cold-storage
SeedSigner Review 2026: The DIY Air-Gapped Bitcoin Signing DeviceSeedSigner review 2026: open-source DIY air-gapped Bitcoin signing device. Stateless design, full transparency, ~$50 in parts. Who should build one?
BitBox02 doesn''t have Ledger''s marketing budget or Trezor''s brand recognition. But it has something more valuable: a decade of clean security history, fully open-source hardware and firmware, and a team in Zurich that cares about doing it right.
This is a review of the BitBox02 Bitcoin-only edition — the one you actually want if Bitcoin is what you''re here to hold.
Who Makes the BitBox02?
Shift Crypto is a small company based in Zurich, Switzerland. They were founded in 2015 with a clear focus: build the best Bitcoin hardware wallet possible, cut nothing for cost or convenience, and make the whole thing open source.
The team has maintained an unusually clean track record. No major breach. No controversial cloud backup service. No leaked customer databases. Compare that to Ledger''s 2020 data breach (which exposed hundreds of thousands of customer names, addresses, and phone numbers) or the ongoing debates about Ledger Recover. Shift Crypto has stayed small, focused, and out of the headlines.
What''s in the Box
The BitBox02 ships with:
- The hardware wallet itself
- USB-C to USB-A adapter
- USB-C cable
- Getting started card
The form factor is minimal. The device is roughly the size of a thick USB flash drive — about 54mm long. There''s a USB-C port on one end and a microSD card slot on the other. No batteries, no Bluetooth, no wireless complexity. Plug it in and it works.
The Interface: Touch Slider
The BitBox02''s interface differs from most hardware wallets. Instead of physical buttons, you interact via a capacitive touch slider on the device body. Swipe to navigate options, touch both sides simultaneously to confirm.
It''s a clever design. The simultaneous touch confirmation is difficult to accidentally trigger. It''s also physically small, which contributes to the device''s clean lines.
Some users prefer traditional buttons — the Coldcard''s number pad or the Foundation Passport''s directional buttons feel more tactile and deliberate. The BitBox02''s touch slider is smooth and quick, but takes a short adjustment period.
The OLED display is small compared to newer devices like the Coldcard Q or Passport Prime. Addresses display correctly, amounts are readable, and you can verify transaction details on-device. It does the job, though you''ll appreciate a larger screen on competing devices if you''re doing complex multisig.
Security Architecture
This is where the BitBox02 earns its reputation.
Fully open source: The firmware, hardware schematics, and companion app are all publicly available and audited. You can build the firmware from source and verify what runs on your device. Ledger''s firmware is proprietary. Trezor''s hardware design is semi-open but the firmware has had more issues. The BitBox02 is fully open.
Secure chip: The BitBox02 uses an ATECC608B secure element to protect private key material. The secure chip handles the cryptographic operations while the main microcontroller handles communication. Keys never leave the device in usable form.
No cloud, no recovery service: There is no Shift Crypto server involved in your signing operations. No oracle. No cloud backup option. If you lose your device, you recover using your seed phrase or your microSD backup — both of which only you have. This is a feature, not a limitation.
microSD encrypted backup: During setup, you can create an encrypted backup of your seed phrase on a microSD card. This is a useful recovery option that lets you restore your wallet without manually transcribing 24 words, while keeping the backup offline and in your possession.
Anti-exfil protection: This is a subtle but important security feature. The BitBox02 uses a signing protocol that prevents malicious firmware from leaking private key information through the signature process — even if the firmware were somehow backdoored. This closes an attack vector that exists in most hardware wallets.
BIP39 passphrase: Full support for a 25th word passphrase, enabling hidden wallets and protection against physical compromise.
microSD Backup: Underrated Feature
Most hardware wallets ask you to write down your 24-word seed phrase and guard it carefully. That''s the right approach, and you should still do it. But the BitBox02 adds a second option: encrypted backup to a microSD card.
During setup, you create an encrypted backup file on a microSD card. If you lose or break your BitBox02, you can restore it to a new device using that microSD card. The backup is encrypted with your device password, so a stolen microSD card is useless without the password.
This doesn''t replace a written seed phrase backup — have both — but it provides a practical recovery option for the majority of users whose biggest risk is their own device failing, not sophisticated hackers.
Compatible Software
The BitBox02 works with several Bitcoin wallet applications:
BitBoxApp is the official companion. It''s clean, well-designed, and appropriate for most users. You can send, receive, manage accounts, and set up your backup from within the app. There''s also a hardware wallet pairing wizard that''s friendlier than most.
Sparrow Wallet is the better choice for advanced users. Sparrow has first-class BitBox02 support, full coin control, privacy analysis tools, and can connect to your own Bitcoin node. If you care about UTXOs, fee control, and transaction privacy, use Sparrow.
Electrum supports BitBox02 for power users who prefer Electrum''s interface and plugin ecosystem.
Wasabi Wallet works with BitBox02 for CoinJoin privacy transactions if that''s part of your setup.
The recommended path: start with BitBoxApp, migrate to Sparrow as you develop more experience.
Multisig Support
The BitBox02 supports multisig fully. You can use it as one signing device in a 2-of-3 setup alongside other hardware wallets (Coldcard, Ledger, Trezor, Foundation Passport) managed through Sparrow or Specter Desktop.
Hardware diversification in multisig matters. If all three of your signing devices are from Ledger and Ledger has a vulnerability, your entire setup is at risk. Using a BitBox02 as one leg of a multisig setup diversifies your hardware vendor risk while adding a device with a distinct security architecture.
Bitcoin-Only vs. Multi-Edition
Shift Crypto makes two versions:
- Bitcoin-only edition: Bitcoin and the Lightning Network only
- Multi-edition: Adds Ethereum, ERC-20 tokens, and other assets
Get the Bitcoin-only edition. It has a smaller attack surface (no altcoin code in the firmware), loads faster, and signals what you actually care about. There is no legitimate reason for a Bitcoin HODLer to add Ethereum execution code to their signing device.
Pros and Cons
Pros:
- Fully open source: firmware, hardware, companion app
- Clean, minimal Swiss design
- microSD encrypted seed backup
- Secure chip with anti-exfil protection
- Works with Sparrow, Electrum, Wasabi, BitBoxApp
- Strong multisig support
- No controversial cloud features or recovery services
- Excellent decade-long security track record
Cons:
- Small OLED display compared to newer premium devices
- USB only — no air-gapped QR signing
- Less brand recognition makes community support harder to find
- Touch slider is polarizing; some prefer physical buttons
- Priced similar to devices with larger screens
How It Compares
| Feature | BitBox02 | Coldcard Mk4 | Ledger Nano X | Foundation Passport |
|---|---|---|---|---|
| Open source | Full | Firmware only | No | Full |
| Air-gapped signing | No | Yes (microSD/NFC) | No | Yes (QR codes) |
| Secure element | Yes | Yes | Yes | No |
| Bitcoin-only edition | Yes | Yes | No | Yes |
| microSD backup | Yes | No | No | No |
| Anti-exfil | Yes | Yes | No | No |
| Companion app | BitBoxApp | Electrum/Sparrow | Ledger Live | Envoy/Sparrow |
The BitBox02 sits in an interesting position: more open than Ledger, more approachable than Coldcard, and comparably priced to both.
If you want air-gapped signing and maximum security paranoia, look at the Coldcard Mk4 or Foundation Passport. If you want a clean, USB-connected wallet with full open-source transparency and a strong security track record, the BitBox02 is hard to argue against.
Who Should Buy the BitBox02?
Buy the BitBox02 if:
- You value open-source hardware and firmware with audited code
- You want a reliable, minimalist device from a company with a clean security history
- You''re building a multisig setup and want hardware vendor diversification
- You want microSD backup as an additional recovery option
- You prefer a device made in Switzerland under strong privacy laws
Look elsewhere if:
- You want air-gapped signing via QR codes (look at Foundation Passport or Keystone 3 Pro)
- You want a large color touchscreen (look at Passport Prime or Coldcard Q)
- You''re on a tight budget (look at Blockstream Jade Plus at around $65)
- You want physical buttons instead of a touch slider
The Bottom Line
The BitBox02 Bitcoin-only edition is a serious, trustworthy hardware wallet from a company that has spent a decade doing the right thing. No flashy features. No cloud services. No controversy. Just a well-engineered device with open-source everything and a clean record.
For a multisig setup, as a second hardware wallet to diversify vendor risk, or as your primary cold storage device, the BitBox02 earns a genuine recommendation.
→ See the BitBox02 Bitcoin-Only Edition in the directory