cold-storage

Arculus Wallet Review 2026: The Credit Card Bitcoin Cold Storage

Arculus is a credit card-sized Bitcoin hardware wallet using NFC and a EAL6+ secure element. No battery, no USB, three-factor authentication. Here's who it's best for — and where it falls short.

arculus reviewarculus walletarculus cold storagecard bitcoin walletnfc hardware walletbitcoin hardware wallet review 2026

The Arculus Cold Storage Wallet is unlike anything else in the hardware wallet market. It's a credit card — the same size as your Visa — with an EAL6+ certified secure element embedded inside. No screen, no battery, no USB port. You hold it near your phone and sign transactions via NFC.

This is either a clever evolution in cold storage design or a solution looking for a problem, depending on who you ask. After a thorough look at how it works, where it excels, and where it falls short, here's the verdict.

What Is Arculus?

Arculus is a card-format hardware wallet developed by CompoSecure — a company that has manufactured metal payment cards for major banks for over 20 years. The card looks and feels like a premium metal credit card. Your private keys live inside its secure element and never leave the card.

To use Arculus, you install the Arculus Key app on your iPhone or Android phone. When you want to sign a transaction, you hold the Arculus card near the back of your phone. The app communicates with the card via NFC, the card signs the transaction, and the signed transaction broadcasts to the Bitcoin network.

Your private keys never touch your phone. They never touch the internet. They stay inside the card.

How Arculus Works

Three-Factor Authentication

Arculus uses three-factor authentication to authorize every transaction:

  1. Something you have — the physical Arculus card
  2. Something you know — a 6-digit PIN set during setup
  3. Something you are — biometric authentication (Face ID or fingerprint) on your phone

All three must be present for a transaction to sign. If someone steals your card, they still need your PIN. If someone knows your PIN, they still need the physical card. If someone has both, they need to pass biometrics on your specific phone.

This multi-layer approach is genuinely useful for people who worry about physical theft or social engineering.

The EAL6+ Secure Element

The secure element inside Arculus is rated EAL6+ — the same certification level used in passports and high-security government ID cards. For context:

  • Most hardware wallets (including some premium models) use EAL5+ elements
  • Arculus's EAL6+ rating represents significantly more rigorous testing and formal verification
  • Private keys are stored in a tamper-resistant environment that actively resists physical extraction attempts

The secure element performs all cryptographic operations internally. It only outputs signed transactions — never raw private keys.

No Battery, No Charging

The card draws power from your phone's NFC field. This means:

  • No battery to degrade over time
  • No charging cable to lose
  • The card works indefinitely with no maintenance
  • Can be stored alongside your other cards without degradation

This is a genuine practical advantage over devices like the Coldcard Mk4 or Trezor Safe 5, which both require battery charging or cable connections.

Security Analysis

Strengths

Minimal attack surface. The card has no USB port, no Bluetooth, no WiFi, no screen — and therefore no firmware update mechanism via USB, no USB malware vector, no wireless interception risk. The only communication channel is short-range NFC.

Air-gap approximation. While not a true air-gap (there is NFC communication), the extremely limited NFC range (1-2 cm) and the card's one-way signing model mean the attack surface is tiny compared to USB-connected devices.

Secure element certification. The EAL6+ rating provides formal assurance of the element's tamper resistance that many competitors lack.

Weaknesses

Closed firmware. Arculus's firmware is not open source. This is a significant criticism in Bitcoin security circles, where verifiability is a core value. Devices like the Blockstream Jade (fully open source) give users full transparency into what the firmware actually does.

Companion app dependency. All transaction verification happens on your phone screen — a device that is connected to the internet and runs third-party apps. You're trusting the Arculus Key app to display transaction details accurately. Hardware wallets with on-device screens (like the Trezor Safe 5 or Ledger Nano X) let you verify transaction details on a separate secure display.

Bitcoin-only mode unavailable. Arculus supports multiple cryptocurrencies. There is no Bitcoin-only firmware option. Serious Bitcoin-only security practitioners will prefer devices that are purpose-built for Bitcoin with minimal code surface.

Limited advanced features. No multisig support, no Taproot support at launch, no Tor, no advanced PSBT workflows. Arculus targets a mainstream user who wants "secure but easy" — not the power user who wants fine-grained control.

Arculus vs. Other Card Wallets

Arculus isn't the only card-format hardware wallet on the market.

FeatureArculusTangem WalletCoolWallet Pro
Form factorCredit cardCard (multiple cards)Credit card
CommunicationNFCNFCBluetooth + NFC
Secure elementEAL6+EAL6+EAL5+
Open source firmwareNoNoNo
Screen on deviceNoNoE-ink display
Three-factor authYesNoNo
BatteryNone (NFC-powered)None (NFC-powered)Battery (charges via NFC)
Bitcoin-only modeNoNoNo

Arculus's three-factor authentication is its primary differentiator. Tangem uses multiple cards to distribute key risk but lacks the PIN + biometric authentication layer.

Arculus vs. Traditional Hardware Wallets

Compared to mainstream hardware wallets in the same price range:

FeatureArculusLedger Nano XTrezor Safe 5
Price~$99~$149~$169
Form factorCardUSB donglePhone-like device
ScreenNone (use phone)OLEDTouchscreen
Open sourceNoPartialYes
BluetoothNoYesNo
NFCYesNoNo
Bitcoin-only firmwareNoNoYes
Air-gap optionNoNoNo

Arculus is cheaper than both major competitors while offering a superior secure element rating. But it trades on-device screen verification and open source firmware for its card-format convenience.

Who Should Buy Arculus?

Arculus is a good fit for:

  • People who want cold storage without learning technical concepts
  • Those who want a wallet that looks nothing like a wallet (discretion/privacy)
  • Users who find hardware dongles awkward to carry or use
  • Anyone who values three-factor authentication as a theft-deterrent
  • People new to Bitcoin self-custody who want something beginner-friendly

Arculus is NOT a good fit for:

  • Serious Bitcoin security practitioners (closed firmware, no on-device screen)
  • Multisig users (not supported)
  • People who want to verify addresses on a trusted display
  • Power users who want Taproot, PSBT, or full node integration
  • Those who value open source above all else

For most people reading a hardware wallet review, the Coldcard Mk4 or Trezor Safe 5 will be a better long-term fit. For someone who wants cold storage that fits in a wallet and "just works" without technical configuration, Arculus deserves serious consideration.

The Verdict

Arculus is the best-designed hardware wallet for the non-technical Bitcoin holder. Its credit card form factor, three-factor authentication, EAL6+ secure element, and zero-battery design address real friction points that keep many people on exchanges instead of in self-custody.

The closed firmware and phone-screen dependency are real weaknesses. But for someone who's choosing between leaving their Bitcoin on Coinbase or using Arculus, Arculus is a significant security upgrade.

For the Bitcoin security enthusiast who wants to verify every transaction detail on a trusted display, verify firmware source code, and build advanced multisig setups — look at the Coldcard Mk4, Foundation Passport, or Blockstream Jade instead.

See how Arculus stacks up against the full field in our best hardware wallets roundup, and read our Bitcoin cold storage guide if you're still deciding whether self-custody is right for you.

Rating: 7/10 — excellent execution on a unique concept with real tradeoffs that matter for advanced users.

FAQ

Is Arculus safe for Bitcoin storage? Yes. Arculus uses an EAL6+ certified secure element that stores private keys in a tamper-resistant chip. The keys never leave the card. It is substantially more secure than leaving Bitcoin on an exchange.

Does Arculus work with Bitcoin? Yes. Arculus supports Bitcoin (BTC) along with Ethereum and several other cryptocurrencies. There is no Bitcoin-only firmware option.

What happens if I lose my Arculus card? During setup, Arculus generates a 12-word seed phrase. If you store this backup safely, you can recover your wallet on any compatible hardware wallet using the standard BIP39 process. If you lose the card AND the seed phrase, your Bitcoin is gone.

Can Arculus be hacked remotely? No. The card has no internet connectivity. It only communicates via NFC at a range of 1-2 centimeters. Remote hacking of the secure element itself is not a realistic attack vector.

Is Arculus open source? No. The Arculus firmware is closed source. This is a meaningful limitation for users who want fully verifiable security.

Stay Up to Date on Bitcoin

Get our free Beginners Guide to Buying Bitcoin plus weekly insights for long-term holders.

Related Posts