Best Bitcoin Hardware Wallets (2026): Coldcard, BitBox, Jade and More

A hardware wallet keeps the private keys that control your bitcoin on a small, dedicated device instead of on a phone, a laptop or an exchange account. When you send bitcoin, the transaction is built on your computer or phone, signed inside the device, and only the signature leaves it. Malware on your computer can see your balance, but it cannot spend your coins without the device and its PIN.

This guide compares the hardware wallets listed in the Bitcoin Lando hardware wallet directory as of November 2026: what each one does well, where it falls short, and which type of user it suits. Prices quoted are the manufacturers' own list prices as of November 2026 and do not include shipping, taxes or sales. Always buy direct from the maker or an authorized reseller.

Quick picks

• Best for advanced, Bitcoin-only security: Coldcard (Mk5 or Q)
• Best for beginners who want a simple app: BitBox02 (Nova, Bitcoin-only edition)
• Best low-cost open-source option: Blockstream Jade
• Best air-gapped device with a large screen: Keystone 3 Pro
• Best do-it-yourself, stateless signer: SeedSigner or Krux
• Best for people who hold many coins besides bitcoin: Ledger
• Best for people who fear losing a seed phrase: Bitkey

What to look for in a Bitcoin hardware wallet

Every device on this list signs bitcoin transactions offline. The differences come down to a handful of design choices, and the right choice depends more on your habits than on any single spec.

Bitcoin-only or multi-coin

Bitcoin-only firmware supports one asset and nothing else. Less code means fewer places for bugs to hide, and the developers can spend all their time on Bitcoin features such as multisig, PSBT support and passphrases. Multi-coin devices are convenient if you also hold other assets, but each extra coin app adds code that has to be maintained and audited. Several makers, including BitBox and Keystone, offer a Bitcoin-only firmware edition of the same hardware.

Open source and verifiable firmware

Open-source firmware lets independent researchers read the code that guards your keys. Some projects go further with reproducible builds, which let anyone confirm that the firmware running on the device was compiled from the published source. A closed-source design is not automatically unsafe, but it asks you to trust the manufacturer's word on what the code does.

Secure element

A secure element is a tamper-resistant chip designed to resist physical extraction of secrets, the kind of attack someone could attempt after stealing the device. Coldcard uses two secure elements from different vendors, BitBox pairs a general microcontroller with a secure chip, and Jade uses a "virtual secure element" approach in which a remote server helps unlock the device without ever learning the key. DIY signers such as SeedSigner skip the secure element entirely and avoid the problem by never storing the key at all.

Connection method: USB, Bluetooth, NFC or air-gapped

USB and Bluetooth are convenient. Air-gapped devices pass transactions back and forth with QR codes or a microSD card, so there is never a data cable between the signer and an internet-connected computer. Air-gapping reduces the attack surface but adds a few steps to every transaction.

Screen and on-device verification

The screen is the one part of the system you can trust when your computer might be compromised. Before you approve a transaction, the device should show the receiving address and the amount. A larger screen makes it easier to check the full address. Devices without a screen, such as an NFC card, require you to trust the phone app for those details.

Backup and recovery

Most hardware wallets create a 12- or 24-word recovery phrase (BIP-39). That phrase is the real wallet: anyone who has it can take the bitcoin, and losing both the device and the phrase means losing the coins. A few products use other approaches, such as encrypted microSD backups or a 2-of-3 key setup with no single phrase. Whichever method you use, the backup deserves as much thought as the device. A metal backup from the seed backup section survives fire and water far better than paper.

Comparison table

Device	Coins	Connection	Secure element	Open source	List price (Nov 2026)
Coldcard Mk5	Bitcoin only	USB-C, NFC, microSD	Two, from different vendors	Source published	$219
Coldcard Q	Bitcoin only	USB-C, NFC, QR camera, two microSD slots	Two, from different vendors	Source published	$319
BitBox02 Nova	Bitcoin-only or multi-coin edition	USB-C, Bluetooth Low Energy	Yes (secure chip plus MCU)	Yes, reproducible builds	See maker's shop
Blockstream Jade Core	Bitcoin and Liquid	USB-C, Bluetooth	Virtual secure element	Yes	$99
Blockstream Jade Plus	Bitcoin and Liquid	USB-C, Bluetooth, QR camera, SD/USB storage	Virtual secure element	Yes	About $170
Keystone 3 Pro	Bitcoin-only or multi-coin firmware	QR camera only (air-gapped)	Three	Yes	See maker's shop
Foundation Passport Prime	Bitcoin plus security apps	USB-C, QR camera, Bluetooth, NFC	Yes	Yes	$349
SeedSigner	Bitcoin only	QR camera only (air-gapped)	None (stateless)	Yes	Parts usually under $50
Krux	Bitcoin only	QR, SD card	None (firmware for off-the-shelf boards)	Yes	Cost of the board
Ledger	Multi-coin	USB-C; Bluetooth and NFC on some models	Yes	Partly (secure element firmware is closed)	See maker's shop
Bitkey	Bitcoin only	NFC to phone app	Yes	See maker's docs	$250

Prices change often, and several makers run regional pricing, so the table lists a price only where the maker's own product page showed one in November 2026.

The hardware wallets in detail

Coldcard (Mk5 and Q)

Coldcard, made by Coinkite, is a Bitcoin-only line built for people who want maximum control. Both current models store the seed using two secure elements from different manufacturers (Microchip ATECC608 and Maxim DS28C36B), so a flaw in one chip vendor's design is not enough on its own.

The Mk5 replaced the Mk4 in the compact numeric-keypad format. It lists at $219 and supports USB-C, NFC (including tap-to-broadcast through PushTx) and microSD for fully air-gapped signing. Coinkite says the Mk4 is no longer sold, though existing owners still receive firmware and support.

The Q lists at $319 and adds a full QWERTY keyboard, a 3.2-inch screen, a QR code scanner and two microSD slots. It can run on three AAA batteries, which makes it practical for a fully offline setup with no cable attached at all.

Coldcard's strength is depth: duress PINs, multisig coordination, passphrase support, spending policies and many other options. That same depth makes the menus less friendly than most competitors. It works best paired with a desktop coordinator such as Sparrow Wallet.

Good fit: experienced users, larger balances, multisig builders. Less ideal: first-time buyers who want a guided phone app.

BitBox02 and BitBox02 Nova

BitBox02 is designed and made in Switzerland. It is sold in a Bitcoin-only edition and a multi-coin edition, and it pairs with the BitBoxApp on desktop and mobile, which is one of the cleaner companion apps available.

According to the maker's datasheet, the newer BitBox02 Nova Bitcoin-only edition connects over USB-C or Bluetooth Low Energy, has a 128 x 64 OLED display behind glass, and uses capacitive touch sensors for input. Security comes from a dual-chip design: the encrypted seed sits on the main microcontroller, protected by an OPTIGA Trust M V3 secure chip and the device password. The firmware is open source with reproducible builds and has been externally audited. Backups can be written instantly to the included microSD card, with an optional recovery phrase to copy onto paper or metal.

The BitBox02 is a strong default for most people: open source, Bitcoin-only if you want it, easy to set up, and compatible with third-party software such as Sparrow and Electrum.

Good fit: beginners and intermediate users who want a simple, verifiable device. Less ideal: people who require a camera-based air gap.

Blockstream Jade (Core and Plus)

Blockstream Jade is a fully open-source, low-cost signer from Blockstream. Instead of a hardware secure element, Jade uses "blind oracle" encryption: the PIN unlocks the device with help from a remote server that never sees the key, which Blockstream describes as a virtual secure element designed to resist physical key extraction. Jade can also be used in a stateless mode that does not keep the seed on the device.

The Jade Core lists at $99 and connects over USB-C or Bluetooth; it has no camera or battery. The Jade Plus lists at about $170 (Blockstream's own pages show $169 and $169.99) and adds a metal body, a battery, a camera for QR-based air-gapped signing and an SD card or USB drive connector. Both support Bitcoin and Blockstream's Liquid sidechain and pair with the Blockstream app as well as third-party wallets.

Good fit: budget buyers who still want open-source firmware; people who want an air-gapped camera device at a moderate price (Plus). Less ideal: anyone who wants a dedicated hardware secure element.

Keystone 3 Pro

Keystone 3 Pro is an air-gapped device with a 4-inch color touchscreen. Keystone describes it as entirely offline, with no Bluetooth, NFC or Wi-Fi: transactions move only through QR codes scanned by its camera. It uses three secure elements, offers fingerprint verification, and its hardware and software are open source.

The device ships with multi-coin firmware, and a separate Bitcoin-only firmware can be installed after delivery. Keystone does not make its own wallet app; it pairs with third-party software such as Sparrow, Nunchuk, BlueWallet and the Bull Bitcoin Wallet, and it supports multisig.

Good fit: people who want a large screen and a strict QR-only air gap. Less ideal: people who want a single all-in-one app from the hardware maker.

Foundation Passport Prime

Foundation Passport Prime lists at $349. It combines a Bitcoin wallet with other security tools, such as two-factor codes, security keys and encrypted files, on a device with a secure element, an integrated battery, a camera for QR scanning, and an open-source design for both hardware and software. It also offers wireless connection options (Foundation's QuantumLink Bluetooth and NFC) and encrypted "Magic Backups" through the Envoy companion app.

Good fit: people who want a premium, open-source device that also handles other personal security tasks. Less ideal: buyers who want the smallest possible code base for bitcoin alone.

SeedSigner (DIY)

SeedSigner is an open-source project that turns a Raspberry Pi Zero (version 1.3, which has no Wi-Fi or Bluetooth) and a small camera into a Bitcoin signing device. The project says the parts usually cost under $50.

SeedSigner is stateless: it does not store your seed. Each time you sign, you load the seed by scanning a SeedQR (a QR code version of your recovery phrase) or typing the words, and the device forgets it when powered off. Transactions move by two-way QR codes, so there is never a cable to a computer. It works with Sparrow, Specter Desktop, BlueWallet, Nunchuk, Bitcoin Keeper and others, and it is popular as one signer in a multisig setup.

The tradeoff is that the device has no secure element and no PIN. Security relies on keeping your SeedQR or recovery phrase physically safe, and you assemble and flash the device yourself.

Krux (DIY)

Krux is open-source firmware that turns off-the-shelf Kendryte K210 boards, such as the Maix Amigo or M5StickV, into offline Bitcoin signers. It talks to wallet coordinators through QR codes and SD cards, and it can create and restore recovery phrase backups, some with encryption. The project describes itself as a research and development effort, so read its documentation and disclaimer before relying on it for meaningful sums.

Ledger

Ledger is one of the most widely used hardware wallet brands. Its current line includes the Nano Gen5, Flex and Stax touchscreen models and the "Nano Classics" (Nano S Plus and Nano X). Ledger devices support a very large number of coins through the Ledger Wallet app, and Bluetooth is available on several models.

For a bitcoin holder, there are two points worth weighing. First, the firmware that runs inside Ledger's secure element is not open source, so you cannot independently audit it. Second, Ledger offers an optional paid service, Ledger Recover, that can back up an encrypted, split copy of your recovery phrase with third-party custodians if you opt in. Many bitcoin-focused users prefer devices where no such export path exists in the firmware. If you hold many different assets and want one device for all of them, Ledger remains a practical choice.

Bitkey

Bitkey, from Block, Inc., lists at $250 and takes a different approach: it is a Bitcoin-only 2-of-3 multisig wallet with no seed phrase to write down. You hold two keys and Block holds a third that is used for security and recovery; any two keys are needed to move funds, and Block states it cannot move your bitcoin on its own.

The tradeoff is reliance on Block's app and recovery process for some operations. Check the maker's site for the countries where it is sold.

Other devices in the directory

The hardware wallet section also lists several other options. Tapsigner from Coinkite is a credit-card-sized NFC signer that works with apps such as Nunchuk, Bitcoin Keeper and Sparrow; it has no screen, so you must check transaction details in the app before tapping. Satochip is another smart-card style signer. Multi-coin devices such as OneKey, SafePal, ELLIPAL, NGRAVE, Cypherock, Tangem and Arculus may suit people who hold many assets. Compare their open-source status and backup model before choosing one for bitcoin savings.

How to choose

1. Decide on single-signature or multisig. A single device and a well-protected backup is enough for most people. For larger amounts, a multisig setup spreads risk across two or three devices from different makers. The multisig wallet section lists coordinators such as Nunchuk, Liana and Bitcoin Keeper, plus assisted services such as Casa and Unchained.
2. Pick Bitcoin-only unless you need other coins. It narrows the code you have to trust.
3. Prefer open source where possible. Independent review is one of the best defenses against hidden flaws.
4. Match the interface to your skill level. A device you understand is safer than a more advanced one you misuse.
5. Plan the backup before the device arrives. Decide where the recovery phrase will live and whether you will add a passphrase.

Setting up a hardware wallet safely

• Buy direct. Order from the manufacturer or an authorized reseller. Avoid second-hand devices and marketplace listings.
• Check the packaging and firmware. Follow the maker's authenticity check and update to the latest official firmware before loading funds.
• Generate a new seed on the device. Never use a recovery phrase that came printed in the box or that someone else supplied. A pre-filled phrase is a scam.
• Write the phrase offline. Never type it into a computer or phone, photograph it, or store it in cloud notes or a password manager that syncs online.
• Verify the receive address on the device screen before sending funds to it.
• Test recovery with a small amount. Send a little bitcoin, wipe or reset the device, restore from the backup, and confirm the balance before moving larger sums.
• Consider a passphrase carefully. A BIP-39 passphrase adds a "25th word" that protects against someone who finds the recovery phrase, but forgetting the passphrase locks you out permanently.
• Use your own node if you can. Connecting your wallet software to a personal node, such as one from the node section, keeps your addresses and balances away from third-party servers.

For background on the recovery phrase standard, see the BIP-39 specification, and for partially signed transactions, which most of these devices use to talk to wallet software, see BIP-174.

Moving bitcoin off an exchange

Bitcoin held on an exchange is an IOU from that company. If the exchange freezes withdrawals, gets hacked or fails, customers can lose access. Moving coins to a hardware wallet removes that counterparty risk. A simple routine works for most people: buy on an exchange, withdraw to your hardware wallet once you have accumulated an amount worth the network fee, and keep only what you plan to trade on the platform. When you withdraw, copy the address from your wallet software, then confirm it on the device screen before sending.

Frequently asked questions

What happens if a hardware wallet breaks or is lost?

Your bitcoin is not stored on the device; it lives on the Bitcoin blockchain. As long as you have the recovery phrase (and passphrase, if you set one), you can restore the wallet on a new device, often from a different brand that supports the same BIP-39 standard. Without the backup, the coins cannot be recovered.

Is a Bitcoin-only hardware wallet safer than a multi-coin one?

Bitcoin-only firmware has less code, which reduces the attack surface and the number of features that can go wrong. That does not make every multi-coin device unsafe, but for someone who holds only bitcoin, there is little reason to accept the extra complexity.

Is an air-gapped hardware wallet necessary?

Not necessarily. A well-designed USB or Bluetooth device only exports signed transactions, never keys. Air-gapped devices remove the data cable as a possible attack path and suit people who want the strictest setup, at the cost of a few extra steps per transaction.

How much bitcoin justifies buying a hardware wallet?

There is no fixed threshold. A common rule of thumb is to buy one once your holdings are worth more than you would be comfortable losing to an exchange failure or a hacked phone. Entry-level devices cost around $100 or less as of November 2026, so the cost is small compared with the risk for most savers.

Can more than one hardware wallet be used together?

Yes. Multisig wallets require signatures from two or more devices to spend, for example two of three. Using devices from different makers protects against a flaw in any single brand. Coordinators such as Sparrow, Nunchuk and Liana make multisig setups manageable.