{
    "meta": {
        "title": "Bitcoin Signing Devices (Hardware Wallets) Reference",
        "description": "Neutral, machine-readable reference of 16 Bitcoin signing devices (hardware wallets / air-gapped signers) with firmware open-source status, secure-element chip, air-gap method, interface, and PSBT / multisig / BIP39-passphrase / stateless support.",
        "generated": "2026-06-27T04:51:51+00:00",
        "version": "1.0",
        "license": "https://creativecommons.org/licenses/by/4.0/",
        "license_name": "CC BY 4.0",
        "source": "https://d-central.tech/bitcoin-signing-devices/",
        "record_count": 16,
        "disclaimer": "Capabilities reflect each device's own documentation at time of compilation and can change with firmware updates and new hardware revisions. This reference does not rank devices or name a \"best\" — match a signer to your own threat model and verify every spec against the manufacturer."
    },
    "rows": [
        {
            "name": "Coldcard Mk4",
            "manufacturer": "Coinkite",
            "open_source": "Partial",
            "secure_element": "Yes — dual (Microchip ATECC608B + Maxim DS28C36B)",
            "air_gap_method": "microSD / NFC",
            "interface": "USB-C, microSD, NFC-V, keypad, LCD",
            "psbt_support": "Yes",
            "multisig": "Yes",
            "bip39_passphrase": "Yes",
            "stateless_seedless": "No",
            "notable": "Bitcoin-only signer with two secure elements from different vendors; pioneered air-gapped PSBT over microSD. USB and NFC data can be physically and permanently disabled by cutting a PCB trace. Firmware source is published and reproducible under a custom (non-OSI) license.",
            "source_url": "https://coldcard.com/docs/coldcard-mk4/"
        },
        {
            "name": "Coldcard Q",
            "manufacturer": "Coinkite",
            "open_source": "Partial",
            "secure_element": "Yes — dual (Microchip ATECC608B + Maxim DS28C36B)",
            "air_gap_method": "QR / microSD / NFC",
            "interface": "QR scanner, QWERTY keyboard, dual microSD, USB-C, NFC, 3.2-inch LCD",
            "psbt_support": "Yes",
            "multisig": "Yes",
            "bip39_passphrase": "Yes",
            "stateless_seedless": "No",
            "notable": "Larger Coldcard with a full QWERTY keyboard, built-in QR scanner and a 320x240 LCD; runs on AAA batteries for fully air-gapped operation. Shares the Mk4 dual-secure-element security model.",
            "source_url": "https://coldcard.com/docs/coldcard-q/"
        },
        {
            "name": "SeedSigner",
            "manufacturer": "SeedSigner (open-source project)",
            "open_source": "Yes",
            "secure_element": "No",
            "air_gap_method": "QR",
            "interface": "QR camera, joystick/buttons, 1.3-inch LCD",
            "psbt_support": "Yes",
            "multisig": "Yes",
            "bip39_passphrase": "Yes",
            "stateless_seedless": "Yes",
            "notable": "DIY signer built from commodity Raspberry Pi Zero parts (typically under $50). No WiFi, Bluetooth, USB data or persistent storage — the seed is re-entered each session and never stored; all communication is by QR code.",
            "source_url": "https://github.com/SeedSigner/seedsigner"
        },
        {
            "name": "Krux",
            "manufacturer": "Krux (open-source project)",
            "open_source": "Yes",
            "secure_element": "No",
            "air_gap_method": "QR / microSD",
            "interface": "QR camera, touchscreen (some boards), microSD, optional thermal printer",
            "psbt_support": "Yes",
            "multisig": "Yes",
            "bip39_passphrase": "Yes",
            "stateless_seedless": "Yes",
            "notable": "Open-source firmware for off-the-shelf Kendryte K210 boards (M5StickV, Maix Amigo). Defaults to a stateless/amnesic mode that holds keys only for the session; signs by QR or microSD and supports Taproot and miniscript.",
            "source_url": "https://selfcustody.github.io/krux/"
        },
        {
            "name": "Trezor Safe 5",
            "manufacturer": "SatoshiLabs (Trezor)",
            "open_source": "Yes",
            "secure_element": "Yes — Infineon OPTIGA Trust M (V3), CC EAL6+",
            "air_gap_method": "none (USB)",
            "interface": "USB-C, color touchscreen, haptic feedback",
            "psbt_support": "Yes",
            "multisig": "Yes",
            "bip39_passphrase": "Yes",
            "stateless_seedless": "No",
            "notable": "Touchscreen device pairing a general-purpose MCU with an EAL6+ secure element that gates PIN and passphrase entropy. Firmware is fully open source with verified boot.",
            "source_url": "https://trezor.io/trezor-safe-5"
        },
        {
            "name": "Trezor Safe 3",
            "manufacturer": "SatoshiLabs (Trezor)",
            "open_source": "Yes",
            "secure_element": "Yes — Infineon OPTIGA Trust M (V3), CC EAL6+",
            "air_gap_method": "none (USB)",
            "interface": "USB-C, two buttons, OLED",
            "psbt_support": "Yes",
            "multisig": "Yes",
            "bip39_passphrase": "Yes",
            "stateless_seedless": "No",
            "notable": "Button-based wallet that introduced a dedicated EAL6+ secure element to the Trezor line alongside the main MCU. Open-source firmware with verified boot.",
            "source_url": "https://trezor.io/trezor-safe-3"
        },
        {
            "name": "Trezor Model T",
            "manufacturer": "SatoshiLabs (Trezor)",
            "open_source": "Yes",
            "secure_element": "No",
            "air_gap_method": "none (USB)",
            "interface": "USB-C, color touchscreen, microSD (SD-protect)",
            "psbt_support": "Yes",
            "multisig": "Yes",
            "bip39_passphrase": "Yes",
            "stateless_seedless": "No",
            "notable": "Long-running open-source touchscreen wallet with no dedicated secure element (keys held encrypted in MCU flash). Discontinued in 2024 in favour of the Safe line.",
            "source_url": "https://trezor.io/learn/security-privacy/how-trezor-keeps-you-safe/secure-elements-in-trezor-safe-devices"
        },
        {
            "name": "Ledger Nano S Plus",
            "manufacturer": "Ledger",
            "open_source": "No",
            "secure_element": "Yes — ST33 (CC EAL5+)",
            "air_gap_method": "none (USB)",
            "interface": "USB-C, two buttons",
            "psbt_support": "Yes",
            "multisig": "Yes",
            "bip39_passphrase": "Yes",
            "stateless_seedless": "No",
            "notable": "Wired-only signer built on a banking-grade ST33 secure element running Ledger's proprietary BOLOS OS (individual apps are open source, the OS is not). PSBT and multisig are handled through external coordinators such as Sparrow or Electrum.",
            "source_url": "https://www.ledger.com/products/ledger-nano-s-plus"
        },
        {
            "name": "Ledger Nano X",
            "manufacturer": "Ledger",
            "open_source": "No",
            "secure_element": "Yes — ST33J2M0 (CC EAL5+)",
            "air_gap_method": "none (USB / Bluetooth)",
            "interface": "USB-C, Bluetooth 5.0, battery, two buttons",
            "psbt_support": "Yes",
            "multisig": "Yes",
            "bip39_passphrase": "Yes",
            "stateless_seedless": "No",
            "notable": "Adds Bluetooth and a battery to the ST33/BOLOS platform for mobile use; the secure element stores keys while BOLOS isolates apps. Operating system is proprietary.",
            "source_url": "https://www.ledger.com/ledger-nano-x-bluetooth-security-model-of-a-wireless-hardware-wallet"
        },
        {
            "name": "Ledger Stax",
            "manufacturer": "Ledger",
            "open_source": "No",
            "secure_element": "Yes — ST33K1M5 (CC EAL6+)",
            "air_gap_method": "none (USB / Bluetooth / NFC)",
            "interface": "USB-C, Bluetooth 5.2, NFC, E Ink touchscreen, Qi wireless charging",
            "psbt_support": "Yes",
            "multisig": "Yes",
            "bip39_passphrase": "Yes",
            "stateless_seedless": "No",
            "notable": "E Ink touchscreen device on an EAL6+ ST33 secure element with BOLOS; supports wireless Qi charging and NFC. OS proprietary, apps open source.",
            "source_url": "https://shop.ledger.com/products/ledger-stax"
        },
        {
            "name": "BitBox02",
            "manufacturer": "BitBox (Shift Crypto)",
            "open_source": "Yes",
            "secure_element": "Yes — Microchip ATECC608B (paired with an ATSAMD51 MCU)",
            "air_gap_method": "none (USB; microSD = backup)",
            "interface": "USB-C, capacitive touch sliders, OLED, microSD (backup)",
            "psbt_support": "Yes",
            "multisig": "Yes",
            "bip39_passphrase": "Yes",
            "stateless_seedless": "No",
            "notable": "Fully open-source (Apache-2.0) and reproducible firmware. The seed is encrypted and held in MCU flash rather than on the secure element; microSD makes instant offline backups. Ships in Multi and Bitcoin-only editions.",
            "source_url": "https://bitbox.swiss/bitbox02/"
        },
        {
            "name": "Foundation Passport",
            "manufacturer": "Foundation Devices",
            "open_source": "Yes",
            "secure_element": "Yes — Microchip ATECC608B",
            "air_gap_method": "QR / microSD",
            "interface": "QR camera, microSD, keypad, color LCD (battery-powered)",
            "psbt_support": "Yes",
            "multisig": "Yes",
            "bip39_passphrase": "Yes",
            "stateless_seedless": "No",
            "notable": "Fully air-gapped, battery-powered signer that communicates only by QR and microSD — no USB data path and no wireless. Open-source firmware and hardware; firmware is verified by 2-of-4 Foundation signing keys, and expert users can add their own.",
            "source_url": "https://github.com/Foundation-Devices/passport2/blob/main/SECURITY/SECURITY.md"
        },
        {
            "name": "Blockstream Jade",
            "manufacturer": "Blockstream",
            "open_source": "Yes",
            "secure_element": "No (Virtual Secure Element + blind-oracle PIN)",
            "air_gap_method": "QR",
            "interface": "USB-C, Bluetooth, QR camera, click-wheel",
            "psbt_support": "Yes",
            "multisig": "Yes",
            "bip39_passphrase": "Yes",
            "stateless_seedless": "No",
            "notable": "Low-cost open-source signer on an Espressif ESP32. In place of a hardware secure element it splits the secrets between the device PIN and a remote blind oracle, so a locked Jade alone holds nothing usable. Works air-gapped by QR, or over USB and Bluetooth.",
            "source_url": "https://store.blockstream.com/products/blockstream-jade-hardware-wallet"
        },
        {
            "name": "Keystone 3 Pro",
            "manufacturer": "Keystone",
            "open_source": "Yes",
            "secure_element": "Yes — three SEs (Microchip ATECC608B, Maxim DS28S60, Maxim MAX32520)",
            "air_gap_method": "QR / microSD",
            "interface": "QR camera, microSD, 4-inch touchscreen, fingerprint reader; USB-C (charge/firmware only)",
            "psbt_support": "Yes",
            "multisig": "Yes",
            "bip39_passphrase": "Yes",
            "stateless_seedless": "No",
            "notable": "Air-gapped touchscreen signer using three secure elements (two certified CC EAL5+) plus a fingerprint reader. No Bluetooth, WiFi or NFC and no USB data path — signs only by QR or microSD. Open-source firmware.",
            "source_url": "https://keyst.one/shop/products/keystone-3-pro"
        },
        {
            "name": "Coinkite Tapsigner",
            "manufacturer": "Coinkite",
            "open_source": "No",
            "secure_element": "Yes",
            "air_gap_method": "NFC",
            "interface": "NFC tap (credit-card form factor)",
            "psbt_support": "Yes",
            "multisig": "Yes",
            "bip39_passphrase": "No",
            "stateless_seedless": "No",
            "notable": "Card-format single-key signer that holds a BIP32 extended private key (XPRV, not a BIP39 phrase) in a secure element and signs over an ECDH-encrypted NFC tap. Serves as a multisig cosigner with wallets like Nunchuk and Sparrow; the NFC protocol is open, the card firmware is closed.",
            "source_url": "https://github.com/coinkite/coinkite-tap-proto"
        },
        {
            "name": "Bitkey",
            "manufacturer": "Block, Inc.",
            "open_source": "Partial",
            "secure_element": "No (secure MCU — Silicon Labs EFR32MG24, ARM TrustZone + PUF)",
            "air_gap_method": "NFC",
            "interface": "NFC, fingerprint sensor",
            "psbt_support": "Yes",
            "multisig": "Yes",
            "bip39_passphrase": "No",
            "stateless_seedless": "No",
            "notable": "Seedless 2-of-3 multisig system — keys live on the device, the phone app and Block's server, with no BIP39 recovery phrase. Fingerprint-authenticated NFC hardware key; firmware uses signed secure boot and is being progressively open-sourced.",
            "source_url": "https://bitkey.world/"
        }
    ]
}