Bitcoin Wiki - User contributions [en]

Wallet

2020-12-31T09:25:57Z

Ellipalwallet:

A Bitcoin '''wallet''' is a collection of private keys but may also refer to [[Clients|client software]] used to manage those keys and to make transactions on the Bitcoin network.

This page covers various wallet formats in use.

=== [[Bitcoin Core]] ===

The original Bitcoin client stores private key information in a file named '''wallet.dat''' following the so called [https://bitcointalk.org/index.php?topic=4448.0 "bitkeys"] format.

The wallet.dat file contains your private keys, public keys, scripts (which correspond to addresses), key metadata (e.g. labels), and the transactions related to your wallet. If you have an HD wallet, it also includes the HD seed and the derivation paths for each private key.

It contains:

* keypairs for each of your [[address|addresses]]
* transactions done from/to your addresses
* user preferences
* default key
* reserve keys
* [[Accounts_explained|accounts]]
* a version number
* [[Key pool]]
* Since 0.3.21: information about the current best chain, to be able to rescan automatically when restoring from a backup.

The wallet.dat file is located in the [[data directory|Bitcoin data directory]] and may be [[Wallet_encryption|encrypted with a password]].

It is intended that a wallet file be used on only one installation of Bitcoin at a time. Attempting to clone a wallet file for use on multiple computers will result in "weird behavior"<ref>[http://bitcointalk.org/index.php?topic=5324.msg77896#msg77896 Multiple instance of bitcoin with the same wallet]</ref>.

The format of this file is Berkeley DB. Tools that can manipulate wallet files include [[pywallet]].

=== [[Armory]] ===

The Armory client uses a custom [[Deterministic wallet]] format [https://www.bitcoinarmory.com/wallet-format/ described here] and runs on top of [[Bitcoin Core]].

=== [[Bitcoin Wallet]] ===

[[File:bitcoin_wallet.png|192px]] Bitcoin Wallet uses the bitcoinj [http://code.google.com/p/protobuf/ protobuf] format for its wallet file. However, due to Android isolation of applications, it is impossible to access the wallet file as a non-root user.

=== [[Blockchain.info#Wallet|Blockchain.info]] ===

Blockchain.info offers a [[Browser-based_wallet#Hybrid_e-wallets|hybrid eWallet]] called "My Wallet". It use a plain text [https://blockchain.info/wallet/wallet-format JSON wallet format]. Private keys Keys are stored in base58.

=== [[Denarium.com]] ===

Denarium is Physical Bitcoin coin manufacturer. Denarium produces easy, handy and secure wallets in a coin form. The private key is stored under a security seal without password protection. Denarium also offers a trustless multisignature coins, which eliminates the need to trust the manufacturer.

=== [[Ledger Wallet]] ===

Ledger Wallet manufactures various hardware wallets.
=== [[Blockchain_App_Factory|Blockchain App Factory]] ===

Blockchain App Factory offers Whitelabel cryptocurrency wallet with the latest features, unrivaled security, and user-friendly design to safeguard your cryptocurrencies and monitor them 24/7.

=== [[Multibit]] ===

Multibit HD (the current version) uses a [[BIP 0032]] (type 2) [[Deterministic wallet]] with the [https://www.multibit.org/en/help/hd0.1/files.html format described here]. The "Classic" version used the bitcoinj [https://github.com/google/protobuf protobuf] wallet file.

=== [[Blocktrail]] ===

Blocktrail offers a [[BIP 0032]] (type 2) [[Deterministic wallet]] and for added security also implements [[Multisignature]] wallet technology.

=== [[TREZOR]] ===

TREZOR is an isolated hardware environment for offline transaction signing and using a small display you can visually verify the transaction contents.

=== [https://opendime.com Opendime] ===

Opendime is a small USB stick that allows you to spend Bitcoin like a dollar bill. Pass it along multiple times. Connect to any USB to check balance. Unseal anytime to spend online. Trust no one.

=== [[Wasabi Wallet]] ===

'''Wasabi Wallet''' is an open-source, non-custodial, '''privacy-focused''' Bitcoin wallet for Desktop, that implements trustless '''[[CoinJoin]]'''. The CoinJoin coordinator (run by zkSNACKs Ltd., the company that is sponsoring the development of Wasabi) cannot steal from, nor breach the privacy of the participants.

The package includes built-in [[Tor]] and, by default, all traffic between the clients and the server goes through it, so IP addresses are hidden and privacy of the users is respected. Under normal conditions, Wasabi Wallet never leaves Tor onion network and it never uses Tor exit relays, significantly decreasing the network attack surface.

Wasabi also includes all standard privacy tech like a Hierarchical [[Deterministic wallet]] and [[address reuse]] avoidance, as well as mandatory coin control and labeling. The wallet uses BIP-158 [[Client-side block filtering]] to obtain its own transaction history in a private way and it has a one-click partial full node integration as it ships with Bitcoin Knots.
If the user already has a Bitcoin full node on a local or remote device, then it is possible to specify the IP address and port, or the Tor onion service, and Wasabi will use it to verify and enforce rules of Bitcoin.

In addition to this, it has advanced cutting-edges features like:
* Opt-in [[PayJoin]]
* Dust attack protections
* Custom change address
* Anti wallet fingerprinting

=== ELLIPAL Titan Cold Wallet ===
[[File:Ellipal-titan-cold-wallet.jpg|300px|thumb|left|ELLIPAL Titan]]

ELLIPAL Titan cold wallet is an air-gapped hardware device that not connect to any kind of network, like WIFI, Bluetooth, NFC, 3~5G and etc, stores user’s private keys in a completely isolated environment, keeping absolute protection against remote attacks. ELLIPAL Titan Cold Wallet works with ELLIPAL mobile App to secure and manage your cryptocurrency. Information is transferred between the cold wallet and App via QR code only.

Main features:
* 100% Internet Isolated Cold Wallet, fully isolated components, can never be connected to another device
* Anti-Tamper feature - data automatically deleted upon detection of a breach
* 4" Screen with touch panel, PIN-code and gesture pattern protect
* Supporting 36 coins and more than 7,000 tokens
* Decentralized Finance: [https://www.ellipal.com/pages/buy-crypto buy cryptocurrency], exchange, and stake of coins.
* Verifiable and secure QR code [https://github.com/ELLIPAL?tab=repositories Github]

[https://www.ellipal.com/pages/coldwallet Shop Cold Storage Wallet] | [https://www.ellipal.com/pages/coin-list/ Cold Storage Coins List] | [https://www.ellipal.com/pages/reviews ELLIPAL Reviews]

==See Also==

* [[Transaction fees]]
* [[Securing your wallet]]
* [[EWallet]]
* [[Deterministic Wallet]]
* [https://bitcoin.org/en/choose-your-wallet Choose your wallet]
* [https://allprivatekeys.com/wallet.dat wallet.dat files with balance and lost password]

==References==
<references />
[[Category:Wallets| ]]

Wallet

2020-12-31T09:25:00Z

Ellipalwallet: /* ELLIPAL Titan Cold Wallet*/

File:Ellipal-titan-cold-wallet.jpg

2020-12-31T09:09:13Z

Ellipalwallet: ELLIPAL TITAN cold wallet

ELLIPAL TITAN cold wallet

Cold storage

2020-12-31T03:46:36Z

Ellipalwallet: /* ELLIPAL Titan Cold Wallet*/

'''Cold storage''' in the context of Bitcoin refers to [[Storing bitcoins|storing Bitcoins]] offline and spending without the [[private key]]s controlling them ever being online. This resists theft by hackers and malware, and is often a necessary security precaution especially dealing with large amounts of Bitcoin.

For example, a Bitcoin exchange which offers an instant withdrawal feature, and might be a steward over hundreds of thousands of Bitcoins. To minimize the possibility that an intruder could steal the entire reserve in a security breach, the operator of the website keeps the majority of the reserve in ''cold storage'', or in other words, not present on the web server or any other online computer. The only amount kept on the server is the amount needed to cover anticipated withdrawals in one day.

Special-purpose [[hardware wallet]]s are also a kind of cold storage solution but this article will mostly deal with cold storage using general purpose computing hardware.

See [[Links to Storage Methods#Cold Storage Methods]] for a review of published cold storage methods.

== Conceptual How-to ==
# Set up an online computer which has an internet connection, and an offline computer which is securely [https://en.wikipedia.org/wiki/Air_gap_%28networking%29 airgapped].
# The offline computer must have bitcoin wallet software installed. Use the software to generate a wallet and write down its [[seed phrase]] on paper or another medium.
# Obtain the [[Deterministic wallet#Master public key|master public key]] of the wallet you just generated and transfer it to the online computer. Use it to create a watch-only wallet on the online computer.
# The watch-only wallet on the online computer can provide bitcoin [[address]]es used for receiving money, and can tell the user when [[transaction]]s are received and how many [[confirmation]]s they have.
# For spending have the watch-only wallet create an [[transaction]] without the signatures which makes it valid.
# Transfer the unsigned transaction to the offline computer and use the wallet software to sign the transaction.
# Transfer the now-fully-signed transaction to the online computer and broadcast it to the bitcoin network. The watch-only wallet will tell you when the transaction has [[confirmation]]s.

== Setting up a secure offline computer ==

A good solution for making a secure offline computer is to buy an old, used laptop or phone built by a reputable manufacturer. Then completely wipe it, do not connect to the internet and install only an operating system and bitcoin wallet from a USB drive<ref>https://twitter.com/peterktodd/status/1078350142644731904</ref>.

Another option is to use a live operating system as the offline computer. This option is perhaps less secure, as sophisticated malware may be able to survive the live OS boot, but the method may be more convenient.

For some people other attacks must be considered. Wiping a computer may not be enough to remove threats of HDD firmware reprogramming, BIOS reprogramming or any other memory which persists after a clean reinstallation of the system<ref>https://www.reddit.com/r/Bitcoin/comments/a8m031/proof_of_keys_proof_of_trust_bitcoin_independence/ecdz47t/</ref>.

If the offline and online computer are kept close together (in the same room) then theoretically information can still be transmitted past the air gap using certain sidechannels like: RF, audio, light, magnetic, thermal. For further details see the wikipedia article on [https://en.wikipedia.org/wiki/Air-gap_malware Air-gap malware]. For this reason it could be a good idea to keep the offline and online computers physically far apart, and unplug the power cable from the laptop so it runs on battery power only.

When signing a transaction on the offline computer, make sure that destination [[address]]es are really correct. Malware on the online computer could swap out the address with an address belonging to the attacker. It could even partially brute-force the [[address]]es so that a few of their characters match, so check the ''entire'' address.

== Wallet software ==

The wallet software used for cold storage must support watch-only wallets and offline signing. Ideally the online wallet would be backed by a [[full node]] for the [[Full node#Why should you use a full node wallet|privacy, security and validation benefits]].

== Transferring data between offline and online ==

Cold storage requires on transferring master public keys and partially-signed transactions between the offline and online computers. There are several methods to do this:

=== USB flash drive ===

The data can be stored on a USB flash drive and passed between the computers. The advantages are speed and convenience. A disadvantage is that the USB interface still has an attack surface. Sophisiticated malware used in cyberwarface such as [https://en.wikipedia.org/wiki/Stuxnet Stuxnet] and [https://en.wikipedia.org/wiki/2008_cyberattack_on_United_States agent.btz] used USB flash drives to cross an airgap. These kind of attacks may not be a concern if the aim is to secure smaller amounts.

The [https://en.wikipedia.org/wiki/SecureDrop SecureDrop] platform for securely leaking documents to journalists also uses USB drives for secure communication.

=== QR codes ===

The data can be encoded into QR codes and each computer can be equipped with a camera for scanning them. Advantages are speed and conveniance; QR codes are also believed to have a smaller attack surface than USB flash drives. A major disadvantage is that QR codes have size limits and so may not be able to encode larger bitcoin transactions, although the transactions could be split up into multiple chunks and recombined at the other end.

=== Transcribing by hand ===

This method involves displaying the data on screen and either 1) typing it with the keyboard of the other computer or 2) writing it down on paper and then typing into the other computer. The advantage is that any security issues of USB interfaces or cameras are completely avoided. The disadvantage is speed as this method is very very slow; bitcoin transactions can be tens of kilobytes in size and each character would need to be carefully copied without mistakes.

== Private key backup storage ==

This article only recommends using [[seed phrase]]s (possibly with [[Seed phrase#Two-Factor Seed Phrases|encryption]]) to store private key backups. Seed phrases written into metal or on paper support [[Deterministic wallet|deterministic wallets]] and encryption. As seed phrases use natural language words, they have excellent error correction. Words written in bad handwriting can often still be read. If one or two letters are missing or unreadable the word can often still be deduced. The word list that the seed phrase words are drawn from is carefully chosen so that the first four letters of each word are enough to uniquely identify it.

Other methods are discussed here for completeness.

Raw [[private keys]] written on a piece of paper:
* Anyone who can see it, can steal it.
* Handwriting can be hard to read or completely illegible, especially when mixing upper and lower-case letters.
* Human error in transcription can cause errors on end product, many private key formats can fail even if a single letter is transcribed incorrectly.
* Paper can rot, be torn, burn, or be smoke damaged.
* Doesn't support [[Deterministic wallet|deterministic wallets]], only a single keypair is stored.

Printed on a piece of paper:
* Anyone who can see it, can steal it
* Non-laser printer ink can run if paper gets wet
* The printer itself is a security risk - some have internet connections, wifi, and disk memory.
* Paper can rot, be torn, burn, or be smoke damaged

On laminated paper:
* Anyone who can see it, can steal it
* Lamination is prone or degradation over time and puncture or cuts that could allow moisture to get trapped in the paper and cause deterioration or rotting in some circumstances - store in cool dry place
* Can burn or be smoke damaged
* 'Fireproof' & 'Fire-resistant' boxes can help protect paper in a small house fire but be warned that they can sometimes fall apart in the fire and get wet if the fire is put out with water.
* Remember people can just carry out a small safe.

Engraved / etched/ ablated / stamped on a piece of metal:
* Anyone who can see it, can steal it
* Some metals can deteriorate or corrode, choose a good metal; also store your metal away from direct contact other metals. Some metals that are corrosion resistant have low melting points, are extremely expensive, or hard to machine.
* Metals can still deform or melt from heat, destroying any engraved SK. "Most house fires do not burn hotter than 1,200 degrees Fahrenheit. This temperature is typically associated with the hottest portion of a home, which is in the roof area. Homes that burn for longer than 30 minutes or consist of multiple levels sometimes burn at higher temperatures."
* You want to pick a metal that won't be destroyed by a fire. So magnesium, tin, and lead are all out as engraving materials.
Silver, gold, copper, brass, bronze, nickel, cobalt, would survive the housefire fire unmelted. Some Aluminium alloys can survive but you have to have the right ones. At around 1500° Steel and Nickel should be okay. Titanium is above the housefire range and so is tungsten, however tungsten rings are known to shatter due to the brittle nature of the very hard metal.

Stored digitally on a computer:
* Computers can crash, making data recovery expensive
* Data can still technically be recovered after a system is abandoned by the user. In some cases data can be recovered after multiple overwriting attempts and physical destruction (as long as the attacker can get all or most the pieces) so if you copy files to a new computer and ditch the old one, be careful.
* Can burn or be smoke damaged
* A traditional hard disc drive can have data corrupted by powerful magnetic fields and can physically shatter
* A non-negligible amount of HDDs suffer from factory defects that will cause them to fail unexpectedly during their lifetime
* Accidents can happen that could result in loss of data
* Solid state drives (SSDs) will lose data if unpowered, they may last years before this becomes a problem but it is unwise to store long-term data in unpowered SSDs
* If connected to internet it is another attack vector and the safety is only as good as the encryption used; I don't know what I would recommend but it wouldn't be BitLocker. Someone could be trying to break into the computer constantly. Even with good encryption if the machine or location is compromised the key could be stolen as soon as it is decrypted.
* There are a lot of ongoing threats with computers, from 0-day exploits to firmware exploits and malicious USB cords
* External hdds are good for storage for a few years at least if stored properly
* If not connected to internet, safety is only as good as the physical protection encryption used; could someone break into the location and copy the data without anyone noticing?

Stored digitally on CD, floppy disk, laserdisc, or mini-disc
* Plastics break down over time and with exposure to heat, humidity, regular light, all sorts of chemicals, even the oxygen in the air. This can lead to the loss of your data when stored on a medium made of plastic or written/printed on plastic.
* Can burn or be smoke damaged
* Can be physically damaged, making data recovery expensive or even impossible
* Magnetic media (tapes, floppy disc) can be damaged by magnets
* Data can become difficult to recover if the software and/or hardware to decode is old, don't use proprietary formats

Stored digitally on a flash drive
* Can break and have to be physically repaired before use
* Rapidly changing magnetic fields (See MRIs) can damage the data stored on flash drives
* Can burn or be smoke damaged
* Can become corroded from salt water or some atmospheric conditions
* If they break apart, some lighting conditions can cause data corruption (you can also put them back together and often still get the data)
* Different devices are all different, even similar devices from the same production batch can be different. There are large quality differences in drives but I am assuming you aren't using these for anything but storage.
* There are some fake flash drives that look like they saved the data but you can't get it back later
* Flash drives are not advised for long term storage; they can be used as one part of a multi-medium-location-format plan.

== Comparison between [[multisignature]] and cold storage for security ==

Cold storage aims to reducing the chance of failure due to hackers or malware. [[Multisignature]] aims to avoid a single point of failure. It is entirely possible to combine the two techniques, and create cold storage [[multisignature]] wallets.

== Commercial Cold Storage Wallet ==

This page is an attempt to summarize all the well known cold storage wallets.

=== ELLIPAL Titan Cold Wallet ===
[[File:Ellipaltitan.jpg|300px|thumb|left|ELLIPAL Titan]]

ELLIPAL Titan cold wallet is an air-gapped hardware device that not connect to any kind of network, like WIFI, Bluetooth, NFC, 3~5G and etc, stores user’s private keys in a completely isolated environment, keeping absolute protection against remote attacks. ELLIPAL Titan Cold Wallet works with ELLIPAL mobile App to secure and manage your cryptocurrency. Information is transferred between the cold wallet and App via QR code only.

Main features:
* 100% Internet Isolated Cold Wallet, fully isolated components, can never be connected to another device
* Anti-Tamper feature - data automatically deleted upon detection of a breach
* 4" Screen with touch panel, PIN-code and gesture pattern protect
* Supporting 36 coins and more than 7,000 tokens
* Decentralized Finance: [https://www.ellipal.com/pages/buy-crypto buy cryptocurrency], exchange, and stake of coins.
* Verifiable and secure QR code [https://github.com/ELLIPAL?tab=repositories Github]

[https://www.ellipal.com/pages/coldwallet Shop Cold Storage Wallet] | [https://www.ellipal.com/pages/coin-list/ Cold Storage Coins List] | [https://www.ellipal.com/pages/reviews ELLIPAL Reviews]

== See also ==
* https://bitzuma.com/posts/a-gentle-introduction-to-bitcoin-cold-storage/
* https://www.lopp.net/bitcoin-information/security.html
* [[BitKey]]
* [[How to set up a secure offline savings wallet]]
* [https://maxtaco.github.io/bitcoin/2014/01/16/how-jason-bourne-stores-his-bitcoin/ How Jason Bourne Stores His Bitcoins]
* [http://codinginmysleep.com/bitcoin-cold-storage-in-plain-english Bitcoin Cold Storage In Plain English] by David Perry
* [http://www.offlineaddress.com/?site=about#security-risk Security of private key] offlineaddress.com

==References==
<references />
[[Category:Introduction]]
[[Category:Security]]

Hardware wallet

2020-12-17T06:18:34Z

Ellipalwallet: /* ELLIPAL Titan Cold Wallet */

A '''hardware wallet''' is a special type of [[wallet|bitcoin wallet]] which stores the user's private keys in a secure hardware device.

They have major advantages over standard software wallets:

* private keys are often stored in a protected area of a microcontroller, and cannot be transferred out of the device in plaintext
* immune to computer viruses that steal from software wallets
* can be used securely and interactively, private keys never need to touch potentially-vulnerable software
* much of the time, the software is open source, allowing a user to validate the entire operation of the device

This page is an attempt to summarize all the known developments of hardware wallets that can use Bitcoin as part of their operation.

== Security risks ==

To date there have been no verifiable incidents of Bitcoins stolen from hardware wallets. Hardware wallets are relatively new, but at least for the time being they have maintained a good track record, unlike the numerous incidents of Bitcoin theft from Internet-connected computers.

However, it's important to understand that hardware wallets are a high value target and depend on various assumptions holding true to maintain security. They are not a silver bullet, and there are several realistic ways in which a hardware wallet can fail to protect your Bitcoin. These risks need to be carefully considered when deciding how much trust to place in a hardware wallet, and which hardware wallet to buy.

How a hardware wallet could fail to protect your Bitcoin:

# '''Malware swaps recipient Bitcoin addresses''': a hardware wallet won't protect you from being tricked into sending Bitcoin to the wrong address. For example, malware on a PC could monitor for high value transactions and then swap out the recipient's authentic Bitcoin address for an address controlled by the attacker. When the stakes are high, multi factor (e.g., over the phone) confirmation of a recipient's Bitcoin address is recommended.
# '''Insecure RNG ([https://en.wikipedia.org/wiki/Random_number_generation Random Number Generator])''': hardware wallets rely on the security of an RNG, often embedded in hardware, to generate your wallet's private keys securely. Unfortunately, it is notoriously difficult to verify the true randomness of the RNG. An insecure RNG may create wallet keys that can later be recreated by an attacker, by generating psuedo-randomness that would seem statistically indistinguishable from true randomness yet still be predictable to an advanced attacker. An RNG may become insecure as a result of malicious weakening or an unintentional mistake. This failure mode is common to any wallet generation procedure in which the true randomness of the source of entropy being used can not be verified.
# '''Imperfect implementation''': the security of all computing devices relies on the quality of their implementation. Hardware wallets are no exception. Bugs at the software, firmware or hardware level may allow attackers to break into a hardware wallet and gain unauthorized access to secrets. Even if the design is perfect, proving the security of a hardware or software implementation is a very hard, mostly unsolved problem. To date, no wallet in existence is implemented using provably correct software.
# '''Compromised production process''': even a perfect software and hardware implementation of a hardware wallet would be vulnerable to a corrupt production process that introduces intentional or unintentional holes into the final product. The introduction of hardware backdoors is a [https://www.wired.com/2016/06/demonically-clever-backdoor-hides-inside-computer-chip/ real concern] for high risk financial and military applications.
# '''Compromised shipping process''': a compromised fulfillment process may substitute or modify secure devices for superficially identical but insecure replacements. Government programs that intercept hardware and modify them in route to insert backdoors [https://arstechnica.com/.../photos-of-an-nsa-upgrade-factory-show-cisco-router-getting-implant/ are known to exist].

In summary:

* While not a silver bullet hardware wallets can still be extremely useful, assuming you take care to use a good one: an authentic device manufactured by trustworthy, technically competent security experts with a good reputation (e.g., [[TREZOR]]).

* [[Cold storage]] solutions implemented with open source software and general purpose hardware (e.g., [[BitKey]], Pi Wallet), using a verifiable source of entropy such as physical dice may provide superior security for some use cases (e.g., long term savings).

== Connecting to a full node ==

By default, most hardware wallets instruct the user to connect to the manufacturer's own web interface. The web page cannot steal the user's private keys but can spy on them or trick them into accept fake payments.

Hardware wallets only keep the [[private keys]] safe and create spending transactions; they cannot tell you if you have actually received coins and in what quantity. Bitcoin's security model also requires that [[full node]] wallets are used. If not, somebody could pay you with a transaction of something other than bitcoin. If bitcoin is digital gold then a full node wallet is your own personal goldsmith who checks that the incoming payments are actually real. Also the third-party wallet will see all your [[Address|bitcoin addresses]] so this is very damaging to your privacy.

Most hardware wallets can be connected to [[Electrum]] bitcoin wallet. Electrum can be connected to your own [[Electrum#Electrum Personal Server|full node via a server]].

See also: [[Full node#Why should you use a full node wallet]]

== Commercial hardware wallets (ordered chronologically) ==

=== [[Trezor|Trezor One]] ===
[[File:Trezor-tx.jpg|300px|thumb|left|Confirming the transaction with Trezor]]

[[Trezor]] is a secure bitcoin storage and a transaction signing tool with open source hardware and software. The private keys are generated by the device and never leave it thus they cannot be accessed by a malware.

It uses a deterministic wallet structure which means it can hold an unlimited number of keys ([[BIP 0032]]/[[BIP 0044]]). A recovery seed is generated when the device is initialized. In case Trezor gets lost or stolen, all its contents can be recovered using this seed (private keys, bitcoin balance and transaction history) into a new device or another [[BIP 0039]]/[[BIP 0044]] compatible wallet.

Trezor also introduced a unique way of PIN entering preventing keyloggers from recording it even when entered on a compromised computer. An encryption passphrase can be set on top of the PIN protection. More passphrases can be used for plausible deniability.

Trezor One offers everything needed to protect cryptocurrency funds together with advanced features like [https://wiki.trezor.io/User_manual:Password_Manager Password manager] or [https://wiki.trezor.io/User_manual:Two-factor_Authentication_with_U2F U2F two-factor authorization].

''See also [[Hardware wallet#Trezor Model T|Trezor Model T - next-generation cryptocurrency hardware wallet]]''

[https://shop.trezor.io Trezor E-shop] | [https://wiki.trezor.io Trezor Wiki] | [https://trezor.io Trezor Homepage]

 

=== KeepKey: Your Private Bitcoin Vault ===
[[File:keepkey.jpg|300px|thumb|left|KeepKey showing a bitcoin transaction that needs to be manually approved.]]

KeepKey is a USB device that stores and secures your bitcoins. When you entrust KeepKey with your money, each and every bitcoin transaction you make must be reviewed and approved via it's OLED display and confirmation button.

KeepKey has a unique recovery feature utilizing a rotating cipher to restore private keys with a [[BIP 0039]] recovery seed. This means it is not necessary to store your private keys on KeepKey: the recovery process is secure enough so that KeepKey can be used as a transaction device for paper backups.

[https://www.keepkey.com keepkey.com]

 

=== Opendime: Bitcoin Credit Stick ===

[[file:Opendime.jpeg|300px|thumb|left|Opendime Package]]

The 1st Bitcoin Bearer Bond or just call it a "Bitcoin Stick"

Opendime is a small USB stick that allows you to spend Bitcoin like a dollar bill. Pass it along multiple times.
Connect to any USB to check balance. Unseal anytime to spend online. Trust no one.

It comes in the shape of a mini USB, and [[Opendime-ui.png|setting it up is astonishingly quick and simple]]. You plug OpenDime into a USB port, and it behaves just like a USB drive with a tiny amount of storage. In its folder, is a web page. You open the webpage in your browser, and there’s only one instruction to follow: “Drop a file onto the drive”. Once you do that, the OpenDime automagically generates a unique address for you to receive Bitcoin with.

[https://opendime.com Opendime.com]

* [https://opendime.com/#faq Opendime FAQ]
* You can watch a [https://www.youtube.com/watch?v=9UFF9d3Y1BY video here]
* Read this [https://medium.com/@beautyon_/exquisite-opendime-ad1195a2790e review]
* Multi-language user interface: 中文 • 日本語 • English • Portuguese • Français • Deutsch • Русский
* Works as USB drive with no need for software
* [https://github.com/opendime/electrum Opendime Electrum plugin]
* [https://github.com/opendime/ Opendime source files and key verification]

 

=== Coldcard: Ultra-secure Bitcoin Hardware Wallet ===

[[file:Coldcard.png|300px|thumb|left|Coldcard Front and Back]]

* Coldcard is an easy to use, ultra-secure, open-source and affordable hardware wallet that is easy to back up via an encrypted microSD card. Your private key is stored in a dedicated security chip. MicroPython software design allows you to make changes.
* BIP39 based, which means you can backup the secret words onto paper, and have lots of sub-accounts and unlimited independent payment addresses. Now with BIP39 passphrase support, unlocking up to 5.9e197 additional wallets from the same seed words! It knows how to understand transactions, so you can see what you are approving.
* The first "Partially Signed Bitcoin Transaction Format" - PSBT (BIP 174) native wallet which can be used completely offline for its entire lifecycle. See HWI for Bitcoin Core support!
* True air-gap cold operation via MicroSD sneakernet or standard via USB

[http://www.coldcardwallet.com Coldcardwallet.com]

* [https://coldcardwallet.com/faq Coldcard FAQ]
* [https://coldcardwallet.com/docs Coldcard Docs]
* [https://github.com/coldcard/firmware Coldcard Source Code]

 

=== CoolWallet: The Ultimate Bitcoin Safe ===


[[File:CoolWallet in the box.jpeg|300px|thumb|left|CoolWallet showing Launch App, waiting for user to connect with smartphone via Bluetooth]]

CoolWallet is a credit card sized Bluetooth device that stores and secures your bitcoins and private keys. It fits in your wallet and works wirelessly.

Every Bitcoin transaction must be manually confirmed and approved through its e-paper display and button.

CoolWallet only acknowledges the paired smartphone. Whoever stole the CoolWallet are not able to steal any bitcoins. Using recovery Seed can restore all your bitcoins in case you lost the device.

[https://coolbitx.com coolbitx.com] | [https://github.com/CoolBitX-Technology/coolwallet-ios Source and specifications]

 

=== BlochsTech card: Your user friendly Bitcoin wallet ===


[[file:BlochsTech Bitcoin card hardware wallet.jpg|300px|thumb|left|Graphic printed on front of BlochsTech cards.]]

The BlochsTech open Bitcoin card is an open protocol secure hardware Bitcoin wallet your grandmother could use.
For shops it's faster to accept than slow QR code based wallets and more reliable as it works offline.

Currently it's of course in a novelty phase like Casascius coins (of which thousands were sold),
however in the long run it is fully capable of functionally replacing the VISA system in all nations.

[http://www.BlochsTech.com BlochsTech.com]

 

=== BitLox Bitcoin Hardware Wallet ===
[[file:Bitlox.jpg|300px|thumb|left|BitLox Bitcoin Hardware Wallet]]

BitLox is a metal cased (aluminum or titanium) bitcoin hardware wallet that works with their own web based wallet by USB and apps for iPhone and Android using Bluetooth LE.

At present it is the only bitcoin hardware wallet you can buy that works with iPhone. The device weighs one ounce and is the size of a credit card 4 mm thick.

Bitlox allows you to set up hidden wallets. Unlike other hardware wallets your seed is never displayed on a connected computer or phone but only on the Bitlox. All your wallet, device and transaction PINs are only entered on the BitLox and never on any app.

BitLox has also implemented several advanced security features not available on any other bitcoin hardware wallet.

[http://www.bitlox.com bitlox.com]

 

=== Ledger Nano S ===
[[File:ledger_wallet_nanos_photo.png|300px|thumb|left|Ledger Wallet Nano S]]

Ledger Nano S is a secure Bitcoin hardware wallet. It connects to any computer through USB and embeds a built-in OLED display to double-check and confirm each transaction with a single tap on its buttons. It is architectured around a Secure Element (ST31 family) and built on top of the BOLOS platform, a powerful and flexible Operating System allowing the secure execution of multiple Open Source applications in full isolation.

Main features:
* cryptographic secrets protected by a secure chip
* open source embedded Bitcoin app
* Confirmation of transactions on the embedded screen
* Built-in 4 digits PIN security lock
* Built-in onboarding (seed generation and recovery)
* BIP39 seed (12/18/24 words), easy backup and restoration
* Multi-apps support: FIDO U2F, GPG, SSH…
* USB connectivity
* Foldable and compact casing

[https://www.ledgerwallet.com/products/12-ledger-nano-s Ledger Nano S product page]

 

=== Ledger Nano X ===

[[File:Ledger Nano X.png|300px|thumb|left|Ledger Wallet Nano X]]
Ledger Nano X is a secure hardware wallet. It features Bluetooth Low Energy (BLE) connectivity enabling it to be used with Android or iOS devices without the need of a cable. 
Main features:
* Multi-services: Hardware Wallet, Cryptographic Platform, Password Manager, Second Factor authenticator
(FIDO)
* Comply with several cryptocurrencies
* USB connectivity
* BLE v5.0 connectivity
* Open Source Device App: all Device Apps developed by Ledger can be reviewed and verified by End-Users
* Developer friendly: develop a Device App and then install it on the Ledger Nano X
* Comply with the main BIP standards: [BIP32], [BIP39] and [BIP44]
* Multi-platform: Windows (7+), Mac (10.9+), Linux or Chrome OS
* OLED screen: to verify the transaction data (amount, address)
* Buttons: used to get the End-User’s consent relative to sensitive operations like unlocking the device or processing a transaction
* PIN: to unlock the Ledger Nano X
* Plausible deniability: an additional PIN linked to a passphrase can be defined to create an hidden account
* Genuine PSD: cryptographic attestation mechanisms ensuring that the Ledger Nano X is a genuine one
* Post-issuance capability: all piece of software (MCU Firmware, SE Firmware, Device Apps) can be securely updated

[https://shop.ledger.com/products/ledger-nano-x Ledger Nano X product page]

 
=== [[Prokey|Prokey Optimum]] ===
[[File:Optimum-in-hand.jpg|300px|thumb|left|WebUSB-enabled hardware wallet, the Prokey Optimum]]
The Prokey Optimum is a secure cryptocurrency hardware wallet that connects to any computer and android phones through USB and users required to always press OK button on device to confirm right addresses, amounts, and fees before making any transactions.
It focuses on the following features :

* Secure Firmware: Genuine firmware that implements mutual authentication between the device and the server to prevents supply-chain attacks.
* All-Inclusivity: No third-party wallets, manage everything on a single platform
* Supports Bitcoin, Ethereum, ERC20 Tokens, OMNI Layer and more cryptocurrencies, It's the first hardware wallet that fully support USDT as both Omni and ERC20 Tokens
* In-Browser Operation: WebUSB-based operations renders no need of additional download of bridges, applications, extensions, or executable files

Equipped with other features like passphrases and offline recovery seed checking, the Prokey Optimum offers maximum security and also is user-friendly to provide the best experience when dealing with cryptocurrency.

[https://prokey.io/ Homepage of Prokey Hardware Wallet]

 

=== Secalot ===
[[File:secalot_wallet.png|300px|thumb|left|Secalot]]

Main features:
* Software and hardware are fully open sourced.
* Utilizes a secure microcontroller with a high performance dedicated cryptographic co-processor.
* Integrates with the popular Electrum wallet.
* PIN-code protected.
* Confirm transactions with a touch button press on the device.
* Supports P2PKH, P2SH, and segWit transactions.
* Updatable firmware.
* Extra functionality: OpenPGP smart card, FIDO U2F authenticator, one-time password generator.

Website: [https://www.secalot.com www.secalot.com]

 

=== ELLIPAL - Airgapped hardware wallet with mobile support ===
[[File:Ellipal wallet.png|300px|thumb|left|ELLIPAL]]

ELLIPAL hardware wallet secures keys in cold storage without connections except for LCD screen. It works with companion mobile App via QR code.

Main features:
* Working with mobile phone via QR code
* Internet Isolated Cold Wallet
* Supporting multi-currencies and more than 7,000 tokens
* Supports P2PKH, P2SH, and segWit transactions
* 4" Screen with touch panel
* Support private key import
* PIN-code and gesture pattern protect
* Confirmation of transactions details on the screen
* BIP32/BIP39/BIP44
* iPhone and Android companion App: account management, market info and coin exchange.

[https://www.ellipal.com ELLIPAL Hardware Wallet Homepage] | [https://www.ellipal.com/pages/coin-list ELLIPAL Supported Coins]

 

=== ELLIPAL Titan Cold Wallet ===
[[File:Ellipaltitan.jpg|300px|thumb|left|ELLIPAL Titan]]

ELLIPAL Titan is the upgraded version of the ELLIPAL EC01 hardware wallet. Main upgrades are within the hardware which improves protection against physical attacks while keeping absolute protection against remote attacks. ELLIPAL Titan works with ELLIPAL mobile App to secure and manage your cryptocurrency. Information is transferred between the cold wallet and App via QR code only.

New additional features:
* IP65 metal sealed frame - Light water jet & dust protection
* Disassembly test: [https://www.youtube.com/watch?v=DuPcJudtd2o Video]
* Fully isolated components, can never be connected to another device
* USB port removed - no ports on the device
* Anti-Tamper feature - data automatically deleted upon detection of a breach
* Decentralized Finance: [https://www.ellipal.com/pages/buy-crypto buy cryptocurrency], exchange, and stake of coins.
* Verifiable and secure QR code [https://github.com/ELLIPAL?tab=repositories Github]

[https://www.ellipal.com/pages/coldwallet Buy Cold Wallet] | [https://www.reddit.com/r/ELLIPAL_Official/ ELLIPAL on Reddit] | [https://www.ellipal.com/pages/reviews ELLIPAL Reviews]

 

=== [[Trezor|Trezor Model T]] ===
[[File:Trezor-model-t-photo-front.jpg|300px|thumb|left|Trezor Model T]]

Trezor Model T is the premium version and next-generation cryptocurrency hardware wallet. In addition to the functionalities of Trezor One, it has a colored touchscreen for secure on-device input, modern design, an SD card slot, and some other more advanced features.
For more information see [https://wiki.trezor.io/Trezor_Model_T Trezor Model T] and this [https://trezor.io/#comparison comparison table]

[https://shop.trezor.io Trezor E-shop] | [https://wiki.trezor.io Trezor Wiki] | [https://trezor.io Trezor Homepage]

 

=== D'CENT Biometric Wallet - BLE enabled Hardware Wallet ===
[[File:DCENT_Biometric_Wallet.png|300px|thumb|left|D'CENT Biometric Wallet]]

D'CENT Biometric Wallet is a secure multi-cryptocurrency hardware wallet. It connects by using Bluetooth or USB to any mobile devices. The wallet is based on multi-IC architecture built on Secure Element(EAL5+) embedded with the SecureOS to provide robust security for the secure execution of multiple wallet applications.

Main features:
* Cryptographic secrets protected by a secure chip
* Large OLED (128x128) display for confirmation of transactions and QR Code for P2P transactions
* Built-in biometric sensor for authentication and also supports the PIN
* Built-in onboarding (seed and key generation in Secure Element)
* BIP39 seed (24 words), easy backup and recovery
* Easy and convenient FW update (no recovery is required after update)
* Bluetooth and USB connectivity

[https://dcentwallet.com D'CENT Wallet Homepage] | [https://medium.com/dcentwallet D'CENT on Medium] | [https://www.youtube.com/channel/UCKnYqiM3g3iaaAKcRZf-kbA D'CENT Youtube]

 

=== Cobo Vault - Air-gapped with QR code and Secure Element ===
[[File:Vault_pro.png|300px|thumb|left|Cobo Vault Essential/Pro/Ultimate]]

Cobo Vault is a completely air-gapped hardware wallet that uses verifiable QR codes to transmit transaction information back and forth with a mobile app. It houses an FIPS 140-2 Secure Element that uses four superimposed physical sources for true random number generation (TRNG). Private keys never leave the Secure Element when transactions are signed. Cobo Vault’s innovative Web Authentication process helps prevent supply chain attacks through double asymmetric encryption implementing our backend HSM server. Cobo Vault’s Secure Element’s BIP 32, 39, and 44 compliant firmware is open source ([https://github.com/CoboVault Github]).

Cobo Vault Essential, Pro & Ultimate Features:
* Air-gapped through auditable QR code data transmissions
* Secure Element physical entropy private key generation and side-channel attack prevention
* Open source Secure Element firmware (industry first)
* Detachable battery (industry first)
* MicroSD firmware upgrading
* 4-inch touchscreen

Cobo Vault Essential and Pro Features:
* AAA battery support to prevent battery failure
* Bitcon-only firmware version compatibility
* Better camera for smoother QR code transactions
* Features we will be adding (see the full product roadmap list in [https://medium.com/cobo-vault/second-gen-hardware-wallets-feature-support-c0aaf00a4216 our launch article])

Cobo Vault Pro Features:
* Fingerprint sensor for device unlock and transaction signing
* Upgraded self-destruct mechanism
* Rechargeable battery

[https://cobo.com/hardware-wallet Cobo Vault Homepage] | [https://medium.com/cobo-vault Cobo Vault on Medium] | [https://shop.cobo.com Cobo Vault Shop]

 

=== BitBox02: Swiss made open source ===
[[File:BitBox02.png.jpg|300px|thumb|left|BitBox02]]

The BitBox02 is a Swiss made, fully open source hardware wallet that enables you to independently generate and securely store your private keys to access and transact crypto assets. It has a dual-chip design and the security architecture has been independently audited.

* Easy backup and restore on microSD card
* OLED display and invisible touch sensors
* Plug in directly to computer/mobile with USB-C
* USB-C to A adapter and extension cable included
* Multiple cryptocurrency support: Bitcoin and [[altcoin]]s.
* U2F function for secure logins
* Bitcoin-only edition available; the limited firmware reduces the attack surface
* BIP-39 compatible
* Bech32 (Native segwit) compatible
* Sleek and minimalist design
* Made in Switzerland

[https://shiftcrypto.ch/bitbox02 BitBox02 product page] | [https://github.com/digitalbitbox Source code]

 

== Not purchasable hardware wallets ==

=== Ledger HW.1 - USB Smartcard Hardware Wallet ===
[[File:Btchip_dongle.jpg|220px|thumb|left|HW.1 inserted in a laptop]]

HW.1 is an implementation of a deterministic ([[BIP 0032]]) Hardware Wallet on a USB smartcard.

It is typically used as a blind secure device for multi signature transactions - holding a set of derived private keys and signing transactions without requiring user confirmation.

Power users can rely on it to confirm all transactions with a second factor scheme turning the dongle into a keyboard typing what the user is supposed to have signed, as a protection against malware.

It is also possible to customize HW.1 for more specific needs, such as creating a prepaid card without revealing the deterministic seed before it is received by the user, or securing bitcoin transactions on a server.

[https://www.ledgerwallet.com/products/3-ledger-hw-1 E-shop] | [https://ledgerhq.github.io/btchip-doc/bitcoin-technical.html Technical Documentation]

 

=== Ledger Nano - USB Smartcard Hardware Wallet ===
[[File:ledger_wallet_photo.jpg|300px|thumb|left|Ledger Wallet USB]]

Ledger Nano protects your Bitcoin data within a smartcard. Its micro-processor certified against all types of attacks (both physical and logical), and has been used in the banking industry for decades (think credit card chips). The device connects to your computer through the USB port and will do all the Bitcoin cryptographic heavy lifting such as signing transactions inside its secure environment. You can therefore use your Bitcoin account with maximum trust, even on an insecure or compromised computer.

The second factor verification of the transaction signature can be done either with a paired smartphone (Android, iOS) or a physical security card.

The Ledger Wallet Chrome application (available also on Chromium) provides an easy onboarding as well as a seamless user experience, and the Nano is compatible with numerous third party software: [[Electrum]], [[Mycelium]], [[GreenAddress]], Greenbits, [[Coinkite]] and Copay.

[https://www.ledgerwallet.com/products/1-ledger-nano Ledger Nano product page] | [https://github.com/LedgerHQ Source and specifications]

 

=== Ledger Unplugged - NFC Smartcard Hardware Wallet ===
[[File:ledger_unplugged_photo.jpg|300px|thumb|left|Ledger Unplugged NFC]]

The Ledger Unplugged is a credit card sized NFC hardware wallet. It embeds an open source Java Card app and is compatible with all NFC enabled Android phones.

The device can be used with Mycelium or Greenbits. In case of loss, you can restore it on any Ledger Wallet (Nano or another one) or all other compatible solutions (BIP 39).

[https://www.ledgerwallet.com/products/6-ledger-unplugged Ledger Unplugged product page] | [https://github.com/LedgerHQ/ledger-javacard Source code]

 

=== BWALLET TREZOR clone ===

[[File:BWALLET_Trezor_Clone.jpeg|200px|thumb|left|Chinese clone of Trezor]]

BWALLET is a clone of Trezor by a Chinese company.
Trezor code is open source and this device operates like a Trezor.
However, this product has been [https://www.reddit.com/r/Bitcoin/comments/2tyier/bwallet_review_by_trezor_developer/ reviewed by Marek aka Slush(Trezor developer)] and he has found some problems which makes this device less than 100% compatible, for example it doesn't work with [http://mytrezor.com myTREZOR.com] website and it does not work with Trezor official firmware.

[http://mybwallet.com MyBWALLET.com] | [http://www.bidingxing.com/en/bwallet Buy BWALLET]

 

=== Pi Wallet - cold storage ===
[[File:Piwallet.jpeg|300px|thumb|left|Pi-Wallet]]

The Pi-Wallet is a small computer with the [[Armory]] bitcoin client.

Transactions are signed offline, then transferred on a USB stick via [https://en.wikipedia.org/wiki/Sneakernet Sneakernet] to an online system for broadcasting.

[https://www.pi-wallet.com/ pi-wallet.com]

 

=== BitcoinCard Megion Technologies-Card based wallet ===
[[File:Bitcoincard-medley-large.jpg|400px|thumb|left|Bitcoin Card]]
[http://www.bitcoincard.org/ Bitcoincard Home Page]

[http://blog.bitinstant.com/blog/2012/6/19/our-discovery-in-vienna-the-bitcoin-card.html Excellent review by evoorhees]

Incorporates a e-paper display, keypad, and radio (custom ISM band protocol.) Unfortunately it is fairly limited in terms of transaction I/O, requiring a radio gateway or another bitcoincard wherever funds need to be transferred.

 

=== BitSafe - allten/someone42's hardware wallet ===
[[File:Bitsafe-wallet-sizecompare.jpg|200px|thumb|left|Bitsafe wallet]]
[https://bitcointalk.org/index.php?topic=152517.0 Final BitSafe announcement]

Signing transactions only, requires USB host software for transactions & USB power. Has a OLED display and Confirm/Cancel buttons. Evolved out of someone42's prototype below, and has significant contributions from someone42 as well.
 

=== Swiss Bank in Your Pocket - Hardware wallet ===
[[File:SBIYP.png|300px|thumb|left|Swiss Bank In Your Pocket]]

The Swiss Bank in Your Pocket is a Windows Desktop Application providing functionality for 5 Bitcoin Wallets and a Bitcoin Vault.

The Bitcoin Vault can only send Bitcoins to the Bitcoin Wallets with in the application. Each Bitcoin wallet can have up to 5 Receive addresses. The intuitive user interface is designed for ease of use. USB security key is required to make any type of transaction. frontend software is installed on windows. Package includes secure USB key, and an additional recovery USB key. So in case of an accident, customer will have an additional backup to access their wallets.

[https://swissbankinyourpocket.com/ swissbankinyourpocket.com]

 

=== BitBox 01 (Digital Bitbox) ===
[[file:Digital-bitbox.png|thumb|left|Digital Bitbox Hardware Wallet]]

* Secure hardware RNG & key storage using [http://www.atmel.com/Images/Atmel-8914-CryptoAuth-ATAES132A-Datasheet.pdf crypto element] with 50 year lifespan and an epoxy-filled case.
* Offline backup and recovery of [[BIP_0032|BIP-32]] seed with a micro SD card rather than [[BIP_0039|BIP-39]] phrase written on paper as in Trezor.
* Native software wallet client and ability to use a mobile phone for 2FA and to verify transaction details.
* Multisig out-of-the-box including Copay support.
* [https://github.com/digitalbitbox Open Source] ([https://github.com/digitalbitbox/mcu#digital-bitbox-firmware firmware], [https://github.com/digitalbitbox/mcu/blob/bf48984fd4a47d9ebf6814f7d01b078964587c7c/src/bootloader.c bootloader], [https://github.com/digitalbitbox/dbb-app desktop client]).
* Full FIDO U2F support (https://en.wikipedia.org/wiki/Universal_2nd_Factor)
* Made in Switzerland (a country with strong privacy laws) by [[Bitcoin Core]] developer Jonas Schnelli.

[https://digitalbitbox.com digitalbitbox.com]

 

=== someone42's original prototype ===
[[File:Someone42-wallet-prototype.jpg|300px|thumb|left|someone42's original prototype]]
[https://bitcointalk.org/index.php?topic=78614.0 Hardware Bitcoin wallet - a minimal Bitcoin wallet for embedded devices]

Signing transactions only, requires USB host software for transactions & USB power. All work is rolled into the above BitSafe wallet currently.
 
=== Other/Defunct but with good discussion: ===
* natman3400's BitClip Jun 2011 [https://bitcointalk.org/index.php?topic=24852.0 https://bitcointalk.org/index.php?topic=24852.0]
:Seems to have gone defunct around Dec 2011. Some good ideas though and seemed to have started on execution.
* jim618 hardware wallet proposal Apr 2012 [https://bitcointalk.org/index.php?topic=77553.0 Dedicated bitcoin devices - dealing with untrusted networks]
:Great discussion and good ideas from jim618. Also linked the following video:
* Prof. Clemens Cap's hardware wallet? (video:)[https://www.youtube.com/watch?v=IavQ-Wc8S1U Clemens Cap about electronic bitcoin wallet at EuroBit]
:Clemens Cap of Uni Rostock explains the Electronic Bitcoin wallet device he's working on. It's based on adafruit microtouch device.
* ripper234's discussion based on Yubikeys Aug 2012 [https://bitcointalk.org/index.php?topic=99492 Having a YUBIKEY as one of the parties for m-of-n signatures]
:The use of Yubikeys. They only support symmetric crypto, so you'd have to trust the host device.
* kalleguld's hardware wallet proposal Oct 2012 [https://bitcointalk.org/index.php?topic=115294.0 Proposal: Hardware wallet (Win 3 BTC)]
* Vaporware: Matthew N Wright's ellet [https://bitcointalk.org/index.php?topic=85931.0 ANN The world's first handheld Bitcoin device, the Ellet!] (Vaporware)

== Smart Card based wallets ==
This type of device requires complete trust in the host device, as there is no method for user input.
See [[Smart card wallet]]

== Related Resources ==
* [https://bitcoinnewsmagazine.com/best-bitcoin-hardware-wallet-2015/ Best Bitcoin Hardware Wallet 2015] - reviews of all bitcoin hardware wallets.
* [http://99bitcoins.com/trezor-vs-ledger-hands-hardware-wallets-review/ TREZOR vs. Ledger] - User reviews and Reddit feedback
* [https://bitcointalk.org/index.php?topic=125383.0 Hardware wallet wire protocol]: slush's Hardware wallet wire protocol discussion
* [https://bitcointalk.org/index.php?topic=19080.msg272348#msg272348 Re: Split private keys]: kjj's Todo List discussion for client protocol requirements
* [https://bitcointalk.org/index.php?topic=134277.0 Hardware Wallet Roundup]
* [https://www.buybitcoinworldwide.com/wallets/ Bitcoin Hardware Wallet Comparison] - information about using Bitcoin hardware wallets for cold storage.
* [https://www.weusecoins.com/bitcoin-ledger-wallet-review/ Ledger Wallet Review]

== See Also ==

* [[Storing bitcoins]]
* [[How to set up a secure offline savings wallet]]
* [[Cold storage]]

[[Category:Security]]
[[Category:Wallets| ]]
[[Category:Hardware]]

Hardware wallet

2020-12-17T06:13:12Z

Ellipalwallet: /* ELLIPAL - Airgapped hardware wallet with mobile support */

A '''hardware wallet''' is a special type of [[wallet|bitcoin wallet]] which stores the user's private keys in a secure hardware device.

They have major advantages over standard software wallets:

* private keys are often stored in a protected area of a microcontroller, and cannot be transferred out of the device in plaintext
* immune to computer viruses that steal from software wallets
* can be used securely and interactively, private keys never need to touch potentially-vulnerable software
* much of the time, the software is open source, allowing a user to validate the entire operation of the device

This page is an attempt to summarize all the known developments of hardware wallets that can use Bitcoin as part of their operation.

== Security risks ==

To date there have been no verifiable incidents of Bitcoins stolen from hardware wallets. Hardware wallets are relatively new, but at least for the time being they have maintained a good track record, unlike the numerous incidents of Bitcoin theft from Internet-connected computers.

However, it's important to understand that hardware wallets are a high value target and depend on various assumptions holding true to maintain security. They are not a silver bullet, and there are several realistic ways in which a hardware wallet can fail to protect your Bitcoin. These risks need to be carefully considered when deciding how much trust to place in a hardware wallet, and which hardware wallet to buy.

How a hardware wallet could fail to protect your Bitcoin:

# '''Malware swaps recipient Bitcoin addresses''': a hardware wallet won't protect you from being tricked into sending Bitcoin to the wrong address. For example, malware on a PC could monitor for high value transactions and then swap out the recipient's authentic Bitcoin address for an address controlled by the attacker. When the stakes are high, multi factor (e.g., over the phone) confirmation of a recipient's Bitcoin address is recommended.
# '''Insecure RNG ([https://en.wikipedia.org/wiki/Random_number_generation Random Number Generator])''': hardware wallets rely on the security of an RNG, often embedded in hardware, to generate your wallet's private keys securely. Unfortunately, it is notoriously difficult to verify the true randomness of the RNG. An insecure RNG may create wallet keys that can later be recreated by an attacker, by generating psuedo-randomness that would seem statistically indistinguishable from true randomness yet still be predictable to an advanced attacker. An RNG may become insecure as a result of malicious weakening or an unintentional mistake. This failure mode is common to any wallet generation procedure in which the true randomness of the source of entropy being used can not be verified.
# '''Imperfect implementation''': the security of all computing devices relies on the quality of their implementation. Hardware wallets are no exception. Bugs at the software, firmware or hardware level may allow attackers to break into a hardware wallet and gain unauthorized access to secrets. Even if the design is perfect, proving the security of a hardware or software implementation is a very hard, mostly unsolved problem. To date, no wallet in existence is implemented using provably correct software.
# '''Compromised production process''': even a perfect software and hardware implementation of a hardware wallet would be vulnerable to a corrupt production process that introduces intentional or unintentional holes into the final product. The introduction of hardware backdoors is a [https://www.wired.com/2016/06/demonically-clever-backdoor-hides-inside-computer-chip/ real concern] for high risk financial and military applications.
# '''Compromised shipping process''': a compromised fulfillment process may substitute or modify secure devices for superficially identical but insecure replacements. Government programs that intercept hardware and modify them in route to insert backdoors [https://arstechnica.com/.../photos-of-an-nsa-upgrade-factory-show-cisco-router-getting-implant/ are known to exist].

In summary:

* While not a silver bullet hardware wallets can still be extremely useful, assuming you take care to use a good one: an authentic device manufactured by trustworthy, technically competent security experts with a good reputation (e.g., [[TREZOR]]).

* [[Cold storage]] solutions implemented with open source software and general purpose hardware (e.g., [[BitKey]], Pi Wallet), using a verifiable source of entropy such as physical dice may provide superior security for some use cases (e.g., long term savings).

== Connecting to a full node ==

By default, most hardware wallets instruct the user to connect to the manufacturer's own web interface. The web page cannot steal the user's private keys but can spy on them or trick them into accept fake payments.

Hardware wallets only keep the [[private keys]] safe and create spending transactions; they cannot tell you if you have actually received coins and in what quantity. Bitcoin's security model also requires that [[full node]] wallets are used. If not, somebody could pay you with a transaction of something other than bitcoin. If bitcoin is digital gold then a full node wallet is your own personal goldsmith who checks that the incoming payments are actually real. Also the third-party wallet will see all your [[Address|bitcoin addresses]] so this is very damaging to your privacy.

Most hardware wallets can be connected to [[Electrum]] bitcoin wallet. Electrum can be connected to your own [[Electrum#Electrum Personal Server|full node via a server]].

See also: [[Full node#Why should you use a full node wallet]]

== Commercial hardware wallets (ordered chronologically) ==

=== [[Trezor|Trezor One]] ===
[[File:Trezor-tx.jpg|300px|thumb|left|Confirming the transaction with Trezor]]

[[Trezor]] is a secure bitcoin storage and a transaction signing tool with open source hardware and software. The private keys are generated by the device and never leave it thus they cannot be accessed by a malware.

It uses a deterministic wallet structure which means it can hold an unlimited number of keys ([[BIP 0032]]/[[BIP 0044]]). A recovery seed is generated when the device is initialized. In case Trezor gets lost or stolen, all its contents can be recovered using this seed (private keys, bitcoin balance and transaction history) into a new device or another [[BIP 0039]]/[[BIP 0044]] compatible wallet.

Trezor also introduced a unique way of PIN entering preventing keyloggers from recording it even when entered on a compromised computer. An encryption passphrase can be set on top of the PIN protection. More passphrases can be used for plausible deniability.

Trezor One offers everything needed to protect cryptocurrency funds together with advanced features like [https://wiki.trezor.io/User_manual:Password_Manager Password manager] or [https://wiki.trezor.io/User_manual:Two-factor_Authentication_with_U2F U2F two-factor authorization].

''See also [[Hardware wallet#Trezor Model T|Trezor Model T - next-generation cryptocurrency hardware wallet]]''

[https://shop.trezor.io Trezor E-shop] | [https://wiki.trezor.io Trezor Wiki] | [https://trezor.io Trezor Homepage]

 

=== KeepKey: Your Private Bitcoin Vault ===
[[File:keepkey.jpg|300px|thumb|left|KeepKey showing a bitcoin transaction that needs to be manually approved.]]

KeepKey is a USB device that stores and secures your bitcoins. When you entrust KeepKey with your money, each and every bitcoin transaction you make must be reviewed and approved via it's OLED display and confirmation button.

KeepKey has a unique recovery feature utilizing a rotating cipher to restore private keys with a [[BIP 0039]] recovery seed. This means it is not necessary to store your private keys on KeepKey: the recovery process is secure enough so that KeepKey can be used as a transaction device for paper backups.

[https://www.keepkey.com keepkey.com]

 

=== Opendime: Bitcoin Credit Stick ===

[[file:Opendime.jpeg|300px|thumb|left|Opendime Package]]

The 1st Bitcoin Bearer Bond or just call it a "Bitcoin Stick"

Opendime is a small USB stick that allows you to spend Bitcoin like a dollar bill. Pass it along multiple times.
Connect to any USB to check balance. Unseal anytime to spend online. Trust no one.

It comes in the shape of a mini USB, and [[Opendime-ui.png|setting it up is astonishingly quick and simple]]. You plug OpenDime into a USB port, and it behaves just like a USB drive with a tiny amount of storage. In its folder, is a web page. You open the webpage in your browser, and there’s only one instruction to follow: “Drop a file onto the drive”. Once you do that, the OpenDime automagically generates a unique address for you to receive Bitcoin with.

[https://opendime.com Opendime.com]

* [https://opendime.com/#faq Opendime FAQ]
* You can watch a [https://www.youtube.com/watch?v=9UFF9d3Y1BY video here]
* Read this [https://medium.com/@beautyon_/exquisite-opendime-ad1195a2790e review]
* Multi-language user interface: 中文 • 日本語 • English • Portuguese • Français • Deutsch • Русский
* Works as USB drive with no need for software
* [https://github.com/opendime/electrum Opendime Electrum plugin]
* [https://github.com/opendime/ Opendime source files and key verification]

 

=== Coldcard: Ultra-secure Bitcoin Hardware Wallet ===

[[file:Coldcard.png|300px|thumb|left|Coldcard Front and Back]]

* Coldcard is an easy to use, ultra-secure, open-source and affordable hardware wallet that is easy to back up via an encrypted microSD card. Your private key is stored in a dedicated security chip. MicroPython software design allows you to make changes.
* BIP39 based, which means you can backup the secret words onto paper, and have lots of sub-accounts and unlimited independent payment addresses. Now with BIP39 passphrase support, unlocking up to 5.9e197 additional wallets from the same seed words! It knows how to understand transactions, so you can see what you are approving.
* The first "Partially Signed Bitcoin Transaction Format" - PSBT (BIP 174) native wallet which can be used completely offline for its entire lifecycle. See HWI for Bitcoin Core support!
* True air-gap cold operation via MicroSD sneakernet or standard via USB

[http://www.coldcardwallet.com Coldcardwallet.com]

* [https://coldcardwallet.com/faq Coldcard FAQ]
* [https://coldcardwallet.com/docs Coldcard Docs]
* [https://github.com/coldcard/firmware Coldcard Source Code]

 

=== CoolWallet: The Ultimate Bitcoin Safe ===


[[File:CoolWallet in the box.jpeg|300px|thumb|left|CoolWallet showing Launch App, waiting for user to connect with smartphone via Bluetooth]]

CoolWallet is a credit card sized Bluetooth device that stores and secures your bitcoins and private keys. It fits in your wallet and works wirelessly.

Every Bitcoin transaction must be manually confirmed and approved through its e-paper display and button.

CoolWallet only acknowledges the paired smartphone. Whoever stole the CoolWallet are not able to steal any bitcoins. Using recovery Seed can restore all your bitcoins in case you lost the device.

[https://coolbitx.com coolbitx.com] | [https://github.com/CoolBitX-Technology/coolwallet-ios Source and specifications]

 

=== BlochsTech card: Your user friendly Bitcoin wallet ===


[[file:BlochsTech Bitcoin card hardware wallet.jpg|300px|thumb|left|Graphic printed on front of BlochsTech cards.]]

The BlochsTech open Bitcoin card is an open protocol secure hardware Bitcoin wallet your grandmother could use.
For shops it's faster to accept than slow QR code based wallets and more reliable as it works offline.

Currently it's of course in a novelty phase like Casascius coins (of which thousands were sold),
however in the long run it is fully capable of functionally replacing the VISA system in all nations.

[http://www.BlochsTech.com BlochsTech.com]

 

=== BitLox Bitcoin Hardware Wallet ===
[[file:Bitlox.jpg|300px|thumb|left|BitLox Bitcoin Hardware Wallet]]

BitLox is a metal cased (aluminum or titanium) bitcoin hardware wallet that works with their own web based wallet by USB and apps for iPhone and Android using Bluetooth LE.

At present it is the only bitcoin hardware wallet you can buy that works with iPhone. The device weighs one ounce and is the size of a credit card 4 mm thick.

Bitlox allows you to set up hidden wallets. Unlike other hardware wallets your seed is never displayed on a connected computer or phone but only on the Bitlox. All your wallet, device and transaction PINs are only entered on the BitLox and never on any app.

BitLox has also implemented several advanced security features not available on any other bitcoin hardware wallet.

[http://www.bitlox.com bitlox.com]

 

=== Ledger Nano S ===
[[File:ledger_wallet_nanos_photo.png|300px|thumb|left|Ledger Wallet Nano S]]

Ledger Nano S is a secure Bitcoin hardware wallet. It connects to any computer through USB and embeds a built-in OLED display to double-check and confirm each transaction with a single tap on its buttons. It is architectured around a Secure Element (ST31 family) and built on top of the BOLOS platform, a powerful and flexible Operating System allowing the secure execution of multiple Open Source applications in full isolation.

Main features:
* cryptographic secrets protected by a secure chip
* open source embedded Bitcoin app
* Confirmation of transactions on the embedded screen
* Built-in 4 digits PIN security lock
* Built-in onboarding (seed generation and recovery)
* BIP39 seed (12/18/24 words), easy backup and restoration
* Multi-apps support: FIDO U2F, GPG, SSH…
* USB connectivity
* Foldable and compact casing

[https://www.ledgerwallet.com/products/12-ledger-nano-s Ledger Nano S product page]

 

=== Ledger Nano X ===

[[File:Ledger Nano X.png|300px|thumb|left|Ledger Wallet Nano X]]
Ledger Nano X is a secure hardware wallet. It features Bluetooth Low Energy (BLE) connectivity enabling it to be used with Android or iOS devices without the need of a cable. 
Main features:
* Multi-services: Hardware Wallet, Cryptographic Platform, Password Manager, Second Factor authenticator
(FIDO)
* Comply with several cryptocurrencies
* USB connectivity
* BLE v5.0 connectivity
* Open Source Device App: all Device Apps developed by Ledger can be reviewed and verified by End-Users
* Developer friendly: develop a Device App and then install it on the Ledger Nano X
* Comply with the main BIP standards: [BIP32], [BIP39] and [BIP44]
* Multi-platform: Windows (7+), Mac (10.9+), Linux or Chrome OS
* OLED screen: to verify the transaction data (amount, address)
* Buttons: used to get the End-User’s consent relative to sensitive operations like unlocking the device or processing a transaction
* PIN: to unlock the Ledger Nano X
* Plausible deniability: an additional PIN linked to a passphrase can be defined to create an hidden account
* Genuine PSD: cryptographic attestation mechanisms ensuring that the Ledger Nano X is a genuine one
* Post-issuance capability: all piece of software (MCU Firmware, SE Firmware, Device Apps) can be securely updated

[https://shop.ledger.com/products/ledger-nano-x Ledger Nano X product page]

 
=== [[Prokey|Prokey Optimum]] ===
[[File:Optimum-in-hand.jpg|300px|thumb|left|WebUSB-enabled hardware wallet, the Prokey Optimum]]
The Prokey Optimum is a secure cryptocurrency hardware wallet that connects to any computer and android phones through USB and users required to always press OK button on device to confirm right addresses, amounts, and fees before making any transactions.
It focuses on the following features :

* Secure Firmware: Genuine firmware that implements mutual authentication between the device and the server to prevents supply-chain attacks.
* All-Inclusivity: No third-party wallets, manage everything on a single platform
* Supports Bitcoin, Ethereum, ERC20 Tokens, OMNI Layer and more cryptocurrencies, It's the first hardware wallet that fully support USDT as both Omni and ERC20 Tokens
* In-Browser Operation: WebUSB-based operations renders no need of additional download of bridges, applications, extensions, or executable files

Equipped with other features like passphrases and offline recovery seed checking, the Prokey Optimum offers maximum security and also is user-friendly to provide the best experience when dealing with cryptocurrency.

[https://prokey.io/ Homepage of Prokey Hardware Wallet]

 

=== Secalot ===
[[File:secalot_wallet.png|300px|thumb|left|Secalot]]

Main features:
* Software and hardware are fully open sourced.
* Utilizes a secure microcontroller with a high performance dedicated cryptographic co-processor.
* Integrates with the popular Electrum wallet.
* PIN-code protected.
* Confirm transactions with a touch button press on the device.
* Supports P2PKH, P2SH, and segWit transactions.
* Updatable firmware.
* Extra functionality: OpenPGP smart card, FIDO U2F authenticator, one-time password generator.

Website: [https://www.secalot.com www.secalot.com]

 

=== ELLIPAL - Airgapped hardware wallet with mobile support ===
[[File:Ellipal wallet.png|300px|thumb|left|ELLIPAL]]

ELLIPAL hardware wallet secures keys in cold storage without connections except for LCD screen. It works with companion mobile App via QR code.

Main features:
* Working with mobile phone via QR code
* Internet Isolated Cold Wallet
* Supporting multi-currencies and more than 7,000 tokens
* Supports P2PKH, P2SH, and segWit transactions
* 4" Screen with touch panel
* Support private key import
* PIN-code and gesture pattern protect
* Confirmation of transactions details on the screen
* BIP32/BIP39/BIP44
* iPhone and Android companion App: account management, market info and coin exchange.

[https://www.ellipal.com ELLIPAL Hardware Wallet Homepage] | [https://www.ellipal.com/pages/coin-list ELLIPAL Supported Coins]

 

=== ELLIPAL Titan Cold Wallet ===
[[File:Ellipaltitan.jpg|300px|thumb|left|ELLIPAL Titan]]

ELLIPAL Titan is the upgraded version of the ELLIPAL EC01 hardware wallet. Main upgrades are within the hardware which improves protection against physical attacks while keeping absolute protection against remote attacks. ELLIPAL Titan works with ELLIPAL mobile App to secure and manage your cryptocurrency. Information is transferred between the cold wallet and App via QR code only.

New additional features:
* IP65 metal sealed frame - Light water jet & dust protection
* Disassembly test: [https://www.youtube.com/watch?v=DuPcJudtd2o Video]
* Fully isolated components, can never be connected to another device
* USB port removed - no ports on the device
* Anti-Tamper feature - data automatically deleted upon detection of a breach
* Decentralized Finance functions and coin exchange [https://www.ellipal.com/pages/ellipal-cold-wallet-finance ELLIPAL Finance]
* Verifiable and secure QR code [https://github.com/ELLIPAL?tab=repositories Github]

ELLIPAL Titan Website: [https://www.ellipal.com/pages/ellipal-titan ELLIPAL Titan full info]

 

=== [[Trezor|Trezor Model T]] ===
[[File:Trezor-model-t-photo-front.jpg|300px|thumb|left|Trezor Model T]]

Trezor Model T is the premium version and next-generation cryptocurrency hardware wallet. In addition to the functionalities of Trezor One, it has a colored touchscreen for secure on-device input, modern design, an SD card slot, and some other more advanced features.
For more information see [https://wiki.trezor.io/Trezor_Model_T Trezor Model T] and this [https://trezor.io/#comparison comparison table]

[https://shop.trezor.io Trezor E-shop] | [https://wiki.trezor.io Trezor Wiki] | [https://trezor.io Trezor Homepage]

 

=== D'CENT Biometric Wallet - BLE enabled Hardware Wallet ===
[[File:DCENT_Biometric_Wallet.png|300px|thumb|left|D'CENT Biometric Wallet]]

D'CENT Biometric Wallet is a secure multi-cryptocurrency hardware wallet. It connects by using Bluetooth or USB to any mobile devices. The wallet is based on multi-IC architecture built on Secure Element(EAL5+) embedded with the SecureOS to provide robust security for the secure execution of multiple wallet applications.

Main features:
* Cryptographic secrets protected by a secure chip
* Large OLED (128x128) display for confirmation of transactions and QR Code for P2P transactions
* Built-in biometric sensor for authentication and also supports the PIN
* Built-in onboarding (seed and key generation in Secure Element)
* BIP39 seed (24 words), easy backup and recovery
* Easy and convenient FW update (no recovery is required after update)
* Bluetooth and USB connectivity

[https://dcentwallet.com D'CENT Wallet Homepage] | [https://medium.com/dcentwallet D'CENT on Medium] | [https://www.youtube.com/channel/UCKnYqiM3g3iaaAKcRZf-kbA D'CENT Youtube]

 

=== Cobo Vault - Air-gapped with QR code and Secure Element ===
[[File:Vault_pro.png|300px|thumb|left|Cobo Vault Essential/Pro/Ultimate]]

Cobo Vault is a completely air-gapped hardware wallet that uses verifiable QR codes to transmit transaction information back and forth with a mobile app. It houses an FIPS 140-2 Secure Element that uses four superimposed physical sources for true random number generation (TRNG). Private keys never leave the Secure Element when transactions are signed. Cobo Vault’s innovative Web Authentication process helps prevent supply chain attacks through double asymmetric encryption implementing our backend HSM server. Cobo Vault’s Secure Element’s BIP 32, 39, and 44 compliant firmware is open source ([https://github.com/CoboVault Github]).

Cobo Vault Essential, Pro & Ultimate Features:
* Air-gapped through auditable QR code data transmissions
* Secure Element physical entropy private key generation and side-channel attack prevention
* Open source Secure Element firmware (industry first)
* Detachable battery (industry first)
* MicroSD firmware upgrading
* 4-inch touchscreen

Cobo Vault Essential and Pro Features:
* AAA battery support to prevent battery failure
* Bitcon-only firmware version compatibility
* Better camera for smoother QR code transactions
* Features we will be adding (see the full product roadmap list in [https://medium.com/cobo-vault/second-gen-hardware-wallets-feature-support-c0aaf00a4216 our launch article])

Cobo Vault Pro Features:
* Fingerprint sensor for device unlock and transaction signing
* Upgraded self-destruct mechanism
* Rechargeable battery

[https://cobo.com/hardware-wallet Cobo Vault Homepage] | [https://medium.com/cobo-vault Cobo Vault on Medium] | [https://shop.cobo.com Cobo Vault Shop]

 

=== BitBox02: Swiss made open source ===
[[File:BitBox02.png.jpg|300px|thumb|left|BitBox02]]

The BitBox02 is a Swiss made, fully open source hardware wallet that enables you to independently generate and securely store your private keys to access and transact crypto assets. It has a dual-chip design and the security architecture has been independently audited.

* Easy backup and restore on microSD card
* OLED display and invisible touch sensors
* Plug in directly to computer/mobile with USB-C
* USB-C to A adapter and extension cable included
* Multiple cryptocurrency support: Bitcoin and [[altcoin]]s.
* U2F function for secure logins
* Bitcoin-only edition available; the limited firmware reduces the attack surface
* BIP-39 compatible
* Bech32 (Native segwit) compatible
* Sleek and minimalist design
* Made in Switzerland

[https://shiftcrypto.ch/bitbox02 BitBox02 product page] | [https://github.com/digitalbitbox Source code]

 

== Not purchasable hardware wallets ==

=== Ledger HW.1 - USB Smartcard Hardware Wallet ===
[[File:Btchip_dongle.jpg|220px|thumb|left|HW.1 inserted in a laptop]]

HW.1 is an implementation of a deterministic ([[BIP 0032]]) Hardware Wallet on a USB smartcard.

It is typically used as a blind secure device for multi signature transactions - holding a set of derived private keys and signing transactions without requiring user confirmation.

Power users can rely on it to confirm all transactions with a second factor scheme turning the dongle into a keyboard typing what the user is supposed to have signed, as a protection against malware.

It is also possible to customize HW.1 for more specific needs, such as creating a prepaid card without revealing the deterministic seed before it is received by the user, or securing bitcoin transactions on a server.

[https://www.ledgerwallet.com/products/3-ledger-hw-1 E-shop] | [https://ledgerhq.github.io/btchip-doc/bitcoin-technical.html Technical Documentation]

 

=== Ledger Nano - USB Smartcard Hardware Wallet ===
[[File:ledger_wallet_photo.jpg|300px|thumb|left|Ledger Wallet USB]]

Ledger Nano protects your Bitcoin data within a smartcard. Its micro-processor certified against all types of attacks (both physical and logical), and has been used in the banking industry for decades (think credit card chips). The device connects to your computer through the USB port and will do all the Bitcoin cryptographic heavy lifting such as signing transactions inside its secure environment. You can therefore use your Bitcoin account with maximum trust, even on an insecure or compromised computer.

The second factor verification of the transaction signature can be done either with a paired smartphone (Android, iOS) or a physical security card.

The Ledger Wallet Chrome application (available also on Chromium) provides an easy onboarding as well as a seamless user experience, and the Nano is compatible with numerous third party software: [[Electrum]], [[Mycelium]], [[GreenAddress]], Greenbits, [[Coinkite]] and Copay.

[https://www.ledgerwallet.com/products/1-ledger-nano Ledger Nano product page] | [https://github.com/LedgerHQ Source and specifications]

 

=== Ledger Unplugged - NFC Smartcard Hardware Wallet ===
[[File:ledger_unplugged_photo.jpg|300px|thumb|left|Ledger Unplugged NFC]]

The Ledger Unplugged is a credit card sized NFC hardware wallet. It embeds an open source Java Card app and is compatible with all NFC enabled Android phones.

The device can be used with Mycelium or Greenbits. In case of loss, you can restore it on any Ledger Wallet (Nano or another one) or all other compatible solutions (BIP 39).

[https://www.ledgerwallet.com/products/6-ledger-unplugged Ledger Unplugged product page] | [https://github.com/LedgerHQ/ledger-javacard Source code]

 

=== BWALLET TREZOR clone ===

[[File:BWALLET_Trezor_Clone.jpeg|200px|thumb|left|Chinese clone of Trezor]]

BWALLET is a clone of Trezor by a Chinese company.
Trezor code is open source and this device operates like a Trezor.
However, this product has been [https://www.reddit.com/r/Bitcoin/comments/2tyier/bwallet_review_by_trezor_developer/ reviewed by Marek aka Slush(Trezor developer)] and he has found some problems which makes this device less than 100% compatible, for example it doesn't work with [http://mytrezor.com myTREZOR.com] website and it does not work with Trezor official firmware.

[http://mybwallet.com MyBWALLET.com] | [http://www.bidingxing.com/en/bwallet Buy BWALLET]

 

=== Pi Wallet - cold storage ===
[[File:Piwallet.jpeg|300px|thumb|left|Pi-Wallet]]

The Pi-Wallet is a small computer with the [[Armory]] bitcoin client.

Transactions are signed offline, then transferred on a USB stick via [https://en.wikipedia.org/wiki/Sneakernet Sneakernet] to an online system for broadcasting.

[https://www.pi-wallet.com/ pi-wallet.com]

 

=== BitcoinCard Megion Technologies-Card based wallet ===
[[File:Bitcoincard-medley-large.jpg|400px|thumb|left|Bitcoin Card]]
[http://www.bitcoincard.org/ Bitcoincard Home Page]

[http://blog.bitinstant.com/blog/2012/6/19/our-discovery-in-vienna-the-bitcoin-card.html Excellent review by evoorhees]

Incorporates a e-paper display, keypad, and radio (custom ISM band protocol.) Unfortunately it is fairly limited in terms of transaction I/O, requiring a radio gateway or another bitcoincard wherever funds need to be transferred.

 

=== BitSafe - allten/someone42's hardware wallet ===
[[File:Bitsafe-wallet-sizecompare.jpg|200px|thumb|left|Bitsafe wallet]]
[https://bitcointalk.org/index.php?topic=152517.0 Final BitSafe announcement]

Signing transactions only, requires USB host software for transactions & USB power. Has a OLED display and Confirm/Cancel buttons. Evolved out of someone42's prototype below, and has significant contributions from someone42 as well.
 

=== Swiss Bank in Your Pocket - Hardware wallet ===
[[File:SBIYP.png|300px|thumb|left|Swiss Bank In Your Pocket]]

The Swiss Bank in Your Pocket is a Windows Desktop Application providing functionality for 5 Bitcoin Wallets and a Bitcoin Vault.

The Bitcoin Vault can only send Bitcoins to the Bitcoin Wallets with in the application. Each Bitcoin wallet can have up to 5 Receive addresses. The intuitive user interface is designed for ease of use. USB security key is required to make any type of transaction. frontend software is installed on windows. Package includes secure USB key, and an additional recovery USB key. So in case of an accident, customer will have an additional backup to access their wallets.

[https://swissbankinyourpocket.com/ swissbankinyourpocket.com]

 

=== BitBox 01 (Digital Bitbox) ===
[[file:Digital-bitbox.png|thumb|left|Digital Bitbox Hardware Wallet]]

* Secure hardware RNG & key storage using [http://www.atmel.com/Images/Atmel-8914-CryptoAuth-ATAES132A-Datasheet.pdf crypto element] with 50 year lifespan and an epoxy-filled case.
* Offline backup and recovery of [[BIP_0032|BIP-32]] seed with a micro SD card rather than [[BIP_0039|BIP-39]] phrase written on paper as in Trezor.
* Native software wallet client and ability to use a mobile phone for 2FA and to verify transaction details.
* Multisig out-of-the-box including Copay support.
* [https://github.com/digitalbitbox Open Source] ([https://github.com/digitalbitbox/mcu#digital-bitbox-firmware firmware], [https://github.com/digitalbitbox/mcu/blob/bf48984fd4a47d9ebf6814f7d01b078964587c7c/src/bootloader.c bootloader], [https://github.com/digitalbitbox/dbb-app desktop client]).
* Full FIDO U2F support (https://en.wikipedia.org/wiki/Universal_2nd_Factor)
* Made in Switzerland (a country with strong privacy laws) by [[Bitcoin Core]] developer Jonas Schnelli.

[https://digitalbitbox.com digitalbitbox.com]

 

=== someone42's original prototype ===
[[File:Someone42-wallet-prototype.jpg|300px|thumb|left|someone42's original prototype]]
[https://bitcointalk.org/index.php?topic=78614.0 Hardware Bitcoin wallet - a minimal Bitcoin wallet for embedded devices]

Signing transactions only, requires USB host software for transactions & USB power. All work is rolled into the above BitSafe wallet currently.
 
=== Other/Defunct but with good discussion: ===
* natman3400's BitClip Jun 2011 [https://bitcointalk.org/index.php?topic=24852.0 https://bitcointalk.org/index.php?topic=24852.0]
:Seems to have gone defunct around Dec 2011. Some good ideas though and seemed to have started on execution.
* jim618 hardware wallet proposal Apr 2012 [https://bitcointalk.org/index.php?topic=77553.0 Dedicated bitcoin devices - dealing with untrusted networks]
:Great discussion and good ideas from jim618. Also linked the following video:
* Prof. Clemens Cap's hardware wallet? (video:)[https://www.youtube.com/watch?v=IavQ-Wc8S1U Clemens Cap about electronic bitcoin wallet at EuroBit]
:Clemens Cap of Uni Rostock explains the Electronic Bitcoin wallet device he's working on. It's based on adafruit microtouch device.
* ripper234's discussion based on Yubikeys Aug 2012 [https://bitcointalk.org/index.php?topic=99492 Having a YUBIKEY as one of the parties for m-of-n signatures]
:The use of Yubikeys. They only support symmetric crypto, so you'd have to trust the host device.
* kalleguld's hardware wallet proposal Oct 2012 [https://bitcointalk.org/index.php?topic=115294.0 Proposal: Hardware wallet (Win 3 BTC)]
* Vaporware: Matthew N Wright's ellet [https://bitcointalk.org/index.php?topic=85931.0 ANN The world's first handheld Bitcoin device, the Ellet!] (Vaporware)

== Smart Card based wallets ==
This type of device requires complete trust in the host device, as there is no method for user input.
See [[Smart card wallet]]

== Related Resources ==
* [https://bitcoinnewsmagazine.com/best-bitcoin-hardware-wallet-2015/ Best Bitcoin Hardware Wallet 2015] - reviews of all bitcoin hardware wallets.
* [http://99bitcoins.com/trezor-vs-ledger-hands-hardware-wallets-review/ TREZOR vs. Ledger] - User reviews and Reddit feedback
* [https://bitcointalk.org/index.php?topic=125383.0 Hardware wallet wire protocol]: slush's Hardware wallet wire protocol discussion
* [https://bitcointalk.org/index.php?topic=19080.msg272348#msg272348 Re: Split private keys]: kjj's Todo List discussion for client protocol requirements
* [https://bitcointalk.org/index.php?topic=134277.0 Hardware Wallet Roundup]
* [https://www.buybitcoinworldwide.com/wallets/ Bitcoin Hardware Wallet Comparison] - information about using Bitcoin hardware wallets for cold storage.
* [https://www.weusecoins.com/bitcoin-ledger-wallet-review/ Ledger Wallet Review]

== See Also ==

* [[Storing bitcoins]]
* [[How to set up a secure offline savings wallet]]
* [[Cold storage]]

[[Category:Security]]
[[Category:Wallets| ]]
[[Category:Hardware]]

Hardware wallet

2019-12-30T07:16:39Z

Ellipalwallet: Added ELLIPAL Titan hardware wallet by the ELLIPAL team. Thank you.

A '''hardware wallet''' is a special type of [[wallet|bitcoin wallet]] which stores the user's private keys in a secure hardware device.

They have major advantages over standard software wallets:

* private keys are often stored in a protected area of a microcontroller, and cannot be transferred out of the device in plaintext
* immune to computer viruses that steal from software wallets
* can be used securely and interactively, private keys never need to touch potentially-vulnerable software
* much of the time, the software is open source, allowing a user to validate the entire operation of the device

This page is an attempt to summarize all the known developments of hardware wallets that can use Bitcoin as part of their operation.

== Security risks ==

To date there have been no verifiable incidents of Bitcoins stolen from hardware wallets. Hardware wallets are relatively new, but at least for the time being they have maintained a good track record, unlike the numerous incidents of Bitcoin theft from Internet-connected computers.

However, it's important to understand that hardware wallets are a high value target and depend on various assumptions holding true to maintain security. They are not a silver bullet, and there are several realistic ways in which a hardware wallet can fail to protect your Bitcoin. These risks need to be carefully considered when deciding how much trust to place in a hardware wallet, and which hardware wallet to buy.

How a hardware wallet could fail to protect your Bitcoin:

# '''Malware swaps recipient Bitcoin addresses''': a hardware wallet won't protect you from being tricked into sending Bitcoin to the wrong address. For example, malware on a PC could monitor for high value transactions and then swap out the recipient's authentic Bitcoin address for an address controlled by the attacker. When the stakes are high, multi factor (e.g., over the phone) confirmation of a recipient's Bitcoin address is recommended.
# '''Insecure RNG ([https://en.wikipedia.org/wiki/Random_number_generation Random Number Generator])''': hardware wallets rely on the security of an RNG, often embedded in hardware, to generate your wallet's private keys securely. Unfortunately, it is notoriously difficult to verify the true randomness of the RNG. An insecure RNG may create wallet keys that can later be recreated by an attacker, by generating psuedo-randomness that would seem statistically indistinguishable from true randomness yet still be predictable to an advanced attacker. An RNG may become insecure as a result of malicious weakening or an unintentional mistake. This failure mode is common to any wallet generation procedure in which the true randomness of the source of entropy being used can not be verified.
# '''Imperfect implementation''': the security of all computing devices relies on the quality of their implementation. Hardware wallets are no exception. Bugs at the software, firmware or hardware level may allow attackers to break into a hardware wallet and gain unauthorized access to secrets. Even if the design is perfect, proving the security of a hardware or software implementation is a very hard, mostly unsolved problem. To date, no wallet in existence is implemented using provably correct software.
# '''Compromised production process''': even a perfect software and hardware implementation of a hardware wallet would be vulnerable to a corrupt production process that introduces intentional or unintentional holes into the final product. The introduction of hardware backdoors is a [https://www.wired.com/2016/06/demonically-clever-backdoor-hides-inside-computer-chip/ real concern] for high risk financial and military applications.
# '''Compromised shipping process''': a compromised fulfillment process may substitute or modify secure devices for superficially identical but insecure replacements. Government programs that intercept hardware and modify them in route to insert backdoors [https://arstechnica.com/.../photos-of-an-nsa-upgrade-factory-show-cisco-router-getting-implant/ are known to exist].

In summary:

* While not a silver bullet hardware wallets can still be extremely useful, assuming you take care to use a good one: an authentic device manufactured by trustworthy, technically competent security experts with a good reputation (e.g., [[TREZOR]]).

* [[Cold storage]] solutions implemented with open source software and general purpose hardware (e.g., [[BitKey]], Pi Wallet), using a verifiable source of entropy such as physical dice may provide superior security for some use cases (e.g., long term savings).

== Connecting to a full node ==

By default, most hardware wallets instruct the user to connect to the manufacturer's own web interface. The web page cannot steal the user's private keys but can spy on them or trick them into accept fake payments.

Hardware wallets only keep the [[private keys]] safe and create spending transactions; they cannot tell you if you have actually received coins and in what quantity. Bitcoin's security model also requires that [[full node]] wallets are used. If not, somebody could pay you with a transaction of something other than bitcoin. If bitcoin is digital gold then a full node wallet is your own personal goldsmith who checks that the incoming payments are actually real. Also the third-party wallet will see all your [[Address|bitcoin addresses]] so this is very damaging to your privacy.

Most hardware wallets can be connected to [[Electrum]] bitcoin wallet. Electrum can be connected to your own [[Electrum#Electrum Personal Server|full node via a server]].

See also: [[Full node#Why should you use a full node wallet]]

== Commercial hardware wallets (ordered chronologically) ==

=== [[Trezor|Trezor One]] ===
[[File:Trezor-tx.jpg|300px|thumb|left|Confirming the transaction with Trezor]]

[[Trezor]] is a secure bitcoin storage and a transaction signing tool with open source hardware and software. The private keys are generated by the device and never leave it thus they cannot be accessed by a malware.

It uses a deterministic wallet structure which means it can hold an unlimited number of keys ([[BIP 0032]]/[[BIP 0044]]). A recovery seed is generated when the device is initialized. In case Trezor gets lost or stolen, all its contents can be recovered using this seed (private keys, bitcoin balance and transaction history) into a new device or another [[BIP 0039]]/[[BIP 0044]] compatible wallet.

Trezor also introduced a unique way of PIN entering preventing keyloggers from recording it even when entered on a compromised computer. An encryption passphrase can be set on top of the PIN protection. More passphrases can be used for plausible deniability.

Trezor One offers everything needed to protect cryptocurrency funds together with advanced features like [https://wiki.trezor.io/User_manual:Password_Manager Password manager] or [https://wiki.trezor.io/User_manual:Two-factor_Authentication_with_U2F U2F two-factor authorization].

''See also [[Hardware wallet#Trezor Model T|Trezor Model T - next-generation cryptocurrency hardware wallet]]''

[https://shop.trezor.io Trezor E-shop] | [https://wiki.trezor.io Trezor Wiki] | [https://trezor.io Trezor Homepage]

 

=== KeepKey: Your Private Bitcoin Vault ===
[[File:keepkey.jpg|300px|thumb|left|KeepKey showing a bitcoin transaction that needs to be manually approved.]]

KeepKey is a USB device that stores and secures your bitcoins. When you entrust KeepKey with your money, each and every bitcoin transaction you make must be reviewed and approved via it's OLED display and confirmation button.

KeepKey has a unique recovery feature utilizing a rotating cipher to restore private keys with a [[BIP 0039]] recovery seed. This means it is not necessary to store your private keys on KeepKey: the recovery process is secure enough so that KeepKey can be used as a transaction device for paper backups.

[https://www.keepkey.com keepkey.com]

 

=== Opendime: Bitcoin Credit Stick ===

[[file:Opendime.jpeg|400px|thumb|left|Opendime Package]]

The 1st Bitcoin Bearer Bond or just call it a "Bitcoin Stick"

Opendime is a small USB stick that allows you to spend Bitcoin like a dollar bill. Pass it along multiple times.
Connect to any USB to check balance. Unseal anytime to spend online. Trust no one.

It comes in the shape of a mini USB, and [[Opendime-ui.png|setting it up is astonishingly quick and simple]]. You plug OpenDime into a USB port, and it behaves just like a USB drive with a tiny amount of storage. In its folder, is a web page. You open the webpage in your browser, and there’s only one instruction to follow: “Drop a file onto the drive”. Once you do that, the OpenDime automagically generates a unique address for you to receive Bitcoin with.

[http://www.opendime.com Opendime.com]

* [https://opendime.com/#faq Opendime FAQ]
* You can watch a [https://www.youtube.com/watch?v=9UFF9d3Y1BY video here]
* Read this [https://medium.com/@beautyon_/exquisite-opendime-ad1195a2790e review]
* Multi-language user interface: 中文 • 日本語 • English • Portuguese • Français • Deutsch • Русский
* Works as USB drive with no need for software
* [https://github.com/opendime/electrum Opendime Electrum plugin]
* [https://github.com/opendime/ Opendime source files and key verification]

 

=== Coldcard: Ultra-secure Bitcoin Hardware Wallet ===

[[file:Coldcard.png|524px|thumb|left|Coldcard Front and Back]]

* Coldcard is an easy to use, ultra-secure, open-source and affordable hardware wallet that is easy to back up via an encrypted microSD card. Your private key is stored in a dedicated security chip. MicroPython software design allows you to make changes.
* BIP39 based, which means you can backup the secret words onto paper, and have lots of sub-accounts and unlimited independent payment addresses. Now with BIP39 passphrase support, unlocking up to 5.9e197 additional wallets from the same seed words! It knows how to understand transactions, so you can see what you are approving.
* The first "Partially Signed Bitcoin Transaction Format" - PSBT (BIP 174) native wallet which can be used completely offline for its entire lifecycle. See HWI for Bitcoin Core support!
* True air-gap cold operation via MicroSD sneakernet or standard via USB

[http://www.coldcardwallet.com Coldcardwallet.com]

* [https://coldcardwallet.com/faq Coldcard FAQ]
* [https://coldcardwallet.com/docs Coldcard Docs]
* [https://github.com/coldcard/firmware Coldcard Source Code]

 

=== CoolWallet: The Ultimate Bitcoin Safe ===


[[File:CoolWallet in the box.jpeg|300px|thumb|left|CoolWallet showing Launch App, waiting for user to connect with smartphone via Bluetooth]]

CoolWallet is a credit card sized Bluetooth device that stores and secures your bitcoins and private keys. It fits in your wallet and works wirelessly.

Every Bitcoin transaction must be manually confirmed and approved through its e-paper display and button.

CoolWallet only acknowledges the paired smartphone. Whoever stole the CoolWallet are not able to steal any bitcoins. Using recovery Seed can restore all your bitcoins in case you lost the device.

[https://coolbitx.com coolbitx.com] | [https://github.com/CoolBitX-Technology/coolwallet-ios Source and specifications]

 

=== BlochsTech card: Your user friendly Bitcoin wallet ===


[[file:BlochsTech Bitcoin card hardware wallet.jpg|300px|thumb|left|Graphic printed on front of BlochsTech cards.]]

The BlochsTech open Bitcoin card is an open protocol secure hardware Bitcoin wallet your grandmother could use.
For shops it's faster to accept than slow QR code based wallets and more reliable as it works offline.

Currently it's of course in a novelty phase like Casascius coins (of which thousands were sold),
however in the long run it is fully capable of functionally replacing the VISA system in all nations.

[http://www.BlochsTech.com BlochsTech.com]

 

=== BitLox Bitcoin Hardware Wallet ===
[[file:Bitlox.jpg|300px|thumb|left|BitLox Bitcoin Hardware Wallet]]

BitLox is a metal cased (aluminum or titanium) bitcoin hardware wallet that works with their own web based wallet by USB and apps for iPhone and Android using Bluetooth LE.

At present it is the only bitcoin hardware wallet you can buy that works with iPhone. The device weighs one ounce and is the size of a credit card 4 mm thick.

Bitlox allows you to set up hidden wallets. Unlike other hardware wallets your seed is never displayed on a connected computer or phone but only on the Bitlox. All your wallet, device and transaction PINs are only entered on the BitLox and never on any app.

BitLox has also implemented several advanced security features not available on any other bitcoin hardware wallet.

[http://www.bitlox.com bitlox.com]

 

=== Digital Bitbox ===
[[file:Digital-bitbox.png|thumb|left|Digital Bitbox Hardware Wallet]]

* Secure hardware RNG & key storage using [http://www.atmel.com/Images/Atmel-8914-CryptoAuth-ATAES132A-Datasheet.pdf crypto element] with 50 year lifespan and an epoxy-filled case.
* Offline backup and recovery of [[BIP_0032|BIP-32]] seed with a micro SD card rather than [[BIP_0039|BIP-39]] phrase written on paper as in Trezor.
* Native software wallet client and ability to use a mobile phone for 2FA and to verify transaction details.
* Multisig out-of-the-box including Copay support.
* [https://github.com/digitalbitbox Open Source] ([https://github.com/digitalbitbox/mcu#digital-bitbox-firmware firmware], [https://github.com/digitalbitbox/mcu/blob/bf48984fd4a47d9ebf6814f7d01b078964587c7c/src/bootloader.c bootloader], [https://github.com/digitalbitbox/dbb-app desktop client]).
* Full FIDO U2F support (https://en.wikipedia.org/wiki/Universal_2nd_Factor)
* Made in Switzerland (a country with strong privacy laws) by [[Bitcoin Core]] developer Jonas Schnelli.

[https://digitalbitbox.com digitalbitbox.com]

 

=== Ledger Nano S - USB Smartcard Hardware Wallet ===
[[File:ledger_wallet_nanos_photo.png|300px|thumb|left|Ledger Wallet Nano S]]

Ledger Nano S is a secure Bitcoin hardware wallet. It connects to any computer through USB and embeds a built-in OLED display to double-check and confirm each transaction with a single tap on its buttons. It is architectured around a Secure Element (ST31 family) and built on top of the BOLOS platform, a powerful and flexible Operating System allowing the secure execution of multiple Open Source applications in full isolation.

Main features:
* cryptographic secrets protected by a secure chip
* open source embedded Bitcoin app
* Confirmation of transactions on the embedded screen
* Built-in 4 digits PIN security lock
* Built-in onboarding (seed generation and recovery)
* BIP39 seed (12/18/24 words), easy backup and restoration
* Multi-apps support: FIDO U2F, GPG, SSH…
* USB connectivity
* Foldable and compact casing

[https://www.ledgerwallet.com/products/12-ledger-nano-s Ledger Nano S product page]

 

=== Secalot ===
[[File:secalot_wallet.png|300px|thumb|left|Secalot]]

Main features:
* Software and hardware are fully open sourced.
* Utilizes a secure microcontroller with a high performance dedicated cryptographic co-processor.
* Integrates with the popular Electrum wallet.
* PIN-code protected.
* Confirm transactions with a touch button press on the device.
* Supports P2PKH, P2SH, and segWit transactions.
* Updatable firmware.
* Extra functionality: OpenPGP smart card, FIDO U2F authenticator, one-time password generator.

Website: [https://www.secalot.com www.secalot.com]

 

=== ELLIPAL - Airgapped hardware wallet with mobile support ===
[[File:Ellipal wallet.png|300px|thumb|left|ELLIPAL]]

ELLIPAL hardware wallet secures keys in cold storage without connections except for LCD screen. It works with companion mobile App via QR code.

Main features:
* Working with mobile phone via QR code
* Internet Isolated Cold Wallet
* Multi-currency, cross-chain
* Supports P2PKH, P2SH, and segWit transactions
* 4" Screen with touch panel
* Support private key import
* PIN-code and gesture pattern protect
* Confirmation of transactions details on the screen
* BIP32/BIP39/BIP44
* iPhone and Android companion App: account management, market info and coin exchange.

Website: [https://www.ellipal.com www.ellipal.com]

 

=== ELLIPAL Titan Cold Wallet ===
[[File:Ellipaltitan.jpg|300px|thumb|left|ELLIPAL Titan]]

ELLIPAL Titan is the upgraded version of the ELLIPAL EC01 hardware wallet. Main upgrades are within the hardware which improves protection against physical attacks while keeping absolute protection against remote attacks. ELLIPAL Titan works with ELLIPAL mobile App to secure and manage your cryptocurrency. Information is transferred between the cold wallet and App via QR code only.

New additional features:
* IP65 metal sealed frame - Light water jet & dust protection
* Disassembly test: [https://www.youtube.com/watch?v=DuPcJudtd2o Video]
* Fully isolated components, can never be connected to another device
* USB port removed - no ports on the device
* Anti-Tamper feature - data automatically deleted upon detection of a breach
* Decentralized Finance functions and coin exchange [https://www.ellipal.com/pages/ellipal-cold-wallet-finance ELLIPAL Finance]
* Verifiable and secure QR code [https://github.com/ELLIPAL?tab=repositories Github]

ELLIPAL Titan Website: [https://www.ellipal.com/pages/ellipal-titan ELLIPAL Titan full info]

 

=== [[Trezor|Trezor Model T]] ===
[[File:Trezor-model-t-photo-front.jpg|300px|thumb|left|Trezor Model T]]

Trezor Model T is the premium version and next-generation cryptocurrency hardware wallet. In addition to the functionalities of Trezor One, it has a colored touchscreen for secure on-device input, modern design, an SD card slot, and some other more advanced features.
For more information see [https://wiki.trezor.io/Trezor_Model_T Trezor Model T] and this [https://trezor.io/#comparison comparison table]

[https://shop.trezor.io Trezor E-shop] | [https://wiki.trezor.io Trezor Wiki] | [https://trezor.io Trezor Homepage]

 

=== D'CENT Biometric Wallet - BLE enabled Hardware Wallet ===
[[File:Dcent wallet photo.png|thumb|left|D'CENT Biometric Wallet]]

D'CENT Biometric Wallet is a secure multi-cryptocurrency hardware wallet. It connects by using Bluetooth or USB to any mobile devices. The wallet is based on multi-IC architecture built on Secure Element(EAL5+) embedded with the SecureOS to provide robust security for the secure execution of multiple wallet applications.

Main features:
* Cryptographic secrets protected by a secure chip
* Large OLED (128x128) display for confirmation of transactions and QR Code for P2P transactions
* Built-in biometric sensor for authentication and also supports the PIN
* Built-in onboarding (seed and key generation in Secure Element)
* BIP39 seed (24 words), easy backup and recovery
* Easy and convenient FW update (no recovery is required after update)
* Bluetooth and USB connectivity

[https://dcentwallet.com D'CENT Wallet Homepage] | [https://medium.com/iotrust D'CENT on Medium] | [https://www.youtube.com/channel/UCKnYqiM3g3iaaAKcRZf-kbA D'CENT Youtube]

 

== Not purchasable hardware wallets ==

=== Ledger HW.1 - USB Smartcard Hardware Wallet ===
[[File:Btchip_dongle.jpg|220px|thumb|left|HW.1 inserted in a laptop]]

HW.1 is an implementation of a deterministic ([[BIP 0032]]) Hardware Wallet on a USB smartcard.

It is typically used as a blind secure device for multi signature transactions - holding a set of derived private keys and signing transactions without requiring user confirmation.

Power users can rely on it to confirm all transactions with a second factor scheme turning the dongle into a keyboard typing what the user is supposed to have signed, as a protection against malware.

It is also possible to customize HW.1 for more specific needs, such as creating a prepaid card without revealing the deterministic seed before it is received by the user, or securing bitcoin transactions on a server.

[https://www.ledgerwallet.com/products/3-ledger-hw-1 E-shop] | [https://ledgerhq.github.io/btchip-doc/bitcoin-technical.html Technical Documentation]

 

=== Ledger Nano - USB Smartcard Hardware Wallet ===
[[File:ledger_wallet_photo.jpg|300px|thumb|left|Ledger Wallet USB]]

Ledger Nano protects your Bitcoin data within a smartcard. Its micro-processor certified against all types of attacks (both physical and logical), and has been used in the banking industry for decades (think credit card chips). The device connects to your computer through the USB port and will do all the Bitcoin cryptographic heavy lifting such as signing transactions inside its secure environment. You can therefore use your Bitcoin account with maximum trust, even on an insecure or compromised computer.

The second factor verification of the transaction signature can be done either with a paired smartphone (Android, iOS) or a physical security card.

The Ledger Wallet Chrome application (available also on Chromium) provides an easy onboarding as well as a seamless user experience, and the Nano is compatible with numerous third party software: [[Electrum]], [[Mycelium]], [[GreenAddress]], Greenbits, [[Coinkite]] and Copay.

[https://www.ledgerwallet.com/products/1-ledger-nano Ledger Nano product page] | [https://github.com/LedgerHQ Source and specifications]

 

=== Ledger Unplugged - NFC Smartcard Hardware Wallet ===
[[File:ledger_unplugged_photo.jpg|300px|thumb|left|Ledger Unplugged NFC]]

The Ledger Unplugged is a credit card sized NFC hardware wallet. It embeds an open source Java Card app and is compatible with all NFC enabled Android phones.

The device can be used with Mycelium or Greenbits. In case of loss, you can restore it on any Ledger Wallet (Nano or another one) or all other compatible solutions (BIP 39).

[https://www.ledgerwallet.com/products/6-ledger-unplugged Ledger Unplugged product page] | [https://github.com/LedgerHQ/ledger-javacard Source code]

 

=== BWALLET TREZOR clone ===

[[File:BWALLET_Trezor_Clone.jpeg|200px|thumb|left|Chinese clone of Trezor]]

BWALLET is a clone of Trezor by a Chinese company.
Trezor code is open source and this device operates like a Trezor.
However, this product has been [https://www.reddit.com/r/Bitcoin/comments/2tyier/bwallet_review_by_trezor_developer/ reviewed by Marek aka Slush(Trezor developer)] and he has found some problems which makes this device less than 100% compatible, for example it doesn't work with [http://mytrezor.com myTREZOR.com] website and it does not work with Trezor official firmware.

[http://mybwallet.com MyBWALLET.com] | [http://www.bidingxing.com/en/bwallet Buy BWALLET]

 

=== Pi Wallet - cold storage ===
[[File:Piwallet.jpeg|300px|thumb|left|Pi-Wallet]]

The Pi-Wallet is a small computer with the [[Armory]] bitcoin client.

Transactions are signed offline, then transferred on a USB stick via [https://en.wikipedia.org/wiki/Sneakernet Sneakernet] to an online system for broadcasting.

[https://www.pi-wallet.com/ pi-wallet.com]

 

=== BitcoinCard Megion Technologies-Card based wallet ===
[[File:Bitcoincard-medley-large.jpg|400px|thumb|left|Bitcoin Card]]
[http://www.bitcoincard.org/ Bitcoincard Home Page]

[http://blog.bitinstant.com/blog/2012/6/19/our-discovery-in-vienna-the-bitcoin-card.html Excellent review by evoorhees]

Incorporates a e-paper display, keypad, and radio (custom ISM band protocol.) Unfortunately it is fairly limited in terms of transaction I/O, requiring a radio gateway or another bitcoincard wherever funds need to be transferred.

 

=== BitSafe - allten/someone42's hardware wallet ===
[[File:Bitsafe-wallet-sizecompare.jpg|200px|thumb|left|Bitsafe wallet]]
[https://bitcointalk.org/index.php?topic=152517.0 Final BitSafe announcement]

Signing transactions only, requires USB host software for transactions & USB power. Has a OLED display and Confirm/Cancel buttons. Evolved out of someone42's prototype below, and has significant contributions from someone42 as well.
 

=== Swiss Bank in Your Pocket - Hardware wallet ===
[[File:SBIYP.png|300px|thumb|left|Swiss Bank In Your Pocket]]

The Swiss Bank in Your Pocket is a Windows Desktop Application providing functionality for 5 Bitcoin Wallets and a Bitcoin Vault.

The Bitcoin Vault can only send Bitcoins to the Bitcoin Wallets with in the application. Each Bitcoin wallet can have up to 5 Receive addresses. The intuitive user interface is designed for ease of use. USB security key is required to make any type of transaction. frontend software is installed on windows. Package includes secure USB key, and an additional recovery USB key. So in case of an accident, customer will have an additional backup to access their wallets.

[https://swissbankinyourpocket.com/ swissbankinyourpocket.com]

 

=== someone42's original prototype ===
[[File:Someone42-wallet-prototype.jpg|300px|thumb|left|someone42's original prototype]]
[https://bitcointalk.org/index.php?topic=78614.0 Hardware Bitcoin wallet - a minimal Bitcoin wallet for embedded devices]

Signing transactions only, requires USB host software for transactions & USB power. All work is rolled into the above BitSafe wallet currently.
 
=== Other/Defunct but with good discussion: ===
* natman3400's BitClip Jun 2011 [https://bitcointalk.org/index.php?topic=24852.0 https://bitcointalk.org/index.php?topic=24852.0]
:Seems to have gone defunct around Dec 2011. Some good ideas though and seemed to have started on execution.
* jim618 hardware wallet proposal Apr 2012 [https://bitcointalk.org/index.php?topic=77553.0 Dedicated bitcoin devices - dealing with untrusted networks]
:Great discussion and good ideas from jim618. Also linked the following video:
* Prof. Clemens Cap's hardware wallet? (video:)[https://www.youtube.com/watch?v=IavQ-Wc8S1U Clemens Cap about electronic bitcoin wallet at EuroBit]
:Clemens Cap of Uni Rostock explains the Electronic Bitcoin wallet device he's working on. It's based on adafruit microtouch device.
* ripper234's discussion based on Yubikeys Aug 2012 [https://bitcointalk.org/index.php?topic=99492 Having a YUBIKEY as one of the parties for m-of-n signatures]
:The use of Yubikeys. They only support symmetric crypto, so you'd have to trust the host device.
* kalleguld's hardware wallet proposal Oct 2012 [https://bitcointalk.org/index.php?topic=115294.0 Proposal: Hardware wallet (Win 3 BTC)]
* Vaporware: Matthew N Wright's ellet [https://bitcointalk.org/index.php?topic=85931.0 ANN The world's first handheld Bitcoin device, the Ellet!] (Vaporware)

== Smart Card based wallets ==
This type of device requires complete trust in the host device, as there is no method for user input.
See [[Smart card wallet]]

== Related Resources ==
* [https://bitcoinnewsmagazine.com/best-bitcoin-hardware-wallet-2015/ Best Bitcoin Hardware Wallet 2015] - reviews of all bitcoin hardware wallets.
* [http://99bitcoins.com/trezor-vs-ledger-hands-hardware-wallets-review/ TREZOR vs. Ledger] - User reviews and Reddit feedback
* [https://bitcointalk.org/index.php?topic=125383.0 Hardware wallet wire protocol]: slush's Hardware wallet wire protocol discussion
* [https://bitcointalk.org/index.php?topic=19080.msg272348#msg272348 Re: Split private keys]: kjj's Todo List discussion for client protocol requirements
* [https://bitcointalk.org/index.php?topic=134277.0 Hardware Wallet Roundup]
* [https://www.buybitcoinworldwide.com/wallets/ Bitcoin Hardware Wallet Comparison] - information about using Bitcoin hardware wallets for cold storage.
* [https://www.weusecoins.com/bitcoin-ledger-wallet-review/ Ledger Wallet Review]

== See Also ==

* [[Storing bitcoins]]
* [[How to set up a secure offline savings wallet]]
* [[Cold storage]]

[[Category:Security]]
[[Category:Wallets| ]]
[[Category:Hardware]]

File:Ellipaltitan.jpg

2019-12-30T03:00:54Z

Ellipalwallet: Ellipal Titan Cold Wallet - Hardware Wallet

Ellipal Titan Cold Wallet - Hardware Wallet