Hardware wallets evaluated across a secure element you can look up, firmware anyone can rebuild, proof the unit is genuine, key creation you can check, signing and recovering without the maker, and years without a fund loss, each graded on the model the row prices.
Ranked here: purchasable self-custody hardware signing devices, where the key is generated on the device, stays there, and only a signature ever leaves it. Not ranked here: cards whose private key leaves the card, DIY builds with no vendor or list price, devices whose real decision is inheritance or recovery, and devices that give a reader nothing to look up or rebuild.
#1 of 23 · published ranking
BitBox02 Nova
81ChainChoice Score
4199
Why it leads
BitBox02 Nova is 1 point ahead of Trezor, mainly because it scores higher on its checkable keys.
Show the arithmetic
Ahead of Trezor on checkable keys (+2.2 points)
Cost
€175 price, once
ReviewedNext review by Published Methodology v2026.11.1
How this page is reviewed
Reviewed means every product ranked on this page was read against its sources on or after that date; every ranked category is re-read at least every 45 days. Models research, extract and parse. A deterministic engine ranks. Every quote passes an adversarial refute pass.
No provider can pay for a position in this table. The code that computes this order cannot read which links carry a referral code, and every build proves it. Every score below rebuilds from the published criteria.Ranking v2026.11.1 · 6 criteria · 23 products · same inputs, same order
How we review · 23 ranked of 43 assessed · 6 criteria · 0 sponsor weight
How we review
23ranked
43assessed
6criteria
0sponsor weight
Recommendation first, comparison only if needed.
Reviewed and rechecked on the current cycle.
Commercial relationships disclosed before clickout.
Personal comparison
What hardware wallets cost you
Your inputs update the cost column. The independent ranking stays fixed.
The published device price, paid once. Excludes shipping, duty and any replacement.
RankProviderBest fitScoreYour cost
1
BitBox02 NovaEAL6+ secure chip and firmware rebuilt...Top ranked
Secure element you can look up — 10/10Trade-off: First shipped in 2025, so it has a short record in buyers' hands
81score
price, once
Check availability for your country
BitBox02 Nova · bitbox.swiss. Provider links appear once we know which country you are browsing from: ChainChoice links to providers only where it serves in full.
Commission: This provider pays ChainChoice nothing for this link. Disclosure
Crypto products are high risk. Check the provider is authorised where you live before you deposit.
2
TrezorTrezor Safe 3: certified chip you can l...
Secure element you can look up — 10/10Trade-off: Graded on the Safe 3, which first shipped in November 2023, so its record counts thre...
80score
price, once
Check availability for your country
Trezor · trezor.io. Provider links appear once we know which country you are browsing from: ChainChoice links to providers only where it serves in full.
Commission: This provider pays ChainChoice nothing for this link. Disclosure
Crypto products are high risk. Check the provider is authorised where you live before you deposit.
3
BitBox02Firmware rebuilt and matched, seven yea...
Firmware anyone can rebuild and match — 10/10Trade-off: Its ATECC608B secure chip holds no listed certificate; the EAL6+ chip is in the BitBo...
76score
price, once
Check availability for your country
BitBox02 · bitbox.swiss. Provider links appear once we know which country you are browsing from: ChainChoice links to providers only where it serves in full.
Commission: This provider pays ChainChoice nothing for this link. Disclosure
Crypto products are high risk. Check the provider is authorised where you live before you deposit.
4
Blockstream Jade CoreUSB-C and Bluetooth signer at $99 with...
Firmware anyone can rebuild and match — 10/10Trade-off: No secure element: someone holding the device faces the PIN oracle and your passphras...
71score
price, once
Check availability for your country
Blockstream Jade Core · store.blockstream.com. Provider links appear once we know which country you are browsing from: ChainChoice links to providers only where it serves in full.
Commission: This provider pays ChainChoice nothing for this link. Disclosure
Crypto products are high risk. Check the provider is authorised where you live before you deposit.
5
KeystoneAir-gapped QR and microSD signing — fir...
Firmware anyone can rebuild and match — 10/10Trade-off: None of its three secure-element parts (ATECC608B, DS28S60, MAX32520) holds a listed...
70score
price, once
Check availability for your country
Keystone · keyst.one. Provider links appear once we know which country you are browsing from: ChainChoice links to providers only where it serves in full.
Commission: This provider pays ChainChoice nothing for this link. Disclosure
Crypto products are high risk. Check the provider is authorised where you live before you deposit.
6
Keycard ShellAn air-gapped QR signer with a screen a...
Secure element you can look up — 10/10Trade-off: First shipped in 2025, so it has a short record in buyers' hands
69score
price, once
Check availability for your country
Keycard Shell · keycard.tech. Provider links appear once we know which country you are browsing from: ChainChoice links to providers only where it serves in full.
Commission: This provider pays ChainChoice nothing for this link. Disclosure
Crypto products are high risk. Check the provider is authorised where you live before you deposit.
Tied for #6 · ordered by name, A to Z
7
OneKeyCertified THD89 chip at $79 — battery-f...
Secure element you can look up — 10/10Trade-off: Signing runs in closed secure-element firmware, so the rebuilt firmware stops short o...
69score
price, once
Check availability for your country
OneKey · onekey.so. Provider links appear once we know which country you are browsing from: ChainChoice links to providers only where it serves in full.
Commission: This provider pays ChainChoice nothing for this link. Disclosure
Crypto products are high risk. Check the provider is authorised where you live before you deposit.
Tied for #6 · ordered by unrounded weighted total (42.36 against 42.33)
8
Blockstream JadeAir-gapped QR signer at $67 — no secure...
Firmware anyone can rebuild and match — 10/10Trade-off: No secure element: someone holding the device faces the PIN oracle and your passphras...
69score
price, once
Check availability for your country
Blockstream Jade · store.blockstream.com. Provider links appear once we know which country you are browsing from: ChainChoice links to providers only where it serves in full.
Commission: This provider pays ChainChoice nothing for this link. Disclosure
Crypto products are high risk. Check the provider is authorised where you live before you deposit.
15 more assessed and ranked below — none of them hidden for commercial reasons.
Ranked on 6 published criteria weighted 27/27/12/12/11/11, which set goal alignment — 30 of the 86 points. The rest: regional access 20 (constant here), evidence depth 18 (constant here), ease of use 10 (constant here), institutional trust 8 (constant here). Profile match is shown in breakdowns but carries no weight.
How you can lose money here, and what the ranking scores
Key failure: your own keys are made, shown or recovered unsafely.
Scored by Secure element you can look up · 27% (BitBox02 Nova 10/10, Trezor 10/10, BitBox02 5/10)
Scored by Firmware anyone can rebuild and match · 27% (BitBox02 Nova 10/10, Trezor 10/10, BitBox02 10/10)
Scored by Proof the device is genuine and unmodified · 12% (BitBox02 Nova 7/10, Trezor 7/10, BitBox02 7/10)
Scored by Key creation and signing you can check · 12% (BitBox02 Nova 10/10, Trezor 7/10, BitBox02 10/10)
Scored by Sign and recover without the maker · 11% (BitBox02 Nova 10/10, Trezor 10/10, BitBox02 10/10)
Scored by Years in buyers' hands without a device-level fund loss · 11% (BitBox02 Nova 5/10, Trezor 7/10, BitBox02 10/10)
Every failure family that applies to this category is scored, except Information failure, which the provider pages show as a fact.
Audit
Infrastructure
Methodology
2026.11.1
published 10 November 2026
Providers tracked
860+
across 121 categories
Last verified
2 October 2026
newest dated pricing or sentiment read
Named on the roster
2 people
managing directors · 6 automated processes
Decision guide
What matters most before choosing in this category
BitBox02 Nova leads by one point over Trezor's Safe 3. Both have a certified chip you can look up, firmware independent reviewers have rebuilt and matched, and independent wallets that sign without the maker's servers; both let a buyer check how the key was made, and the Nova adds anti-exfil signing, which checks that its signatures leak nothing (Taproot, typed-data and Cardano signatures excepted), while the Safe 3 has the longer record. The original BitBox02 follows. Ledger and OneKey have certified chips, but neither lets you check how the key was made, and Ledger's operating system is closed. For air-gapped signing, Keystone and the Keycard Shell lead; for Bitcoin only, or for coins on other chains, set it as a requirement in Find my best.
Does a secure element whose certificate you can look up matter most (BitBox02 Nova, Trezor, the Keycard Shell, OneKey), or firmware you can verify (BitBox02, Keystone, Blockstream Jade)?
Do you need air-gapped signing by QR code or microSD (Keystone, the Keycard Shell, Blockstream Jade, Foundation Passport, COLDCARD, SafePal), or is USB or Bluetooth fine?
Bitcoin only or several coins, and what is your budget?
Current engine lead
The #1 overall and the scoring weights
BitBox02 NovaData checked Oct 2026
EAL6+ secure chip and firmware rebuilt and matched, with Bluetooth — new in 2025, €175
EAL6+ secure chip and firmware rebuilt and matched, with Bluetooth — new in 2025, €175. Strongest on secure element you can look up (10/10): The Nova names its secure chip, 'OPTIGA™ Trust M V3', which Infineon's datasheet ties to one certified part (BSI-DSZ-CC-0961, EAL6+); the seed is kept encrypted under that chip and the owner's password. Weakest on years in buyers' hands without a device-level fund loss (5/10): No device-level fund loss is on record for the Nova ('We have no reports of lost funds'), but it first shipped in 2025; two secure-chip configuration issues disclosed that October were fixed in firmware 9.25.0. Published price: BitBox02 Nova, Multi edition, at €175.00 including 19% VAT on https://shop.bitbox.swiss/en/products/bitbox02-nova-79/, read 1 October 2026; no US dollar list price is published.
Best forSecure element you can look up — 10/10
Main tradeoffFirst shipped in 2025, so it has a short record in buyers' hands
Verify before signupBitBox02 Nova, Multi edition, at €175.00 including 19% VAT on https://shop.bitbox.swiss/en/products/bitbox02-nova-79/, read 1 October 2026; no US dollar list price is published.
Weighted criteria
Secure element you can look up27%
Firmware anyone can rebuild and match27%
Proof the device is genuine and unmodified12%
Key creation and signing you can check12%
Sign and recover without the maker11%
Years in buyers' hands without a device-level fund loss11%
Methodology
How this category is reviewed
Reviewed on six ladders, each graded on the model the row prices: the maker's cheapest, or a separately sold model whose scores differ on two or more criteria: a secure element whose part number and certificate the certification registries list, firmware an independent reviewer has rebuilt from source and matched to the shipped binary, a check that proves the unit genuine and unmodified before you load it, key creation and signing you can check against bad firmware, signing and recovering with independent wallets and no maker server, and years in buyers' hands without a device-level fund loss. Air-gapped signing, Bitcoin-only builds, connectivity, coin support and price are shown as facts, not scored; in Find my best, air-gapped signing, a Bitcoin-only firmware and signing on other chains are requirements you can set.
The order on this page is the published ranking for this category. Every criterion, weight and source behind it is on the methodology page.
Frequently asked
Questions people ask before choosing hardware wallets
What is the safest hardware wallet?
No device wins everywhere, so we grade six things a buyer cannot easily check alone: whether the secure element has a certificate the registries list, whether independent reviewers have rebuilt the firmware and matched it, whether you can prove the unit genuine before loading it, whether you can check how its key was made and that it signs honestly, whether you can sign and recover without the maker, and how long the model has been in buyers' hands without a device-level fund loss. On those, the BitBox02 Nova leads today by one point over the Trezor Safe 3. Two records are named in their rows rather than hidden: a July 2026 seed-generation flaw that cost COLDCARD owners funds (fixed in firmware 5.6.0), and a 2026 laser attack on Tangem's card chip that Tangem cannot patch.
Why isn't Ledger ranked #1?
Ledger's Nano S Plus has a certified chip anyone can look up, the same top score the BitBox02 Nova and the Trezor Safe 3 earn, and a longer clean record than either. It falls behind on three criteria: its operating system is closed, so no one outside Ledger can rebuild what signs; installing a signing app needs Ledger's live servers; and nothing lets a buyer check how its key was made or that it signs honestly. Our ranking is affiliate-blind: a partnership never moves a provider up.
Is open-source or a secure element more important?
We weight them equally because they answer different attacks: a certified secure element resists someone holding the device, and firmware an independent reviewer has rebuilt and matched shows the device runs the code anyone can read. The secure element's own firmware is closed by necessity, so the firmware score looks at the code that parses and signs. If one matters more to you, choose it as a priority in Find my best and its weight doubles.
Reviewed1 October 2026Method6 criteriaCategoryhardware_wallet
Not financial advice · For informational purposes only · Always do your own research
