipal Titan 2.0 |
| SecuX | 48.0 | 1 | SecuX V20 |
| Tangem | 46.0 | 1 | Tangem Wallet |
| Arculus | 41.0 | 1 | Arculus |
| GridPlus | 40.0 | 1 | GridPlus Lattice1 |
| BC Vault | 30.0 | 1 | BC Vault |
For the change history see CHANGELOG.md.
Last updated: October 15, 2026. Always verify current specifications on official sites before purchase.
Merchant Feed (SEO agents)Click to expand
merchant-center.xml — Verified USD pricing for hardware wallets. Exclusions: MERCHANT_FEED.md