GridPlus Lattice1 is a desktop hardware wallet with Wi-Fi, a 5" touchscreen, and SafeCards that physically isolate private keys. Most capable hardware wallet available in 2026. Full review with SafeCard system, security analysis, and comparison.
The GridPlus Lattice1 is unlike any other hardware wallet. While Coldcard, Trezor, and Ledger are portable USB devices you connect when needed, the Lattice1 is a standalone, internet-connected device that sits on your desk like a small home appliance. Think of it as a secure signing server with a touchscreen — always on, always connected, always ready.
This unconventional design makes the Lattice1 the most powerful hardware wallet available, but also the most complex and the most expensive. This review explains everything: how it works, what the SafeCard system is, who it's for, and whether it's worth $397.
| Feature | Details |
|---|---|
| Form factor | Desktop appliance (131mm × 131mm × 25mm) |
| Display | 5" IPS touchscreen (720×1280) |
| Processor | Quad-core ARM Cortex-A35 |
| Connectivity | Wi-Fi, Ethernet (optional via USB adapter) |
| Secure Element | SafeCard with ECC608B secure element |
| SafeCards | Removable cards (like SIM cards) that store private keys |
| Battery | None — plugged in continuously |
| Price | $397 USD (includes 2 SafeCards) |
| Companion app | GridPlus Lattice Manager (browser-based) + MetaMask Snap |
| Seed standard | BIP-39 (12 or 24 words) |
| PIN | 6–8 digit PIN on device |
| Open source | Partially (firmware partially open, SafeCard secure element closed) |
| Supported assets | Bitcoin, Ethereum, EVM chains, many altcoins |
The most distinctive feature of the Lattice1 is the SafeCard — a credit-card-sized device with a built-in secure element (ECC608B chip) that stores your private keys.
How it works:
Why this matters:
SafeCard security: Each card is protected by a PIN. Three incorrect PINs wipe the card. The underlying secure element (ECC608B — the same chip used in some versions of Coldcard) has hardware-level protections against physical extraction.
The Lattice1 connects to the internet continuously. This is its most controversial design choice.
Why always-on? The Lattice1 is designed to be used with web browsers and browser extensions (MetaMask, GridPlus Lattice Manager) from any device on your network. Rather than connecting a USB cable to a specific computer, you connect your wallet from any browser by entering your device's local IP address.
The network security model: GridPlus argues that network connectivity is safe because:
Is it actually safe? Security researchers have debated this. The attack surface of an always-on networked device is objectively larger than an air-gapped device like Coldcard or Foundation Passport. However, the SafeCard architecture means that compromising the Lattice1 itself — even with full network access — cannot produce a signed Bitcoin transaction without physical presence and the SafeCard.
The practical threat model: sophisticated attackers who compromise your home network can communicate with your Lattice1, but cannot steal funds without also having the SafeCard and knowing its PIN.
Full Bitcoin support:
BIP-39 passphrase: Yes, the Lattice1 supports the optional BIP-39 passphrase (25th word) for hidden wallets.
Multisig: The Lattice1 works in multisig setups via PSBT. It pairs with Sparrow Wallet, Electrum, and other coordinators. For a 2-of-3 multisig, the Lattice1 can serve as one of the signers alongside a Coldcard or Foundation Passport.
Hardware Security Module (HSM) mode: For advanced users, the Lattice1 can operate in HSM mode — automatically signing transactions that meet predefined policy rules without requiring manual screen confirmation. This is designed for server-side applications and developers, not typical retail HODLers.
GridPlus Lattice Manager (app.gridplus.io) Browser-based management interface. After pairing your Lattice1 with the manager, you can:
MetaMask Snap The Lattice1 has deep MetaMask integration via a Snap (extension). Once paired, MetaMask routes signing requests to the Lattice1 — the transaction details appear on the Lattice1's touchscreen for confirmation. This is the dominant use case for Ethereum/DeFi users.
Bitcoin wallet pairing (Sparrow): For Bitcoin-focused users, Sparrow Wallet is the recommended companion. The Lattice1 exports an XPUB that Sparrow imports as a watch-only wallet. Transactions are constructed in Sparrow, signed by the Lattice1 (after touchscreen confirmation), and broadcast.
Ideal for:
NOT ideal for:
| Feature | GridPlus Lattice1 | Coldcard Mk4 | Foundation Passport Prime | Ledger Nano X |
|---|---|---|---|---|
| Price | $397 | $157 | $249 | $149 |
| Form factor | Desktop appliance | Portable USB device | Portable device | Portable USB device |
| Connectivity | Wi-Fi (always on) | Air-gapped (USB/SD/NFC) | Air-gapped (QR only) | Bluetooth + USB |
| Secure element | ECC608B (on SafeCard) | ATECC608B | ATECC608A | ST33 (EAL5+) |
| Key isolation | SafeCard (removable) | On device | On device | On device |
| Display | 5" touchscreen | 1.54" screen + buttons | 2.9" touchscreen | Small OLED |
| Passphrase (25th word) | Yes | Yes | Yes | Yes |
| Multisig | Yes | Yes | Yes | Yes (partial) |
| Bitcoin only | No | Yes | Yes | No |
| Always on | Yes (Wi-Fi) | No | No | No |
| HSM mode | Yes | No | No | No |
| Best for | Power users, DeFi | Bitcoin maximalists | Bitcoin + UX | Broad crypto |
Both are premium Bitcoin signers at the serious end of the market. The philosophical gap is enormous:
Lattice1: Connected, always available, large screen, multi-asset, HSM capabilities, removable key cards. Power and convenience at a higher attack surface.
Coldcard Mk4: Air-gapped, portable, Bitcoin-only, battle-tested, maximum paranoia mode available. No network attack surface.
Choose Lattice1 if: You want the most powerful device, use DeFi heavily, prefer a desktop appliance, or need HSM/automated signing capabilities.
Choose Coldcard Mk4 if: You're a Bitcoin maximalist, want zero network attack surface, or need a portable device for travel.
Initial setup:
The touchscreen makes setup considerably more intuitive than Coldcard. The large display shows full transaction details clearly.
Daily use: Once paired with Sparrow or MetaMask, transaction signing is frictionless: initiate a send in software, the Lattice1's screen displays the full transaction for review, tap confirm, done. No cables to connect — just tap.
Learning curve: Higher than Ledger or Trezor for initial setup. The SafeCard concept, network pairing, and HSM mode require more reading than plug-and-play devices.
Supply chain: GridPlus devices are shipped factory-sealed with tamper-evident packaging. The setup process includes device attestation to verify you received genuine hardware.
Firmware updates: Delivered over Wi-Fi. GridPlus signs firmware with a key held in cold storage; the device verifies signatures before applying updates.
The network compromise question: If an attacker compromises your home network and gains access to the Lattice1, they can:
They cannot:
Verdict on network model: For most users' threat models, the SafeCard isolation is sufficient. For extreme paranoia or nation-state-level threats, air-gapped alternatives are more appropriate.
The GridPlus Lattice1 is the most capable hardware wallet available in 2026. The SafeCard system is genuinely innovative, the 5" touchscreen is class-leading for transaction verification, and the always-on model eliminates the friction of connecting cables for every signing operation.
The tradeoffs are real: $397 is premium pricing, the network-connected design is philosophically at odds with air-gap advocates, and the setup complexity exceeds most consumer hardware wallets.
Rating: 4.2/5
For the power user who wants the maximum feature set and accepts the always-on network architecture, the Lattice1 is unmatched. Bitcoin purists who want zero network attack surface will be better served by Coldcard Mk4 or Foundation Passport Prime.
What happens if GridPlus goes out of business? Your funds are always recoverable via your BIP-39 seed phrase on any compatible wallet. The Lattice1 is not required for recovery — it's just a signing device.
Can I use the Lattice1 without the SafeCard? No. The SafeCard is required for signing operations. Without it, the Lattice1 is just a display device. This is a security feature.
Is the Lattice1 good for long-term Bitcoin storage? Yes, but many Bitcoin-focused users prefer air-gapped alternatives. The Lattice1 is excellent for active users who sign transactions regularly; for pure cold storage, something like Coldcard that you disconnect between uses may be preferable.
Does the Lattice1 work with Sparrow Wallet? Yes. Export your XPUB from the Lattice Manager and import into Sparrow as a watch-only wallet. PSBT signing works via the browser-based Lattice Manager.
Can I use multiple SafeCards? Yes — and this is one of the Lattice1's killer features. Each SafeCard is a separate wallet with its own seed phrase. Swap cards to switch between wallets instantly.
Get our free Beginners Guide to Buying Bitcoin plus weekly insights for long-term holders.
D'CENT Biometric Wallet uses a fingerprint sensor and EAL5+ certified ST33 Secure Element to protect your Bitcoin. Review covers biometric authentication, security architecture, Bitcoin features, and comparison vs Ledger Nano X.
Ellipal Titan has no USB, no Bluetooth, no NFC — QR codes are the only way data moves between the wallet and your phone. Here's how it works, who it's best for, and how it compares to Coldcard and Foundation Passport.
Cypherock X1 splits your Bitcoin private key into 5 shares using Shamir's Secret Sharing — any 2 reconstruct your wallet, none alone reveals anything. Here's whether this seed-phrase-free approach makes sense.