Guides / Cold storage
Hardware wallets compared
Coldcard, Keystone, Passport, Jade, Trezor and BitBox compared: coins supported, air-gap method, open source status, price and who each one fits.
Some product links in this guide are affiliate links. How that works.
A hardware wallet is a small device that creates and stores your private keys and signs transactions without exposing the keys to your computer. It’s the most practical form of cold storage for most people.
This page compares the main options in plain terms. Before buying anything, remember the free alternatives: a SeedSigner you build yourself, or an offline computer with Sparrow.
What to look for
- Coins supported. Bitcoin-only devices run less code, which means fewer places for bugs. If you hold other coins, you need a multi-coin device.
- Air-gap method. “Air-gapped” means the device never connects to your computer by cable or wireless for signing. It uses QR codes or a microSD card instead. Devices that connect by USB are still far safer than a phone or exchange, but air-gapped designs reduce what an infected computer can try.
- Open source. Open firmware lets independent experts check what the device does.
- Secure element. A chip designed to resist physical attacks on the stored keys. Most devices here include one.
- Screen. You need to read addresses and amounts on the device itself.
Comparison table
Prices are approximate as of November 2026. Specs change with new models and firmware, so check the maker’s site before buying.
| Device | Coins | Signing connection | Open source | Approx. price |
|---|---|---|---|---|
| Coldcard Q | Bitcoin only | QR, microSD, NFC | Source viewable (see note) | ~$320 |
| Coldcard Mk5 | Bitcoin only | microSD, NFC optional | Source viewable (see note) | ~$220 |
| Keystone 3 Pro | Multi-coin | QR only | Yes | ~$150 |
| Foundation Passport Prime | Bitcoin (plus 2FA and security keys) | QR, Bluetooth, USB-C | Yes | ~$350 |
| Blockstream Jade | Bitcoin (and Liquid) | QR (camera), USB-C, Bluetooth | Yes | ~$80 |
| Trezor Safe 5 | Multi-coin | USB-C | Yes | ~$130 |
| BitBox02 | Bitcoin-only edition or multi-coin | USB-C | Yes | ~$150 |
| SeedSigner (DIY) | Bitcoin only | QR only | Yes | ~$50–70 in parts |
Note: Coinkite publishes Coldcard source code under the MIT license with the “Commons Clause” added. The clause bars selling the software, so it is source-available, not open source by the usual definition. Check the current terms if this matters to you.
Who each one fits
Coldcard Q
Built for people storing serious amounts of bitcoin. It has a full keyboard, a large screen, a QR scanner, two microSD slots, NFC and many advanced security options. It’s the most feature-rich Bitcoin-only device, and the learning curve is steeper.
Coldcard Mk5
A smaller, cheaper Coldcard that replaced the Mk4 in 2026. It signs through a microSD card, so you never plug it into your computer for data. It also has NFC, which you can leave off. A strong choice if you’re comfortable with microSD-based signing and don’t need QR. Mk4 owners still get firmware updates.
Keystone 3 Pro
The pick if you hold coins beyond Bitcoin and want an air-gapped device. It signs only by QR, has a large touchscreen and supports many wallets. Keystone also publishes a separate Bitcoin-only firmware. The device ships with multi-coin firmware, so you install the Bitcoin-only version yourself. Check Keystone’s docs for the current steps.
Foundation Passport Prime
Open source and designed to be easy to use. It signs by QR or over Foundation’s encrypted Bluetooth link, and it also handles 2FA codes and security keys. Foundation discontinued the older Passport Core, which signed by QR and microSD; owners still get updates. Check Foundation’s docs for current signing options.
Blockstream Jade
The cheapest commercial Bitcoin signer here. The original Jade, now called Jade Classic, has a camera, so it can sign by QR without any cable. It also has Bluetooth, which you can skip by signing over QR or USB. It offers an optional stateless mode that doesn’t store your seed, similar to SeedSigner. Blockstream also sells the Jade Plus (camera, Bluetooth, about $150–170) and the Jade Core (Bluetooth and USB, no camera, about $100). Check Blockstream’s comparison page before buying. A good low-cost option if you don’t want to build anything.
Trezor Safe 5
Multi-coin, open-source firmware and a long track record. It connects by USB-C, so it isn’t air-gapped, but the keys never leave the device. A good fit for beginners who hold several coins and want something simple.
BitBox02
Simple to use and Swiss-made, with a Bitcoin-only edition. Connects by USB-C. Good for beginners who want a clean, minimal experience.
A note on Ledger
Ledger is the best-known hardware wallet brand. In 2023 it announced Ledger Recover, an optional paid subscription. If you sign up, your device encrypts your seed and splits it into three fragments, held by Ledger, Coincover and EscrowTech. Any two can rebuild it. Signing up and recovering both require ID verification. The service is opt-in, and the device creates the backup only after you approve it. Many Bitcoin users objected because it showed that firmware can let a seed leave the device, which they had understood to be impossible. Ledger’s reply was that users have always had to trust the firmware of any hardware wallet. Ledger’s firmware is also not fully open source.
Ledger devices work, and millions of people use them. If the ability to export a seed concerns you, choose one of the devices above.
Buy direct from the maker
Only buy hardware wallets from the manufacturer’s own website. Never from Amazon, eBay, or a third-party reseller.
Tampered devices and fake “pre-configured” wallets are real scams. Specific warning signs:
- The box contains a seed phrase already printed on a card. Real devices make you create your own.
- Instructions tell you to enter your seed into a website or app on your computer.
- Packaging seals are broken or look re-glued.
When the device arrives, follow the maker’s own instructions to check it’s genuine, then update the firmware from the official app or site.
Picking one
| If you… | Consider |
|---|---|
| Hold Bitcoin only and want the most security options | Coldcard Q |
| Hold Bitcoin only and want something easy | BitBox02 Bitcoin-only or Jade |
| Want the cheapest commercial option | Jade |
| Hold several coins and want air-gapped | Keystone 3 Pro |
| Hold several coins and want simple | Trezor Safe 5 |
| Like building things | SeedSigner |
After you buy
Whichever device you choose, the same steps apply:
- Create the seed on the device itself.
- Back it up properly. See seed backups.
- Send a small amount, wipe the device, restore it from your backup, and confirm the addresses match.
- Only then move larger amounts.
For larger holdings, consider combining devices from different makers in a 2-of-3 multisig. The cold storage kits page has a full shopping and setup checklist for each approach.
Gear in this guide
Coldcard Q
Bitcoin-only, air-gapped by QR, microSD or NFC. Built for serious storage.
~$320
Coldcard Mk5
Smaller Bitcoin-only Coldcard. Air-gapped by microSD, with optional NFC.
~$220
Keystone 3 Pro
QR-only, multi-coin, large touchscreen. Good if you hold more than Bitcoin.
~$150
Foundation Passport Prime
Open-source signer by QR or encrypted Bluetooth. Also does 2FA and security keys.
~$350
Blockstream Jade
Low-cost Bitcoin signer. The Classic model has a camera for QR signing.
~$80
Trezor Safe 5
Multi-coin, open-source firmware, connects by USB-C.
~$130
BitBox02 Bitcoin-only
Swiss-made, simple, Bitcoin-only edition available. Connects by USB-C.
~$150
SeedSigner
Open-source, build-it-yourself Bitcoin signer with no radios and no storage.
~$50–70 in parts