KEYS/NOT/PROMISESKeys, not promises
ENDEES
Your first line of defense

Hardware wallets: the honest comparison

A hardware wallet keeps your keys on a dedicated, offline chip and signs transactions without ever exposing them to your computer. But they are not equal — architecture, entropy sources and trust assumptions differ fundamentally.

Why entropy is everything

Your private key is just a very large random number. If the randomness (entropy) that generated it is weak, biased or known to the manufacturer, your “random” key can be brute-forced or is already in someone else’s hands. The whole security of bitcoin reduces to one question: who or what rolled the dice for your key?

  • True random number generators (TRNG) sample physical noise — secure elements have them on-chip, certified (e.g. CC EAL5+).
  • Open-source firmware lets anyone audit how entropy is gathered and mixed — closed-source asks you to trust the vendor.
  • Some wallets mix in entropy from the host computer or let you add your own — dice rolls, coin flips — so no single source can sabotage your key.
  • “Trust, but verify”: advanced users generate seeds with dice offline and import them, eliminating the device’s RNG from the trust equation entirely.
TrezorLedgerBitBox02BitkeyBlockstream JadeKeystone
The open-source pioneer

Trezor

Safe 5 · Safe 3 · Model T

Best forUsers who value auditability and want a proven, multisig-friendly device.
Entropy & key generation

Fully auditable open-source entropy; Safe 3/5 add a certified Secure Element (OPTIGA™) whose RNG output is mixed with the MCU’s — an attacker must break both. Supports Shamir (SLIP-39) backups.

Strengths
  • Fully open-source firmware & desktop Suite — everything auditable
  • On-device screen confirms all operations; microSD / Shamir backup options
  • First-class integration with Sparrow for multisig
  • Long track record since 2013; no customer-data honeypot scandal
Risks & trade-offs
  • Older Model One/T lack a secure element — sophisticated physical extraction attacks are documented (keep the device physically safe + use a passphrase)
  • Default backup is the standard single 12/24-word seed — a single point of failure unless you opt into Shamir
  • PIN is entered via host on older models — vulnerable on a compromised computer
The secure-element fortress

Ledger

Nano S Plus · Nano X · Flex · Stax

Best forUsers prioritizing physical attack resistance and ecosystem over full auditability.
Entropy & key generation

Keys are generated inside a bank-grade Secure Element (ST33, CC EAL5+/6+) with a certified hardware TRNG. Extremely strong randomness — but the firmware is largely closed-source, so you trust Ledger’s implementation rather than verify it.

Strengths
  • Secure Element gives the strongest resistance to physical extraction in its class
  • Huge ecosystem: Ledger Live, thousands of assets, broad third-party support
  • Modern devices (Stax/Flex) have excellent secure touchscreens
Risks & trade-offs
  • Closed-source firmware — entropy and signing cannot be independently audited
  • “Ledger Recover” showed the firmware can export seed fragments from the secure chip — a trust assumption many bitcoiners reject
  • 2020 marketing-database breach leaked customer names/addresses, leading to targeted phishing and even physical threats
  • Bluetooth on Nano X adds attack surface (avoid for pure bitcoin storage)
Swiss minimalism

BitBox02

BitBox02 Bitcoin-only / Multi

Best forMinimalists who want open-source + secure chip in a small, Bitcoin-focused package.
Entropy & key generation

Hybrid architecture: a general-purpose MCU plus a secure chip (ATECC608A). Seed entropy is mixed from three independent sources — the MCU’s true RNG, the secure chip, and the host computer — so no single component can weaken your key. Fully open-source.

Strengths
  • Fully open-source firmware & app, reproducible builds, independent security audits
  • Effortless encrypted microSD backup — no paper needed, yet still exportable as words
  • Bitcoin-only edition shrinks the attack surface to the minimum
  • Discreet, unobtrusive design; excellent with Sparrow & Electrum
Risks & trade-offs
  • Tiny screen — address verification is less comfortable than on larger devices
  • Smaller company & ecosystem than Ledger/Trezor
  • microSD backup is proprietary format — keep a word backup too for vendor independence
The seedless multisig

Bitkey

By Block, Inc. (Jack Dorsey)

Best forNewcomers and families who want multisig security without ever touching a seed phrase.
Entropy & key generation

Radically different: no seed phrase at all. Bitkey is 2-of-3 multisig by design — one key in the app, one in the hardware (fingerprint-gated secure hardware), one on Block’s server for recovery. Keys are generated on-device; you never handle words.

Strengths
  • No seed phrase to lose, photograph or have stolen — the biggest beginner failure mode is designed out
  • 2-of-3 by default: a single lost/stolen item never loses or spends funds
  • Elegant recovery flows (lost phone, lost hardware) with time-delayed server key
  • Fingerprint unlock; clean, beginner-proof UX
Risks & trade-offs
  • You depend on Block’s server key and infrastructure for some recovery paths — a corporate counterparty in your security model
  • Funds are not portable to arbitrary wallets as a simple seed import — you’re inside Bitkey’s system
  • Server key could in theory be coerced or compelled; app+server collusion is out of your control
  • Young product; less battle-tested than decade-old devices; limited advanced tooling (e.g. no generic xpub export flows for external coordinators)
The air-gapped cypherpunk

Blockstream Jade

Fully open-source · camera QR signing

Best forPrivacy-minded users who want a fully open, air-gapped device for singlesig or multisig.
Entropy & key generation

Open-source entropy on the device; Jade’s signature feature is “virtual secure element”: instead of a physical secure chip, your PIN is protected by a blind oracle (server or self-hosted) that never sees the key — PIN guessing is rate-limited without closed silicon.

Strengths
  • Fully air-gapped workflow: QR-camera signing, never plugs into a computer at all
  • Fully open-source hardware & firmware — build it yourself from parts if you like
  • Blind-oracle PIN: strong anti-extraction without trusting a secure-element vendor
  • Stateless option: the device stores nothing; each session starts clean
  • Great price; deep Sparrow & multisig integration
Risks & trade-offs
  • Blind oracle means PIN protection depends on Blockstream’s oracle (unless you self-host it) — a liveness dependency
  • No secure element: a captured device while unlocked/seed temporarily loaded is weaker than secure-chip devices
  • Camera/QR flow is slower and clunkier for beginners
The QR-native vault

Keystone

Keystone 3 Pro · air-gapped

Best forMultisig participants and air-gap purists who want the clearest verification screen.
Entropy & key generation

Secure Element (Microchip ATECC608B class, EAL5+) generates keys with its hardware TRNG; firmware is open-source and the device is 100% QR-air-gapped — no USB data, no Bluetooth. Supports Shamir (SLIP-39) and microSD firmware updates signed by Keystone.

Strengths
  • Fully air-gapped by design — data crosses only as QR codes through the camera
  • Large 4" touchscreen: the best on-device address verification experience
  • Fingerprint sensor + self-destruct (wipe) on physical tampering
  • Excellent multisig citizen: shows fingerprints & descriptors, pairs beautifully with Sparrow and Nunchuk
Risks & trade-offs
  • QR-only workflow means slower signing of big transactions (animated QRs)
  • Company lineage (Cobo) and younger codebase — shorter track record than Trezor/Ledger
  • Bulkier device; needs charging; Shamir words are SLIP-39 (not BIP-39) — mind recovery compatibility