Matrice de souveraineté des portefeuilles Bitcoin

Réponse rapide

Pas vos clés, pas vos pièces — mais l'auto-conservation n'est que la moitié de la souveraineté. L'autre moitié, c'est de savoir si votre portefeuille vérifie contre VOTRE PROPRE nœud ou téléphone discrètement au serveur de quelqu'un d'autre, lui livrant chaque adresse que vous possédez. Cette matrice note 16 portefeuilles Bitcoin en auto-conservation sur les propriétés qui décident vraiment cela : la connexion au nœud (propre nœud complet, propre serveur Electrum, ou tiers), la conservation des clés, le multisig, l'interopérabilité des signataires matériels, Tor et la licence. Le score de souveraineté est transparent et objectif — voir le barème sous la table.

Étalon-or de la souveraineté (propre nœud par défaut, open source, vrai multisig) : Sparrow et Specter Desktop sur ordinateur, avec Bitcoin Core comme référence maximale — le portefeuille EST votre nœud. Pour les coffres à verrou temporel/succession en miniscript, Liana ; pour le multisig collaboratif sur mobile, Nunchuk. Attention licences — les réalités honnêtes 2026 que la plupart des listes de portefeuilles ratent : (1) LE COINJOIN EST LARGEMENT MORT par défaut — Samourai a été saisi et ses fondateurs condamnés (nov. 2025), donc Sparrow a RETIRÉ Whirlpool (v1.9.0) et le coordinateur de Wasabi a fermé en juin 2024 (coordinateur à fournir soi-même seulement) ; le fork Ashigaru est le seul Whirlpool vivant, mais il exige votre propre Dojo et porte exactement le profil de risque juridique que le DOJ vient de poursuivre. (2) L'AUTO-CONSERVATION N'EST PAS LA SOUVERAINETÉ : seuls 4 de ces 16 (Bitcoin Core, Specter, Sparrow, Ashigaru) parlent à VOTRE nœud par défaut — Electrum et la plupart des portefeuilles mobiles se connectent automatiquement à un serveur du fournisseur ou public, fuyant chaque adresse que vous possédez même si vos clés restent en place. Repointez-les vers votre propre nœud. CSV/JSON gratuits sous CC BY 4.0.

Télécharger le CSV Télécharger le JSON API REST →

Score = barème de souveraineté objectif (ci-dessous). vert/gris = oui/non. Les portefeuilles saisis ou abandonnés sont affichés en dernier et NE sont PAS recommandés. ~ = confiance moindre.

Portefeuille	Souv.	Plateformes	Connexion au nœud	Multisig	Interop. signataire	Coinjoin (2026)	Lightning	Licence
Sparrow Wallet Craig Raw	10	desktop, cli (headless/terminal mode), hardware-companion	own full node (Bitcoin Core) OR own Electrum server (electrs/Fulcrum) — chosen at first launch; NO silent developer server (public Electrum servers are opt-in only). Own-node-first by design.	yes (coordinator)	USB (Ledger, Trezor, BitBox02); air-gap via QR (SeedSigner, Keystone, Passport, Jade) and SD/QR (Coldcard). Broadest signer support of the set.	deprecated (Whirlpool) — Whirlpool client + Soroban features fully REMOVED in v1.9.0 (Apr 2024) after the Samourai seizure; Sparrow has NO working coinjoin	no	Apache-2.0
Specter Desktop cryptoadvance / Specter Solutions	10	desktop (multisig coordinator for air-gapped signers)	own full node (Bitcoin Core) by default; own electrs/Fulcrum also supported. No third-party default — designed to sit on YOUR node.	yes (coordinator) — its flagship purpose	USB (Trezor, Ledger, BitBox02, Specter-DIY); air-gap via QR + SD (Coldcard, SeedSigner, Keystone, Passport, Jade)	no	no	MIT
Bitcoin Core (wallet) Bitcoin Core contributors	9	desktop (bitcoin-qt GUI), cli (bitcoin-cli / bitcoind RPC)	own full node — the wallet IS your node; no third-party server exists in the path. The sovereignty baseline; own-node by definition.	yes (participant + coordinator, manual via descriptors + PSBT; no guided GUI)	via HWI on CLI; otherwise PSBT export to any external signer. No native in-GUI signer flow.	no	no	MIT
Blockstream Green Blockstream	8	mobile (iOS, Android), desktop (Windows, macOS, Linux)	DEFAULT is Blockstream's Green/Electrum backend; a 'Personal Node' setting connects your own Electrum server, plus optional SPV full-node validation (Android).	participant — 'Multisig Shield' is assisted 2-of-2 / 2-of-3 with Blockstream as 2FA co-signer, NOT a general external-signer coordinator; singlesig accounts are standard BIP84	air-gap QR + USB (desktop) + BLE (Jade); Blockstream Jade, Ledger, Trezor	no	self-custodial via Greenlight (Breez SDK) — keys on device, LN node hosted on Blockstream cloud	Apps GPL/AGPL-family; underlying gdk under a custom Blockstream license (verify per repo)
BlueWallet BlueWallet Services	8	mobile (iOS, Android), macOS (Catalyst), Apple Watch	DEFAULT is BlueWallet's public Electrum servers; you can point it at your own Electrum Personal Server / electrs / ElectrumX. LN now requires your OWN LNDHub/LND.	yes (coordinator)	air-gap QR (animated BC-UR) + microSD (Coldcard) + PSBT file; QR/file-based signers, no USB (mobile)	no	self-custodial only — the vendor custodial LNDHub node (lndhub.io) was fully SHUT DOWN in 2023 (final deadline 31 May 2023). Lightning works only if you run your own LNDHub/LND. (Candidate's 'being sunset' was outdated — it is already gone.)	MIT
Nunchuk Nunchuk (Hugo Nguyen / Nunchuk Pte Ltd)	8	mobile (iOS, Android), desktop (macOS, Windows, Linux)	DEFAULT is Nunchuk's own Electrum-protocol server, but you can point it at your own ElectrumX/electrs/Fulcrum or a Bitcoin Core node (works with Umbrel/Start9/myNode). Can run over Tor.	yes (coordinator)	air-gap QR (BC-UR) + USB (desktop) + microSD + NFC; Coldcard, Jade, SeedSigner, Passport, Trezor, Ledger, BitBox, TAPSIGNER/SATSCARD, plus encrypted software keys	no	no (on-chain multisig / collaborative-custody focus; not a self-custodial LN wallet)	GPL-3.0 (apps + libnunchuk). NOTE: the multi-device sync/coordination backend is proprietary (open-core), though an optional self-hosted relay + e2e-encrypted sync exist for the sync layer.
Ashigaru (Wallet + Whirlpool/Terminal) Ashigaru Open Source Project (anonymous; fork of Samourai Wallet source frozen at 2024-04-24)	7	mobile (Android) + desktop CLI/TUI (Ashigaru Terminal — Windows, macOS, Linux)	own full node — the Android wallet REQUIRES your own Dojo node for full functionality (else offline mode); Ashigaru Terminal (Whirlpool) uses an Electrum-server backend (electrs on Start9/Umbrel/myNode), removing the Dojo dependency.	no	n/a — hot wallet (BIP84 + BIP47 PayNyms); no hardware-signer interop	yes — Ashigaru Whirlpool is the ONLY working coinjoin in this matrix; new Zerolink coordinator live since mid-2025 (v1.0.0), ACTIVE 2026, Tor-only, pools 0.025 & 0.25 BTC, 5% fee	no	Samourai-derived open source (verify exact terms per Ashigaru repo)
Bull Bitcoin Wallet Bull Bitcoin / Satoshi Portal	7	mobile (iOS, Android)	DEFAULT is Bull Bitcoin's no-log Electrum server (Blockstream secondary); you can point at your own Electrum server; Mempool instance for fees; Tor supported.	no	watch-only import (xpub/ypub/zpub, Coldcard file, NFC, QR) + PSBT export for offline signing; single-sig, not a multisig coordinator	no	self-custodial via Boltz non-custodial atomic swaps (funds held on Liquid at rest, swapped in/out of LN) — no channel management	MIT
Electrum Thomas Voegtlin / spesmilo	7	desktop, mobile (Android), cli	third-party server BY DEFAULT — auto-connects to PUBLIC ElectrumX servers (an ADDRESS-PRIVACY LEAK even though keys stay local). Can and should be repointed at your own electrs/Fulcrum/ElectrumX/EPS for sovereignty.	yes (coordinator)	USB (Ledger, Trezor, Coldcard, BitBox02, KeepKey); air-gap via PSBT file/QR (Coldcard, SeedSigner)	no	self-custodial (native Electrum Lightning; submarine swaps, watchtowers)	MIT
Liana Wizardsardine	7	desktop (GUI), cli (lianad daemon), hardware-companion	own full node (Bitcoin Core, managed v27.1) OR own Electrum server (electrs/Fulcrum, added in v7.0) — both first-class; 'Liana Connect' (Wizardsardine-hosted) is an OPTIONAL no-node convenience, not a forced default. Default depends on the setup path chosen.	yes (coordinator) — miniscript spending policies incl. multisig combined with timelocked recovery paths	USB (Ledger, BitBox02); air-gap/SD (Coldcard, Specter-DIY); tap-miniscript signers for Taproot policies (Ledger, Coldcard, Specter-DIY, BitBox02 fw 9.21+)	no	no	BSD-3-Clause
BitBoxApp BitBox (Shift Crypto AG)	6	desktop, mobile (Android/iOS), hardware-companion (BitBox02)	third-party server BY DEFAULT — BitBox/Shift's own electrs servers (non-custodial but leaks addresses to Shift). Can be repointed at your own Electrum server (electrs/EPS/Fulcrum) in Advanced Settings.	participant (BitBox02 signs; multisig must be coordinated in Sparrow/Electrum/Nunchuk — BitBoxApp has no multisig coordinator UI)	native pairing with BitBox02 only (USB desktop; USB/BLE mobile); not a general multi-signer coordinator	no	self-custodial via Breez SDK (LSP-assisted; beta; non-custodial keys)	Apache-2.0
Envoy (by Foundation) Foundation Devices	6	mobile (iOS, Android); hardware-companion to Foundation Passport / Passport Prime	third-party server by DEFAULT (Foundation's Electrum-protocol servers) — but 'Add Node' connects your own Electrum/Fulcrum or full node to remove reliance on Foundation entirely; Tor built-in.	no	air-gap QR (animated UR/BBQr) + BLE (Passport Prime) + microSD; purpose-built companion for Foundation Passport signing	no	no (Bitcoin on-chain only)	GPL-3.0-or-later
Phoenix ACINQ	5	mobile (iOS, Android)	third-party by DEFAULT — a lightweight Eclair node runs on your phone but depends on ACINQ as its SOLE mandatory LSP for liquidity/routing/backup; on-chain data comes from a random public Electrum server. You CAN set your own Electrum for on-chain in advanced settings, but the ACINQ LSP dependency is not removable.	no	n/a — 12-word seed on device; no hardware-signer interop	no	self-custodial (Eclair) via a single dynamic channel resized by splicing; MANDATORY sole dependency on ACINQ as LSP; BOLT12 supported; ACINQ calls it 'trust-minimized, not trustless'	Apache-2.0
Wasabi Wallet zkSNACKs (original) — now community-maintained open-source	5	desktop	client-side BIP158 block filters. v2.6+ ('Prometheus') can sync and operate WITHOUT any central backend, connecting directly to your own full node (ships Bitcoin Knots for one-click local node); when a filter hits, the block is pulled from your node. Historically fetched filters from the zkSNACKs backend.	no	USB via HWI (Coldcard, Trezor, Ledger, BitBox02) for watch-only + PSBT signing	deprecated (WabiSabi) — zkSNACKs coordinator shut 1 Jun 2024; coinjoin only works if you select a third-party/self-hosted coordinator (v2.0.8+ 'Change Coordinator' UI; ~9 community coordinators; Ginger fork ships a default). NOT working out of the box.	no	MIT
ZEUS ZEUS LN (Evan Kaloudis)	5	mobile (iOS, Android)	flagship sovereign use = remote-control YOUR OWN LND / Core Lightning / Eclair (REST/gRPC/LNC/Tor); alternatively an embedded self-custodial node (LDK Node default, formerly embedded LND) using Neutrino/SPV. On-chain via public Electrum unless own set.	no	n/a — connects to LN node backends (LND/CLN/Eclair) or embedded LDK; not a hardware-signer wallet	no	self-custodial when connected to your own LND/CLN/Eclair or the embedded LDK node — BUT the new 'Mortal' onboarding tier DEFAULTS new users to CUSTODIAL Cashu ecash (the mint holds funds) before graduating them to the self-custodial 'God' tier node	AGPL-3.0
Samourai Wallet (reference row — SEIZED, DO NOT FUND) SEIZED/DEFUNCT Samourai Wallet LLC — founders Keonne Rodriguez & William Lonergan Hill arrested Apr 2024, pleaded guilty, sentenced Nov 2025 to 5 and 4 years	5	mobile (Android) — no longer distributed (removed from Play Store; infra/domain seized)	own full node (Dojo) historically — but the project's coordinator/backend/domains were SEIZED, so live use is defunct	no	n/a — hot wallet (BIP84 + BIP47 PayNyms); historical cold pairing via Sparrow/Passport (Sencha)	deprecated (Whirlpool) — coordinator SEIZED 24 Apr 2024; defunct. Root cause of Sparrow's removed Whirlpool client (v1.9.0). Revived separately by the Ashigaru fork.	no	Source-available (Unlicense-era)

Barème du score de souveraineté (0-10, objectif). Connexion au nœud : propre nœud par défaut +3, sinon (se connecte par défaut à un serveur du fournisseur mais repointable vers votre propre nœud) +1. Open source +2. Clés en auto-conservation +1. Coordinateur multisig +1. Tor intégré +1. Interop. de signataire air-gap +1. Descripteurs +1. Le score mesure UNIQUEMENT les propriétés de souveraineté — pas l'ergonomie, l'UX ni les audits de sécurité — alors lisez-le en parallèle des colonnes, pas à leur place. C'est le complément coordinateur-logiciel du jeu de données des appareils de signature matériels : choisissez un portefeuille ici, jumelez-le avec un signataire là. Pour ce que chacun de ces portefeuilles DÉRIVE réellement — chemin de dérivation par défaut, standard de seed, gap limit, et ce qu'il faut pour restaurer la même seed dans un logiciel différent — voir la matrice de récupération et de chemins de dérivation. Fait partie de la verticale souveraineté et du hub auto-hébergement de D-Central. Vérifiez chaque projet avant de confier des fonds.

Produits, réparations et guides connexes

Dernière révision: 27 juillet 2026.