Difference between revisions of "Hardware wallet"

From Bitcoin Wiki
Jump to: navigation, search
(Related Resources)
(36 intermediate revisions by 13 users not shown)
Line 5: Line 5:
 
* private keys are often stored in a protected area of a microcontroller, and cannot be transferred out of the device in plaintext
 
* private keys are often stored in a protected area of a microcontroller, and cannot be transferred out of the device in plaintext
 
* immune to computer viruses that steal from software wallets
 
* immune to computer viruses that steal from software wallets
* can be used securely and interactively, as opposed to a [[paper wallet]] which must be imported to software at some point
+
* can be used securely and interactively, private keys never need to touch potentially-vulnerable software
 
* much of the time, the software is open source, allowing a user to validate the entire operation of the device
 
* much of the time, the software is open source, allowing a user to validate the entire operation of the device
  
Line 14: Line 14:
 
To date there have been no verifiable incidents of Bitcoins stolen from hardware wallets. Hardware wallets are relatively new, but at least for the time being they have maintained a good track record, unlike the numerous incidents of Bitcoin theft from Internet-connected computers.
 
To date there have been no verifiable incidents of Bitcoins stolen from hardware wallets. Hardware wallets are relatively new, but at least for the time being they have maintained a good track record, unlike the numerous incidents of Bitcoin theft from Internet-connected computers.
  
However, it important to understand that hardware wallets are a high value target and depend on various assumptions holding true to maintain security. They are not a silver bullet, and there are several realistic ways in which a hardware wallet can fail to protect your Bitcoin. These risks need to be carefully considered when deciding how much trust to place in a hardware wallet, and which hardware wallet to buy.
+
However, it's important to understand that hardware wallets are a high value target and depend on various assumptions holding true to maintain security. They are not a silver bullet, and there are several realistic ways in which a hardware wallet can fail to protect your Bitcoin. These risks need to be carefully considered when deciding how much trust to place in a hardware wallet, and which hardware wallet to buy.
  
How a hardware wallet could fail:
+
How a hardware wallet could fail to protect your Bitcoin:
  
 +
# '''Malware swaps recipient Bitcoin addresses''': a hardware wallet won't protect you from being tricked into sending Bitcoin to the wrong address. For example, malware on a PC could monitor for high value transactions and then swap out the recipient's authentic Bitcoin address for an address controlled by the attacker. When the stakes are high, multi factor (e.g., over the phone) confirmation of a recipient's Bitcoin address is recommended.
 
# '''Insecure RNG ([https://en.wikipedia.org/wiki/Random_number_generation Random Number Generator])''': hardware wallets rely on the security of an RNG, often embedded in hardware, to generate your wallet's private keys securely. Unfortunately, it is notoriously difficult to verify the true randomness of the RNG. An insecure RNG may create wallet keys that can later be recreated by an attacker, by generating psuedo-randomness that would seem statistically indistinguishable from true randomness yet still be predictable to an advanced attacker. An RNG may become insecure as a result of malicious weakening or an unintentional mistake. This failure mode is common to any wallet generation procedure in which the true randomness of the source of entropy being used can not be verified.
 
# '''Insecure RNG ([https://en.wikipedia.org/wiki/Random_number_generation Random Number Generator])''': hardware wallets rely on the security of an RNG, often embedded in hardware, to generate your wallet's private keys securely. Unfortunately, it is notoriously difficult to verify the true randomness of the RNG. An insecure RNG may create wallet keys that can later be recreated by an attacker, by generating psuedo-randomness that would seem statistically indistinguishable from true randomness yet still be predictable to an advanced attacker. An RNG may become insecure as a result of malicious weakening or an unintentional mistake. This failure mode is common to any wallet generation procedure in which the true randomness of the source of entropy being used can not be verified.
 
 
# '''Imperfect implementation''': the security of all computing devices relies on the quality of their implementation. Hardware wallets are no exception. Bugs at the software, firmware or hardware level may allow attackers to break into a hardware wallet and gain unauthorized access to secrets. Even if the design is perfect, proving the security of a hardware or software implementation is a very hard, mostly unsolved problem. To date, no wallet in existence is implemented using provably correct software.
 
# '''Imperfect implementation''': the security of all computing devices relies on the quality of their implementation. Hardware wallets are no exception. Bugs at the software, firmware or hardware level may allow attackers to break into a hardware wallet and gain unauthorized access to secrets. Even if the design is perfect, proving the security of a hardware or software implementation is a very hard, mostly unsolved problem. To date, no wallet in existence is implemented using provably correct software.
 
 
# '''Compromised production process''': even a perfect software and hardware implementation of a hardware wallet would be vulnerable to a corrupt production process that introduces intentional or unintentional holes into the final product. The introduction of hardware backdoors is a [https://www.wired.com/2016/06/demonically-clever-backdoor-hides-inside-computer-chip/ real concern] for high risk financial and military applications.
 
# '''Compromised production process''': even a perfect software and hardware implementation of a hardware wallet would be vulnerable to a corrupt production process that introduces intentional or unintentional holes into the final product. The introduction of hardware backdoors is a [https://www.wired.com/2016/06/demonically-clever-backdoor-hides-inside-computer-chip/ real concern] for high risk financial and military applications.
 
 
# '''Compromised shipping process''': a compromised fulfillment process may substitute or modify secure devices for superficially identical but insecure replacements. Government programs that intercept hardware and modify them in route to insert backdoors [https://arstechnica.com/.../photos-of-an-nsa-upgrade-factory-show-cisco-router-getting-implant/ are known to exist].
 
# '''Compromised shipping process''': a compromised fulfillment process may substitute or modify secure devices for superficially identical but insecure replacements. Government programs that intercept hardware and modify them in route to insert backdoors [https://arstechnica.com/.../photos-of-an-nsa-upgrade-factory-show-cisco-router-getting-implant/ are known to exist].
  
Line 30: Line 28:
 
* While not a silver bullet hardware wallets can still be extremely useful, assuming you take care to use a good one: an authentic device manufactured by trustworthy, technically competent security experts with a good reputation (e.g., [[TREZOR]]).
 
* While not a silver bullet hardware wallets can still be extremely useful, assuming you take care to use a good one: an authentic device manufactured by trustworthy, technically competent security experts with a good reputation (e.g., [[TREZOR]]).
  
* Cold storage solutions implemented with open source software and general purpose hardware, using a verifiable source of entropy (e.g., physical dice) may provide superior security for some use cases (e.g., long term savings).
+
* [[Cold storage]] solutions implemented with open source software and general purpose hardware (e.g., [[BitKey]], Pi Wallet), using a verifiable source of entropy such as physical dice may provide superior security for some use cases (e.g., long term savings).
  
== Commercial hardware wallets (ordered chronologically) ==
+
== Connecting to a full node ==
  
=== Pi Wallet - cold storage ===
+
By default, most hardware wallets instruct the user to connect to the manufacturer's own web interface. The web page cannot steal the user's private keys but can spy on them or trick them into accept fake payments.
[[File:Piwallet.jpeg|300px|thumb|left|Pi-Wallet]]
 
  
The Pi-Wallet is a small computer with the [[Armory]] bitcoin client.
+
Hardware wallets only keep the [[private keys]] safe and create spending transactions; they cannot tell you if you have actually received coins and in what quantity. Bitcoin's security model also requires that [[full node]] wallets are used. If not, somebody could pay you with a transaction of something other than bitcoin. If bitcoin is digital gold then a full node wallet is your own personal goldsmith who checks that the incoming payments are actually real. Also the third-party wallet will see all your [[Address|bitcoin addresses]] so this is very damaging to your privacy.
  
Transactions are signed offline, then transferred on a USB stick via [https://en.wikipedia.org/wiki/Sneakernet Sneakernet] to an online system for broadcasting.
+
Most hardware wallets can be connected to [[Electrum]] bitcoin wallet. Electrum can be connected to your own [[Electrum#Electrum Personal Server|full node via a server]].  
  
[https://www.pi-wallet.com/ pi-wallet.com]
+
See also: [[Full node#Why should you use a full node wallet]]
  
 +
== Commercial hardware wallets (ordered chronologically) ==
  
<br clear="all">
+
=== [[Trezor|Trezor One]] ===
 
+
[[File:Trezor-tx.jpg|300px|thumb|left|Confirming the transaction with Trezor]]
=== [[TREZOR]] The Bitcoin Safe ===
 
[[File:Trezor-tx.jpg|300px|thumb|left|Confirming the transaction with TREZOR]]
 
 
 
[[TREZOR]] is a secure bitcoin storage and a transaction signing tool. The private keys are generated by the device and never leave it thus they cannot be accessed by a malware.
 
 
 
It uses a deterministic wallet structure which means it can hold an unlimited number of keys ([[BIP 0032]]/[[BIP 0044]]). A recovery seed is generated when the device is initialized. In case TREZOR gets lost or stolen, all its contents can be recovered using this seed (private keys, bitcoin balance and transaction history) into a new device or another [[BIP 0039]]/[[BIP 0044]] compatible wallet.
 
 
 
TREZOR also introduced a unique way of PIN entering preventing keyloggers from recording it even when entered on a compromised computer. An encryption passphrase can be set on top of the PIN protection. More passphrases can be used for plausible deniability.
 
 
 
[https://BuyTrezor.com E-shop BuyTrezor.com] | [https://doc.satoshilabs.com/ TREZOR Documentation] | [https://bitcointrezor.com BitcoinTrezor.com]
 
 
 
<br clear="all">
 
 
 
=== Ledger HW.1 - USB Smartcard Hardware Wallet  ===
 
[[File:Btchip_dongle.jpg|220px|thumb|left|HW.1 inserted in a laptop]]
 
 
 
HW.1 is an implementation of a deterministic ([[BIP 0032]]) Hardware Wallet on a USB smartcard.
 
 
 
It is typically used as a blind secure device for multi signature transactions - holding a set of derived private keys and signing transactions without requiring user confirmation.
 
 
 
Power users can rely on it to confirm all transactions with a second factor scheme turning the dongle into a keyboard typing what the user is supposed to have signed, as a protection against malware.
 
  
It is also possible to customize HW.1 for more specific needs, such as creating a prepaid card without revealing the deterministic seed before it is received by the user, or securing bitcoin transactions on a server.
+
[[Trezor]] is a secure bitcoin storage and a transaction signing tool with open source hardware and software. The private keys are generated by the device and never leave it thus they cannot be accessed by a malware.
  
[https://www.ledgerwallet.com/products/3-ledger-hw-1 E-shop] | [https://ledgerhq.github.io/btchip-doc/bitcoin-technical.html Technical Documentation]
+
It uses a deterministic wallet structure which means it can hold an unlimited number of keys ([[BIP 0032]]/[[BIP 0044]]). A recovery seed is generated when the device is initialized. In case Trezor gets lost or stolen, all its contents can be recovered using this seed (private keys, bitcoin balance and transaction history) into a new device or another [[BIP 0039]]/[[BIP 0044]] compatible wallet.  
  
<br clear="all">
+
Trezor also introduced a unique way of PIN entering preventing keyloggers from recording it even when entered on a compromised computer. An encryption passphrase can be set on top of the PIN protection. More passphrases can be used for plausible deniability.
  
=== Ledger Nano - USB Smartcard Hardware Wallet ===
+
Trezor One offers everything needed to protect cryptocurrency funds together with advanced features like [https://wiki.trezor.io/User_manual:Password_Manager Password manager] or [https://wiki.trezor.io/User_manual:Two-factor_Authentication_with_U2F U2F two-factor authorization].
[[File:ledger_wallet_photo.jpg|300px|thumb|left|Ledger Wallet USB]]
 
  
Ledger Nano protects your Bitcoin data within a smartcard. Its micro-processor certified against all types of attacks (both physical and logical), and has been used in the banking industry for decades (think credit card chips). The device connects to your computer through the USB port and will do all the Bitcoin cryptographic heavy lifting such as signing transactions inside its secure environment. You can therefore use your Bitcoin account with maximum trust, even on an insecure or compromised computer.
+
''See also [[Hardware wallet#Trezor Model T|Trezor Model T - next-generation cryptocurrency hardware wallet]]''
 
 
The second factor verification of the transaction signature can be done either with a paired smartphone (Android, iOS) or a physical security card.
 
  
The Ledger Wallet Chrome application (available also on Chromium) provides an easy onboarding as well as a seamless user experience, and the Nano is compatible with numerous third party software: [[Electrum]], [[Mycelium]], [[GreenAddress]], Greenbits, [[Coinkite]] and Copay.
+
[https://shop.trezor.io Trezor E-shop] | [https://wiki.trezor.io Trezor Wiki] | [https://trezor.io Trezor Homepage]
 
 
[https://www.ledgerwallet.com/products/1-ledger-nano Ledger Nano product page] | [https://github.com/LedgerHQ Source and specifications]
 
 
 
<br clear="all">
 
 
 
=== Ledger Unplugged - NFC Smartcard Hardware Wallet  ===
 
[[File:ledger_unplugged_photo.jpg|300px|thumb|left|Ledger Unplugged NFC]]
 
 
 
The Ledger Unplugged is a credit card sized NFC hardware wallet. It embeds an open source Java Card app and is compatible with all NFC enabled Android phones.
 
 
 
The device can be used with Mycelium or Greenbits. In case of loss, you can restore it on any Ledger Wallet (Nano or another one) or all other compatible solutions (BIP 39).
 
 
 
[https://www.ledgerwallet.com/products/6-ledger-unplugged Ledger Unplugged product page] | [https://github.com/LedgerHQ/ledger-javacard Source code]
 
 
 
<br clear="all">
 
 
 
=== BWALLET TREZOR clone ===
 
 
 
[[File:BWALLET_Trezor_Clone.jpeg|200px|thumb|left|Chinese clone of Trezor]]
 
 
 
BWALLET is a clone of Trezor by a Chinese company.
 
Trezor code is open source and this device operates like a Trezor.
 
However, this product has been [https://www.reddit.com/r/Bitcoin/comments/2tyier/bwallet_review_by_trezor_developer/ reviewed by Merek aka Slush(Trezor developer)] and he has found some problems which makes this device less than 100% compatible, for example it doesn't work with [http://mytrezor.com myTREZOR.com] website and it does not work with Trezor official firmware.
 
 
 
[http://mybwallet.com MyBWALLET.com] | [http://www.bidingxing.com/en/bwallet Buy BWALLET]
 
  
 
<br clear="all">
 
<br clear="all">
Line 115: Line 64:
 
KeepKey is a USB device that stores and secures your bitcoins. When you entrust KeepKey with your money, each and every bitcoin transaction you make must be reviewed and approved via it's OLED display and confirmation button.
 
KeepKey is a USB device that stores and secures your bitcoins. When you entrust KeepKey with your money, each and every bitcoin transaction you make must be reviewed and approved via it's OLED display and confirmation button.
  
KeepKey has a unique recovery feature utilizing a rotating cipher to restore private keys with a [[BIP 0039]] recovery seed.  This means it is not necessary to store your private keys on KeepKey: the recovery process is secure enough so that KeepKey can be used as a transaction device for paper wallets.  
+
KeepKey has a unique recovery feature utilizing a rotating cipher to restore private keys with a [[BIP 0039]] recovery seed.  This means it is not necessary to store your private keys on KeepKey: the recovery process is secure enough so that KeepKey can be used as a transaction device for paper backups.  
  
 
[https://www.keepkey.com keepkey.com]
 
[https://www.keepkey.com keepkey.com]
Line 141: Line 90:
 
* [https://github.com/opendime/electrum Opendime Electrum plugin]
 
* [https://github.com/opendime/electrum Opendime Electrum plugin]
 
* [https://github.com/opendime/ Opendime source files and key verification]
 
* [https://github.com/opendime/ Opendime source files and key verification]
 +
 +
<br clear="all">
 +
 +
=== Coldcard: Ultra-secure Bitcoin Hardware Wallet ===
 +
 +
[[file:Coldcard.png|524px|thumb|left|Coldcard Front and Back]]
 +
 +
* Coldcard is an easy to use, ultra-secure, open-source and affordable hardware wallet that is easy to back up via an encrypted microSD card. Your private key is stored in a dedicated security chip. MicroPython software design allows you to make changes.
 +
* BIP39 based, which means you can backup the secret words onto paper, and have lots of sub-accounts and unlimited independent payment addresses. Now with BIP39 passphrase support, unlocking up to 5.9e197 additional wallets from the same seed words! It knows how to understand transactions, so you can see what you are approving.
 +
* The first "Partially Signed Bitcoin Transaction Format" - PSBT (BIP 174) native wallet which can be used completely offline for its entire lifecycle. See HWI for Bitcoin Core support!
 +
* True air-gap cold operation via MicroSD sneakernet or standard via USB
 +
 +
[http://www.coldcardwallet.com Coldcardwallet.com]
 +
 +
* [https://coldcardwallet.com/faq Coldcard FAQ]
 +
* [https://coldcardwallet.com/docs Coldcard Docs]
 +
* [https://github.com/coldcard/firmware Coldcard Source Code]
  
 
<br clear="all">
 
<br clear="all">
Line 191: Line 157:
 
<br clear="all">
 
<br clear="all">
  
=== Digital Bitbox ===
 
[[file:Digital-bitbox.png|thumb|left|Digital Bitbox Hardware Wallet]]
 
 
* Secure hardware RNG & key storage using [http://www.atmel.com/Images/Atmel-8914-CryptoAuth-ATAES132A-Datasheet.pdf crypto element] with 50 year lifespan and an epoxy-filled case.
 
* Offline backup and recovery of [[BIP_0032|BIP-32]] seed with a micro SD card rather than [[BIP_0039|BIP-39]] phrase written on paper as in Trezor.
 
* Native software wallet client and ability to use a mobile phone for 2FA and to verify transaction details.
 
* Multisig out-of-the-box including Copay support.
 
* [https://github.com/digitalbitbox Open Source] ([https://github.com/digitalbitbox/mcu#digital-bitbox-firmware firmware], [https://github.com/digitalbitbox/mcu/blob/bf48984fd4a47d9ebf6814f7d01b078964587c7c/src/bootloader.c bootloader], [https://github.com/digitalbitbox/dbb-app desktop client]).
 
* Made in Switzerland (a country with strong privacy laws) by [[Bitcoin Core]] developer Jonas Schnelli.
 
 
[https://digitalbitbox.com digitalbitbox.com]
 
 
<br clear="all">
 
  
 
=== Ledger Nano S - USB Smartcard Hardware Wallet  ===
 
=== Ledger Nano S - USB Smartcard Hardware Wallet  ===
Line 222: Line 175:
  
 
[https://www.ledgerwallet.com/products/12-ledger-nano-s Ledger Nano S product page]
 
[https://www.ledgerwallet.com/products/12-ledger-nano-s Ledger Nano S product page]
 +
 +
<br clear="all">
 +
 +
=== Secalot ===
 +
[[File:secalot_wallet.png|300px|thumb|left|Secalot]]
 +
 +
Main features:
 +
* Software and hardware are fully open sourced.
 +
* Utilizes a secure microcontroller with a high performance dedicated cryptographic co-processor.
 +
* Integrates with the popular Electrum wallet.
 +
* PIN-code protected.
 +
* Confirm transactions with a touch button press on the device.
 +
* Supports P2PKH, P2SH, and segWit transactions.
 +
* Updatable firmware.
 +
* Extra functionality: OpenPGP smart card, FIDO U2F authenticator, one-time password generator.
 +
 +
Website: [https://www.secalot.com www.secalot.com]
 +
 +
<br clear="all">
 +
 +
=== ELLIPAL - Airgapped hardware wallet with mobile support ===
 +
[[File:Ellipal wallet.png|300px|thumb|left|ELLIPAL]]
 +
 +
ELLIPAL hardware wallet secures keys in cold storage without connections except for LCD screen. It works with companion mobile App via QR code.
 +
 +
Main features:
 +
* Working with mobile phone via QR code
 +
* Internet Isolated Cold Wallet
 +
* Multi-currency, cross-chain
 +
* Supports P2PKH, P2SH, and segWit transactions
 +
* 4" Screen with touch panel
 +
* Support private key import
 +
* PIN-code and gesture pattern protect
 +
* Confirmation of transactions details on the screen
 +
* BIP32/BIP39/BIP44
 +
* iPhone and Android companion App: account management, market info and coin exchange.
 +
 +
Website: [https://www.ellipal.com www.ellipal.com]
 +
 +
<br clear="all">
 +
 +
=== ELLIPAL Titan Cold Wallet ===
 +
[[File:Ellipaltitan.jpg|300px|thumb|left|ELLIPAL Titan]]
 +
 +
ELLIPAL Titan is the upgraded version of the ELLIPAL EC01 hardware wallet. Main upgrades are within the hardware which improves protection against physical attacks while keeping absolute protection against remote attacks. ELLIPAL Titan works with ELLIPAL mobile App to secure and manage your cryptocurrency. Information is transferred between the cold wallet and App via QR code only.
 +
 +
New additional features:
 +
* IP65 metal sealed frame - Light water jet & dust protection
 +
* Disassembly test: [https://www.youtube.com/watch?v=DuPcJudtd2o Video]
 +
* Fully isolated components, can never be connected to another device
 +
* USB port removed - no ports on the device
 +
* Anti-Tamper feature - data automatically deleted upon detection of a breach
 +
* Decentralized Finance functions and coin exchange [https://www.ellipal.com/pages/ellipal-cold-wallet-finance ELLIPAL Finance]
 +
* Verifiable and secure QR code [https://github.com/ELLIPAL?tab=repositories Github]
 +
 +
ELLIPAL Titan Website: [https://www.ellipal.com/pages/ellipal-titan ELLIPAL Titan full info]
 +
 +
<br clear="all">
 +
 +
=== [[Trezor|Trezor Model T]] ===
 +
[[File:Trezor-model-t-photo-front.jpg|300px|thumb|left|Trezor Model T]]
 +
 +
Trezor Model T is the premium version and next-generation cryptocurrency hardware wallet. In addition to the functionalities of Trezor One, it has a colored touchscreen for secure on-device input, modern design, an SD card slot, and some other more advanced features.
 +
For more information see [https://wiki.trezor.io/Trezor_Model_T Trezor Model T] and this [https://trezor.io/#comparison comparison table]
 +
 +
[https://shop.trezor.io Trezor E-shop] | [https://wiki.trezor.io Trezor Wiki] | [https://trezor.io Trezor Homepage]
 +
 +
<br clear="all">
 +
 +
=== D'CENT Biometric Wallet - BLE enabled Hardware Wallet  ===
 +
[[File:Dcent wallet photo.png|thumb|left|D'CENT Biometric Wallet]]
 +
 +
D'CENT Biometric Wallet is a secure multi-cryptocurrency hardware wallet. It connects by using Bluetooth or USB to any mobile devices. The wallet is based on multi-IC architecture built on Secure Element(EAL5+) embedded with the SecureOS to provide robust security for the secure execution of multiple wallet applications.
 +
 +
Main features:
 +
* Cryptographic secrets protected by a secure chip
 +
* Large OLED (128x128) display for confirmation of transactions and QR Code for P2P transactions
 +
* Built-in biometric sensor for authentication and also supports the PIN
 +
* Built-in onboarding (seed and key generation in Secure Element)
 +
* BIP39 seed (24 words), easy backup and recovery
 +
* Easy and convenient FW update (no recovery is required after update)
 +
* Bluetooth and USB connectivity
 +
 +
[https://dcentwallet.com D'CENT Wallet Homepage] | [https://medium.com/iotrust D'CENT on Medium] | [https://www.youtube.com/channel/UCKnYqiM3g3iaaAKcRZf-kbA D'CENT Youtube]
 +
 +
<br clear="all">
 +
 +
=== Cobo Vault - Air-gapped with QR code and Secure Element ===
 +
[[File:Cobo vault.jpg|thumb|left]]
 +
 +
Cobo Vault is a completely air-gapped hardware wallet that uses auditable QR codes to transmit transaction information back and forth with a mobile app. It houses an FIPS 140-2 Secure Element that uses four superimposed physical sources for true random number generation (TRNG). Private keys never leave the Secure Element when transactions are signed.
 +
Cobo Vault’s web authentication process helps prevent supply chain attacks though double asymmetric encryption in cooperation with Cobo’s backend HSM server. The web authentication process helps verify the Secure Element is working properly and the device has not been tampered with.
 +
Cobo Vault’s Secure Element’s BIP 32, 39, and 44 compliant firmware is open source ([https://github.com/cobowallet/Cobo-Vault-Security-Chip-Firmware Github]).
 +
 +
Main features:
 +
* Touchscreen Glass Color Display. A large HD, anti-scratch touchscreen lets you manage all your crypto assets and transactions with ease.
 +
* Multi-Currencies and Token Support Support for BTC, ETH, BCH, DASH, LTC, ETC, TRON, USDT(Omni), XRP, EOS. Plus ETH, Tron and EOS tokens. New coins and tokens are added constantly via regular firmware updates.
 +
* Multi-Signature Capability. Multi-Signature lets you share signing power between key individuals, making Cobo Vault the perfect choice for organizations, families, and serious crypto holders.
 +
* Detachable & Swappable Battery. The magnetically detachable battery fully charges in two hours. If the battery encounters problems, swap out for a new one without affecting your Cobo Vault's longevity.
 +
* Secure Back up and Recovery. Securely store and recover your assets with an included metal mnemonic tablet. Even if your Cobo Vault is lost, you can recover your assets on any BIP-32/39/44 compatible wallet.
 +
* Easy and convenient FW update (with TF cards)
 +
* Self-destruct mechanism to prevent circuit hacks
 +
 +
[https://cobo.com/hardware-wallet Cobo Vault Homepage] | [https://medium.com/cobo-vault Cobo Vault on Medium] | [https://www.youtube.com/channel/UC4pPHVxoBYQubw19zL9tu-A Cobo Vault Youtube]
  
 
<br clear="all">
 
<br clear="all">
  
 
== Not purchasable hardware wallets ==
 
== Not purchasable hardware wallets ==
 +
 +
=== Ledger HW.1 - USB Smartcard Hardware Wallet  ===
 +
[[File:Btchip_dongle.jpg|220px|thumb|left|HW.1 inserted in a laptop]]
 +
 +
HW.1 is an implementation of a deterministic ([[BIP 0032]]) Hardware Wallet on a USB smartcard.
 +
 +
It is typically used as a blind secure device for multi signature transactions - holding a set of derived private keys and signing transactions without requiring user confirmation.
 +
 +
Power users can rely on it to confirm all transactions with a second factor scheme turning the dongle into a keyboard typing what the user is supposed to have signed, as a protection against malware.
 +
 +
It is also possible to customize HW.1 for more specific needs, such as creating a prepaid card without revealing the deterministic seed before it is received by the user, or securing bitcoin transactions on a server.
 +
 +
[https://www.ledgerwallet.com/products/3-ledger-hw-1 E-shop] | [https://ledgerhq.github.io/btchip-doc/bitcoin-technical.html Technical Documentation]
 +
 +
<br clear="all">
 +
 +
=== Ledger Nano - USB Smartcard Hardware Wallet  ===
 +
[[File:ledger_wallet_photo.jpg|300px|thumb|left|Ledger Wallet USB]]
 +
 +
Ledger Nano protects your Bitcoin data within a smartcard. Its micro-processor certified against all types of attacks (both physical and logical), and has been used in the banking industry for decades (think credit card chips). The device connects to your computer through the USB port and will do all the Bitcoin cryptographic heavy lifting such as signing transactions inside its secure environment. You can therefore use your Bitcoin account with maximum trust, even on an insecure or compromised computer.
 +
 +
The second factor verification of the transaction signature can be done either with a paired smartphone (Android, iOS) or a physical security card.
 +
 +
The Ledger Wallet Chrome application (available also on Chromium) provides an easy onboarding as well as a seamless user experience, and the Nano is compatible with numerous third party software: [[Electrum]], [[Mycelium]], [[GreenAddress]], Greenbits, [[Coinkite]] and Copay.
 +
 +
[https://www.ledgerwallet.com/products/1-ledger-nano Ledger Nano product page] | [https://github.com/LedgerHQ Source and specifications]
 +
 +
<br clear="all">
 +
 +
=== Ledger Unplugged - NFC Smartcard Hardware Wallet  ===
 +
[[File:ledger_unplugged_photo.jpg|300px|thumb|left|Ledger Unplugged NFC]]
 +
 +
The Ledger Unplugged is a credit card sized NFC hardware wallet. It embeds an open source Java Card app and is compatible with all NFC enabled Android phones.
 +
 +
The device can be used with Mycelium or Greenbits. In case of loss, you can restore it on any Ledger Wallet (Nano or another one) or all other compatible solutions (BIP 39).
 +
 +
[https://www.ledgerwallet.com/products/6-ledger-unplugged Ledger Unplugged product page] | [https://github.com/LedgerHQ/ledger-javacard Source code]
 +
 +
<br clear="all">
 +
 +
=== BWALLET TREZOR clone ===
 +
 +
[[File:BWALLET_Trezor_Clone.jpeg|200px|thumb|left|Chinese clone of Trezor]]
 +
 +
BWALLET is a clone of Trezor by a Chinese company.
 +
Trezor code is open source and this device operates like a Trezor.
 +
However, this product has been [https://www.reddit.com/r/Bitcoin/comments/2tyier/bwallet_review_by_trezor_developer/ reviewed by Marek aka Slush(Trezor developer)] and he has found some problems which makes this device less than 100% compatible, for example it doesn't work with [http://mytrezor.com myTREZOR.com] website and it does not work with Trezor official firmware.
 +
 +
[http://mybwallet.com MyBWALLET.com] | [http://www.bidingxing.com/en/bwallet Buy BWALLET]
 +
 +
<br clear="all">
 +
 +
=== Pi Wallet - cold storage ===
 +
[[File:Piwallet.jpeg|300px|thumb|left|Pi-Wallet]]
 +
 +
The Pi-Wallet is a small computer with the [[Armory]] bitcoin client.
 +
 +
Transactions are signed offline, then transferred on a USB stick via [https://en.wikipedia.org/wiki/Sneakernet Sneakernet] to an online system for broadcasting.
 +
 +
[https://www.pi-wallet.com/ pi-wallet.com]
 +
 +
<br clear="all">
  
 
=== BitcoinCard Megion Technologies-Card based wallet ===
 
=== BitcoinCard Megion Technologies-Card based wallet ===
Line 243: Line 362:
 
Signing transactions only, requires USB host software for transactions & USB power. Has a OLED display and Confirm/Cancel buttons. Evolved out of someone42's prototype below, and has significant contributions from someone42 as well.
 
Signing transactions only, requires USB host software for transactions & USB power. Has a OLED display and Confirm/Cancel buttons. Evolved out of someone42's prototype below, and has significant contributions from someone42 as well.
 
<br clear="all">
 
<br clear="all">
 +
 +
=== Swiss Bank in Your Pocket - Hardware wallet ===
 +
[[File:SBIYP.png|300px|thumb|left|Swiss Bank In Your Pocket]]
 +
 +
The Swiss Bank in Your Pocket is a Windows Desktop Application providing functionality for 5 Bitcoin Wallets and a Bitcoin Vault.
 +
 +
The Bitcoin Vault can only send Bitcoins to the Bitcoin Wallets with in the application. Each Bitcoin wallet can have up to 5 Receive addresses. The intuitive user interface is designed for ease of use. USB security key is required to make any type of transaction. frontend software is installed on windows. Package includes secure USB key, and an additional recovery USB key. So in case of an accident, customer will have an additional backup to access their wallets.
 +
 +
[https://swissbankinyourpocket.com/ swissbankinyourpocket.com]
 +
 +
<br clear="all">
 +
 +
=== BitBox 01 (Digital Bitbox) ===
 +
[[file:Digital-bitbox.png|thumb|left|Digital Bitbox Hardware Wallet]]
 +
 +
* Secure hardware RNG & key storage using [http://www.atmel.com/Images/Atmel-8914-CryptoAuth-ATAES132A-Datasheet.pdf crypto element] with 50 year lifespan and an epoxy-filled case.
 +
* Offline backup and recovery of [[BIP_0032|BIP-32]] seed with a micro SD card rather than [[BIP_0039|BIP-39]] phrase written on paper as in Trezor.
 +
* Native software wallet client and ability to use a mobile phone for 2FA and to verify transaction details.
 +
* Multisig out-of-the-box including Copay support.
 +
* [https://github.com/digitalbitbox Open Source] ([https://github.com/digitalbitbox/mcu#digital-bitbox-firmware firmware], [https://github.com/digitalbitbox/mcu/blob/bf48984fd4a47d9ebf6814f7d01b078964587c7c/src/bootloader.c bootloader], [https://github.com/digitalbitbox/dbb-app desktop client]).
 +
* Full FIDO U2F support (https://en.wikipedia.org/wiki/Universal_2nd_Factor)
 +
* Made in Switzerland (a country with strong privacy laws) by [[Bitcoin Core]] developer Jonas Schnelli.
 +
 +
[https://digitalbitbox.com digitalbitbox.com]
 +
 +
<br clear="all">
 +
 
=== someone42's original prototype ===
 
=== someone42's original prototype ===
 
[[File:Someone42-wallet-prototype.jpg|300px|thumb|left|someone42's original prototype]]
 
[[File:Someone42-wallet-prototype.jpg|300px|thumb|left|someone42's original prototype]]
Line 269: Line 415:
 
* [http://99bitcoins.com/trezor-vs-ledger-hands-hardware-wallets-review/ TREZOR vs. Ledger] - User reviews and Reddit feedback
 
* [http://99bitcoins.com/trezor-vs-ledger-hands-hardware-wallets-review/ TREZOR vs. Ledger] - User reviews and Reddit feedback
 
* [https://bitcointalk.org/index.php?topic=125383.0 Hardware wallet wire protocol]: slush's Hardware wallet wire protocol discussion
 
* [https://bitcointalk.org/index.php?topic=125383.0 Hardware wallet wire protocol]: slush's Hardware wallet wire protocol discussion
* [https://bitcointalk.org/index.php?topic=19080.msg272348#msg272348 in topic Re: Split private keys]: kjj's Todo List discussion for client protocol requirements
+
* [https://bitcointalk.org/index.php?topic=19080.msg272348#msg272348 Re: Split private keys]: kjj's Todo List discussion for client protocol requirements
 
* [https://bitcointalk.org/index.php?topic=134277.0 Hardware Wallet Roundup]
 
* [https://bitcointalk.org/index.php?topic=134277.0 Hardware Wallet Roundup]
 
* [https://www.buybitcoinworldwide.com/wallets/ Bitcoin Hardware Wallet Comparison] - information about using Bitcoin hardware wallets for cold storage.
 
* [https://www.buybitcoinworldwide.com/wallets/ Bitcoin Hardware Wallet Comparison] - information about using Bitcoin hardware wallets for cold storage.
Line 276: Line 422:
 
== See Also ==
 
== See Also ==
  
 +
* [[Storing bitcoins]]
 
* [[How to set up a secure offline savings wallet]]
 
* [[How to set up a secure offline savings wallet]]
 
* [[Cold storage]]
 
* [[Cold storage]]
* [[Paper wallet]]
 
  
 
[[Category:Security]]
 
[[Category:Security]]
[[Category:Wallets]]
+
[[Category:Wallets| ]]
 
[[Category:Hardware]]
 
[[Category:Hardware]]

Revision as of 02:57, 16 January 2020

A hardware wallet is a special type of bitcoin wallet which stores the user's private keys in a secure hardware device.

They have major advantages over standard software wallets:

  • private keys are often stored in a protected area of a microcontroller, and cannot be transferred out of the device in plaintext
  • immune to computer viruses that steal from software wallets
  • can be used securely and interactively, private keys never need to touch potentially-vulnerable software
  • much of the time, the software is open source, allowing a user to validate the entire operation of the device

This page is an attempt to summarize all the known developments of hardware wallets that can use Bitcoin as part of their operation.

Security risks

To date there have been no verifiable incidents of Bitcoins stolen from hardware wallets. Hardware wallets are relatively new, but at least for the time being they have maintained a good track record, unlike the numerous incidents of Bitcoin theft from Internet-connected computers.

However, it's important to understand that hardware wallets are a high value target and depend on various assumptions holding true to maintain security. They are not a silver bullet, and there are several realistic ways in which a hardware wallet can fail to protect your Bitcoin. These risks need to be carefully considered when deciding how much trust to place in a hardware wallet, and which hardware wallet to buy.

How a hardware wallet could fail to protect your Bitcoin:

  1. Malware swaps recipient Bitcoin addresses: a hardware wallet won't protect you from being tricked into sending Bitcoin to the wrong address. For example, malware on a PC could monitor for high value transactions and then swap out the recipient's authentic Bitcoin address for an address controlled by the attacker. When the stakes are high, multi factor (e.g., over the phone) confirmation of a recipient's Bitcoin address is recommended.
  2. Insecure RNG (Random Number Generator): hardware wallets rely on the security of an RNG, often embedded in hardware, to generate your wallet's private keys securely. Unfortunately, it is notoriously difficult to verify the true randomness of the RNG. An insecure RNG may create wallet keys that can later be recreated by an attacker, by generating psuedo-randomness that would seem statistically indistinguishable from true randomness yet still be predictable to an advanced attacker. An RNG may become insecure as a result of malicious weakening or an unintentional mistake. This failure mode is common to any wallet generation procedure in which the true randomness of the source of entropy being used can not be verified.
  3. Imperfect implementation: the security of all computing devices relies on the quality of their implementation. Hardware wallets are no exception. Bugs at the software, firmware or hardware level may allow attackers to break into a hardware wallet and gain unauthorized access to secrets. Even if the design is perfect, proving the security of a hardware or software implementation is a very hard, mostly unsolved problem. To date, no wallet in existence is implemented using provably correct software.
  4. Compromised production process: even a perfect software and hardware implementation of a hardware wallet would be vulnerable to a corrupt production process that introduces intentional or unintentional holes into the final product. The introduction of hardware backdoors is a real concern for high risk financial and military applications.
  5. Compromised shipping process: a compromised fulfillment process may substitute or modify secure devices for superficially identical but insecure replacements. Government programs that intercept hardware and modify them in route to insert backdoors are known to exist.

In summary:

  • While not a silver bullet hardware wallets can still be extremely useful, assuming you take care to use a good one: an authentic device manufactured by trustworthy, technically competent security experts with a good reputation (e.g., TREZOR).
  • Cold storage solutions implemented with open source software and general purpose hardware (e.g., BitKey, Pi Wallet), using a verifiable source of entropy such as physical dice may provide superior security for some use cases (e.g., long term savings).

Connecting to a full node

By default, most hardware wallets instruct the user to connect to the manufacturer's own web interface. The web page cannot steal the user's private keys but can spy on them or trick them into accept fake payments.

Hardware wallets only keep the private keys safe and create spending transactions; they cannot tell you if you have actually received coins and in what quantity. Bitcoin's security model also requires that full node wallets are used. If not, somebody could pay you with a transaction of something other than bitcoin. If bitcoin is digital gold then a full node wallet is your own personal goldsmith who checks that the incoming payments are actually real. Also the third-party wallet will see all your bitcoin addresses so this is very damaging to your privacy.

Most hardware wallets can be connected to Electrum bitcoin wallet. Electrum can be connected to your own full node via a server.

See also: Full node#Why should you use a full node wallet

Commercial hardware wallets (ordered chronologically)

Trezor One

Confirming the transaction with Trezor

Trezor is a secure bitcoin storage and a transaction signing tool with open source hardware and software. The private keys are generated by the device and never leave it thus they cannot be accessed by a malware.

It uses a deterministic wallet structure which means it can hold an unlimited number of keys (BIP 0032/BIP 0044). A recovery seed is generated when the device is initialized. In case Trezor gets lost or stolen, all its contents can be recovered using this seed (private keys, bitcoin balance and transaction history) into a new device or another BIP 0039/BIP 0044 compatible wallet.

Trezor also introduced a unique way of PIN entering preventing keyloggers from recording it even when entered on a compromised computer. An encryption passphrase can be set on top of the PIN protection. More passphrases can be used for plausible deniability.

Trezor One offers everything needed to protect cryptocurrency funds together with advanced features like Password manager or U2F two-factor authorization.

See also Trezor Model T - next-generation cryptocurrency hardware wallet

Trezor E-shop | Trezor Wiki | Trezor Homepage


KeepKey: Your Private Bitcoin Vault

KeepKey showing a bitcoin transaction that needs to be manually approved.

KeepKey is a USB device that stores and secures your bitcoins. When you entrust KeepKey with your money, each and every bitcoin transaction you make must be reviewed and approved via it's OLED display and confirmation button.

KeepKey has a unique recovery feature utilizing a rotating cipher to restore private keys with a BIP 0039 recovery seed. This means it is not necessary to store your private keys on KeepKey: the recovery process is secure enough so that KeepKey can be used as a transaction device for paper backups.

keepkey.com


Opendime: Bitcoin Credit Stick

Opendime Package

The 1st Bitcoin Bearer Bond or just call it a "Bitcoin Stick"

Opendime is a small USB stick that allows you to spend Bitcoin like a dollar bill. Pass it along multiple times. Connect to any USB to check balance. Unseal anytime to spend online. Trust no one.

It comes in the shape of a mini USB, and setting it up is astonishingly quick and simple. You plug OpenDime into a USB port, and it behaves just like a USB drive with a tiny amount of storage. In its folder, is a web page. You open the webpage in your browser, and there’s only one instruction to follow: “Drop a file onto the drive”. Once you do that, the OpenDime automagically generates a unique address for you to receive Bitcoin with.

Opendime.com


Coldcard: Ultra-secure Bitcoin Hardware Wallet

Coldcard Front and Back
  • Coldcard is an easy to use, ultra-secure, open-source and affordable hardware wallet that is easy to back up via an encrypted microSD card. Your private key is stored in a dedicated security chip. MicroPython software design allows you to make changes.
  • BIP39 based, which means you can backup the secret words onto paper, and have lots of sub-accounts and unlimited independent payment addresses. Now with BIP39 passphrase support, unlocking up to 5.9e197 additional wallets from the same seed words! It knows how to understand transactions, so you can see what you are approving.
  • The first "Partially Signed Bitcoin Transaction Format" - PSBT (BIP 174) native wallet which can be used completely offline for its entire lifecycle. See HWI for Bitcoin Core support!
  • True air-gap cold operation via MicroSD sneakernet or standard via USB

Coldcardwallet.com


CoolWallet: The Ultimate Bitcoin Safe

CoolWallet showing Launch App, waiting for user to connect with smartphone via Bluetooth

CoolWallet is a credit card sized Bluetooth device that stores and secures your bitcoins and private keys. It fits in your wallet and works wirelessly.

Every Bitcoin transaction must be manually confirmed and approved through its e-paper display and button.

CoolWallet only acknowledges the paired smartphone. Whoever stole the CoolWallet are not able to steal any bitcoins. Using recovery Seed can restore all your bitcoins in case you lost the device.

coolbitx.com | Source and specifications


BlochsTech card: Your user friendly Bitcoin wallet

Graphic printed on front of BlochsTech cards.

The BlochsTech open Bitcoin card is an open protocol secure hardware Bitcoin wallet your grandmother could use. For shops it's faster to accept than slow QR code based wallets and more reliable as it works offline.

Currently it's of course in a novelty phase like Casascius coins (of which thousands were sold), however in the long run it is fully capable of functionally replacing the VISA system in all nations.

BlochsTech.com



BitLox Bitcoin Hardware Wallet

BitLox Bitcoin Hardware Wallet

BitLox is a metal cased (aluminum or titanium) bitcoin hardware wallet that works with their own web based wallet by USB and apps for iPhone and Android using Bluetooth LE.

At present it is the only bitcoin hardware wallet you can buy that works with iPhone. The device weighs one ounce and is the size of a credit card 4 mm thick.

Bitlox allows you to set up hidden wallets. Unlike other hardware wallets your seed is never displayed on a connected computer or phone but only on the Bitlox. All your wallet, device and transaction PINs are only entered on the BitLox and never on any app.

BitLox has also implemented several advanced security features not available on any other bitcoin hardware wallet.

bitlox.com



Ledger Nano S - USB Smartcard Hardware Wallet

Ledger Wallet Nano S

Ledger Nano S is a secure Bitcoin hardware wallet. It connects to any computer through USB and embeds a built-in OLED display to double-check and confirm each transaction with a single tap on its buttons. It is architectured around a Secure Element (ST31 family) and built on top of the BOLOS platform, a powerful and flexible Operating System allowing the secure execution of multiple Open Source applications in full isolation.

Main features:

  • cryptographic secrets protected by a secure chip
  • open source embedded Bitcoin app
  • Confirmation of transactions on the embedded screen
  • Built-in 4 digits PIN security lock
  • Built-in onboarding (seed generation and recovery)
  • BIP39 seed (12/18/24 words), easy backup and restoration
  • Multi-apps support: FIDO U2F, GPG, SSH…
  • USB connectivity
  • Foldable and compact casing

Ledger Nano S product page


Secalot

Secalot

Main features:

  • Software and hardware are fully open sourced.
  • Utilizes a secure microcontroller with a high performance dedicated cryptographic co-processor.
  • Integrates with the popular Electrum wallet.
  • PIN-code protected.
  • Confirm transactions with a touch button press on the device.
  • Supports P2PKH, P2SH, and segWit transactions.
  • Updatable firmware.
  • Extra functionality: OpenPGP smart card, FIDO U2F authenticator, one-time password generator.

Website: www.secalot.com


ELLIPAL - Airgapped hardware wallet with mobile support

ELLIPAL

ELLIPAL hardware wallet secures keys in cold storage without connections except for LCD screen. It works with companion mobile App via QR code.

Main features:

  • Working with mobile phone via QR code
  • Internet Isolated Cold Wallet
  • Multi-currency, cross-chain
  • Supports P2PKH, P2SH, and segWit transactions
  • 4" Screen with touch panel
  • Support private key import
  • PIN-code and gesture pattern protect
  • Confirmation of transactions details on the screen
  • BIP32/BIP39/BIP44
  • iPhone and Android companion App: account management, market info and coin exchange.

Website: www.ellipal.com


ELLIPAL Titan Cold Wallet

ELLIPAL Titan

ELLIPAL Titan is the upgraded version of the ELLIPAL EC01 hardware wallet. Main upgrades are within the hardware which improves protection against physical attacks while keeping absolute protection against remote attacks. ELLIPAL Titan works with ELLIPAL mobile App to secure and manage your cryptocurrency. Information is transferred between the cold wallet and App via QR code only.

New additional features:

  • IP65 metal sealed frame - Light water jet & dust protection
  • Disassembly test: Video
  • Fully isolated components, can never be connected to another device
  • USB port removed - no ports on the device
  • Anti-Tamper feature - data automatically deleted upon detection of a breach
  • Decentralized Finance functions and coin exchange ELLIPAL Finance
  • Verifiable and secure QR code Github

ELLIPAL Titan Website: ELLIPAL Titan full info


Trezor Model T

Trezor Model T

Trezor Model T is the premium version and next-generation cryptocurrency hardware wallet. In addition to the functionalities of Trezor One, it has a colored touchscreen for secure on-device input, modern design, an SD card slot, and some other more advanced features. For more information see Trezor Model T and this comparison table

Trezor E-shop | Trezor Wiki | Trezor Homepage


D'CENT Biometric Wallet - BLE enabled Hardware Wallet

D'CENT Biometric Wallet

D'CENT Biometric Wallet is a secure multi-cryptocurrency hardware wallet. It connects by using Bluetooth or USB to any mobile devices. The wallet is based on multi-IC architecture built on Secure Element(EAL5+) embedded with the SecureOS to provide robust security for the secure execution of multiple wallet applications.

Main features:

  • Cryptographic secrets protected by a secure chip
  • Large OLED (128x128) display for confirmation of transactions and QR Code for P2P transactions
  • Built-in biometric sensor for authentication and also supports the PIN
  • Built-in onboarding (seed and key generation in Secure Element)
  • BIP39 seed (24 words), easy backup and recovery
  • Easy and convenient FW update (no recovery is required after update)
  • Bluetooth and USB connectivity

D'CENT Wallet Homepage | D'CENT on Medium | D'CENT Youtube


Cobo Vault - Air-gapped with QR code and Secure Element

Cobo vault.jpg

Cobo Vault is a completely air-gapped hardware wallet that uses auditable QR codes to transmit transaction information back and forth with a mobile app. It houses an FIPS 140-2 Secure Element that uses four superimposed physical sources for true random number generation (TRNG). Private keys never leave the Secure Element when transactions are signed. Cobo Vault’s web authentication process helps prevent supply chain attacks though double asymmetric encryption in cooperation with Cobo’s backend HSM server. The web authentication process helps verify the Secure Element is working properly and the device has not been tampered with. Cobo Vault’s Secure Element’s BIP 32, 39, and 44 compliant firmware is open source (Github).

Main features:

  • Touchscreen Glass Color Display. A large HD, anti-scratch touchscreen lets you manage all your crypto assets and transactions with ease.
  • Multi-Currencies and Token Support Support for BTC, ETH, BCH, DASH, LTC, ETC, TRON, USDT(Omni), XRP, EOS. Plus ETH, Tron and EOS tokens. New coins and tokens are added constantly via regular firmware updates.
  • Multi-Signature Capability. Multi-Signature lets you share signing power between key individuals, making Cobo Vault the perfect choice for organizations, families, and serious crypto holders.
  • Detachable & Swappable Battery. The magnetically detachable battery fully charges in two hours. If the battery encounters problems, swap out for a new one without affecting your Cobo Vault's longevity.
  • Secure Back up and Recovery. Securely store and recover your assets with an included metal mnemonic tablet. Even if your Cobo Vault is lost, you can recover your assets on any BIP-32/39/44 compatible wallet.
  • Easy and convenient FW update (with TF cards)
  • Self-destruct mechanism to prevent circuit hacks

Cobo Vault Homepage | Cobo Vault on Medium | Cobo Vault Youtube


Not purchasable hardware wallets

Ledger HW.1 - USB Smartcard Hardware Wallet

HW.1 inserted in a laptop

HW.1 is an implementation of a deterministic (BIP 0032) Hardware Wallet on a USB smartcard.

It is typically used as a blind secure device for multi signature transactions - holding a set of derived private keys and signing transactions without requiring user confirmation.

Power users can rely on it to confirm all transactions with a second factor scheme turning the dongle into a keyboard typing what the user is supposed to have signed, as a protection against malware.

It is also possible to customize HW.1 for more specific needs, such as creating a prepaid card without revealing the deterministic seed before it is received by the user, or securing bitcoin transactions on a server.

E-shop | Technical Documentation


Ledger Nano - USB Smartcard Hardware Wallet

Ledger Wallet USB

Ledger Nano protects your Bitcoin data within a smartcard. Its micro-processor certified against all types of attacks (both physical and logical), and has been used in the banking industry for decades (think credit card chips). The device connects to your computer through the USB port and will do all the Bitcoin cryptographic heavy lifting such as signing transactions inside its secure environment. You can therefore use your Bitcoin account with maximum trust, even on an insecure or compromised computer.

The second factor verification of the transaction signature can be done either with a paired smartphone (Android, iOS) or a physical security card.

The Ledger Wallet Chrome application (available also on Chromium) provides an easy onboarding as well as a seamless user experience, and the Nano is compatible with numerous third party software: Electrum, Mycelium, GreenAddress, Greenbits, Coinkite and Copay.

Ledger Nano product page | Source and specifications


Ledger Unplugged - NFC Smartcard Hardware Wallet

Ledger Unplugged NFC

The Ledger Unplugged is a credit card sized NFC hardware wallet. It embeds an open source Java Card app and is compatible with all NFC enabled Android phones.

The device can be used with Mycelium or Greenbits. In case of loss, you can restore it on any Ledger Wallet (Nano or another one) or all other compatible solutions (BIP 39).

Ledger Unplugged product page | Source code


BWALLET TREZOR clone

Chinese clone of Trezor

BWALLET is a clone of Trezor by a Chinese company. Trezor code is open source and this device operates like a Trezor. However, this product has been reviewed by Marek aka Slush(Trezor developer) and he has found some problems which makes this device less than 100% compatible, for example it doesn't work with myTREZOR.com website and it does not work with Trezor official firmware.

MyBWALLET.com | Buy BWALLET


Pi Wallet - cold storage

Pi-Wallet

The Pi-Wallet is a small computer with the Armory bitcoin client.

Transactions are signed offline, then transferred on a USB stick via Sneakernet to an online system for broadcasting.

pi-wallet.com


BitcoinCard Megion Technologies-Card based wallet

Bitcoin Card

Bitcoincard Home Page

Excellent review by evoorhees

Incorporates a e-paper display, keypad, and radio (custom ISM band protocol.) Unfortunately it is fairly limited in terms of transaction I/O, requiring a radio gateway or another bitcoincard wherever funds need to be transferred.


BitSafe - allten/someone42's hardware wallet

Bitsafe wallet

Final BitSafe announcement

Signing transactions only, requires USB host software for transactions & USB power. Has a OLED display and Confirm/Cancel buttons. Evolved out of someone42's prototype below, and has significant contributions from someone42 as well.

Swiss Bank in Your Pocket - Hardware wallet

Swiss Bank In Your Pocket

The Swiss Bank in Your Pocket is a Windows Desktop Application providing functionality for 5 Bitcoin Wallets and a Bitcoin Vault.

The Bitcoin Vault can only send Bitcoins to the Bitcoin Wallets with in the application. Each Bitcoin wallet can have up to 5 Receive addresses. The intuitive user interface is designed for ease of use. USB security key is required to make any type of transaction. frontend software is installed on windows. Package includes secure USB key, and an additional recovery USB key. So in case of an accident, customer will have an additional backup to access their wallets.

swissbankinyourpocket.com


BitBox 01 (Digital Bitbox)

Digital Bitbox Hardware Wallet

digitalbitbox.com


someone42's original prototype

someone42's original prototype

Hardware Bitcoin wallet - a minimal Bitcoin wallet for embedded devices

Signing transactions only, requires USB host software for transactions & USB power. All work is rolled into the above BitSafe wallet currently.

Other/Defunct but with good discussion:

Seems to have gone defunct around Dec 2011. Some good ideas though and seemed to have started on execution.
Great discussion and good ideas from jim618. Also linked the following video:
Clemens Cap of Uni Rostock explains the Electronic Bitcoin wallet device he's working on. It's based on adafruit microtouch device.
The use of Yubikeys. They only support symmetric crypto, so you'd have to trust the host device.

Smart Card based wallets

This type of device requires complete trust in the host device, as there is no method for user input. See Smart card wallet

Related Resources

See Also