This third entry in our series reviewing the leading hardware bitcoin wallets on the market scrutinizes their privacy and security.

robots

twitter:card

What’s the Best Hardware Wallet on the Market? Part 3 –

twitter:title

twitter:site

Review

Bitbox

coinkite

coldcard

hardware wallets

Keepkey

Ledger

ledger nano x

Shapeshift

shift cryptosecurity

Trezor

bounty program

bug bounty program

coldcard mk3

hardware

hardware wallet

hardware wallet manufacturer

ledger

ledger nano

Bitcoin Wallet Reviews: What&rsquo;s the Best Hardware Wallet on the Market? Part 3

This is the third article in a three-part series that examines five of the most popular Bitcoin hardware wallets. Read the first part, focused on the wallets&rsquo; physical safety and outward appearance here. Read the second part, focused on simplicity, accessibility and privacy, here. By request, samples were provided by some of the companies for review purposes. After assessing the physical sturdiness, appearance, simplicity, accessibility and privacy of five of the leading hardware bitcoin wallets on the market, it&rsquo;s time to analyze arguably the most important feature of all: security.&nbsp; There are plenty of convenient features and integrations to be found in hardware wallets, but none of them are as valuable and important as the efficiency with which they secure your bitcoin. The main expectation of the device is not to enable Bluetooth connectivity or seamlessly integrate with a trading platform, but to serve its base function of keeping coins safe and away from hackers&rsquo; malevolence. Just like a mobile phone should be able to make calls before running 3D video games, a hardware wallet is supposed to offer robust cryptographic security.&nbsp; Thankfully, the devices scrutinized in this three-part analysis are the five best options available on the market, so any security compromises in favor of extra features are minimal. Furthermore, the hardware wallets covered in this review were not arbitrarily chosen &mdash; they each benefit from the positive recommendations of bitcoin.org. In no particular order, these devices are Trezor Model T, Ledger Nano X, ShapeShift&rsquo;s KeepKey, Shift Cryptosecurity&rsquo;s bitcoin-only BitBox02 and Coinkite&rsquo;s Coldcard Mk3. How to Assess Hardware Wallet Security In the context of hardware wallets, there are multiple types of &ldquo;security&rdquo; and many complex issues that have to be taken into consideration.&nbsp; First of all, the private keys these wallets protect should not get leaked during remote or physical attacks. They must act as a proxy which manages your keys without being exposed to the risk of malware, spyware, keyloggers, viruses or other malicious pieces of software that can infect your computer.&nbsp; Secondly, both addresses and amounts of cryptocurrency being sent during transactions must be verifiable. Each hardware wallet is endowed with a universal microcontroller which communicates with its encrypted aspects and facilitates user input &mdash; and this is the most vulnerable and tricky component of these devices. Thankfully, the new generation of hardware wallets has solved any issues with this user input by integrating easily readable screens which display all of the information required to compare with the computer or mobile phone input before validating the transaction. (But, as a general piece of advice, always check everything to be sure that your device is functioning properly and doesn&rsquo;t result in you losing your bitcoin.)&nbsp; Thirdly, it&rsquo;s important to take into account the integration of secure chips (as in the case of the Ledger Nano X, BitBox02 and Coldcard) and the ease with which users can create a multisig security model (the Trezor Model T and Coldcard are the champions in that field). Fourthly, it&rsquo;s essential to reduce the attack surface by creating a Bitcoin-only firmware. Some manufacturers take this feature very seriously, and the fact that you can&rsquo;t glitch the software due to the inclusion of altcoins can make a lot of difference in security. As scarce digital commodities, your bitcoin require uncompromising security.&nbsp; The use of open-source software and native SegWit (bech32) addresses are also criteria for security and privacy. The former enables easier audits by security experts and quicker fixes, while the latter reduces transaction fees and grants access to CoinJoins via Wasabi Wallet.&nbsp; Furthermore, it&rsquo;s important to check if the hardware wallet manufacturer enables bounty programs for bug disclosures. The existence of a clear, financial incentive for the discovery of various security issues attracts ethical hackers who may bring significant contributions and ultimately add to security. Last but not least, a price comparison will be presented. Sometimes the &ldquo;you get what you pay for&rdquo; principle applies and, in this context, it&rsquo;s important to introduce cost as an extra metric for security. So, here are the sections you can expect to find in this final entry in this series: History of hacks. The presence of secure chips. The difficulty of setting up multisig. The option of a bitcoin-only device. The use of open-source software. Support for bech32. Use of bug bounty programs. Price. 1. History of Hacks Historically speaking, every hardware wallet manufacturer has encountered issues with hackers and exploits. No design is perfect and absolute security from hacks is virtually impossible. The golden rule when it comes to hardware wallets is to treat them the same way you would treat paper wallets: Make sure that nobody gets physical access. For more information on physical security, please refer to the first article in this series. This section is based on the findings of Wallet.fail, white hat hackers Dmitry Nedospasov, Josh Datko and Thomas Roth, as well as independent researchers Saleem Rashid, Sergei Volokitin, LazyNinja, TheCharlatan, Kaspar Etter and Reddit user De_Wilde_Weldoener. Furthermore, it should be noted that all of the issues presented have been fixed by the hardware wallet manufacturers and that the findings serve as a reminder that no device is perfect and should always be physically protected. Trezor During its 35C3 presentation in December 2018, the team members of the Wallet.fail project presented multiple issues with the Ledger and Trezor hardware wallets. Most notably, Roth was able to extract the seed phrases and PIN from a Trezor One, while his collaborator Nedospasov introduced a prototype for the &ldquo;Trezor Glitcher&rdquo; &mdash; a device which instantly exploits the vulnerabilities of Trezor hardware wallets. The issue they exploited was that private keys were being moved in the RAM during software upgrades, and a fix was released 62 days later with version 1.8.0 of the firmware. Trezor&rsquo;s devices were also found to be vulnerable in August 2017, as explained by security enthusiast Doshay Zero404Cool in an extensive blog post. Basically, the author identified vulnerability issues with the ST32F05 chip (which is used in the Trezor Model T and the KeepKey). Saleem Rashid has also written an article which explains all of the technical intricacies involved, and Trezor fixed the issue eight days later with firmware update 1.5.2. These are only two of the most notable examples of security issues with Trezor hardware wallets, which have been identified and fixed over the last couple of years. However, it&rsquo;s this openness and willingness to constantly solve security issues that makes Trezor a trusted, device manufacturer. The large community and the numerous security experts who constantly scrutinize the hardware and software developed by Trezor are one of its most important security guarantees and the reason why Trezor is still the industry standard for hardware wallets. Ledger From a design perspective, Ledger&rsquo;s hardware wallets are the exact opposite of Trezor&rsquo;s: They rely on a secure element chip which acts as a closed-source blackbox and aren&rsquo;t as open about security. Its bounty program webpage doesn&rsquo;t contain a list of fixed issues but only mentions bug submission criteria and procedures, as well as the company&rsquo;s &ldquo;Wall of Fame.&rdquo; Before the new Nano X model was launched in the second quarter of 2019, Ledger&rsquo;s Nano S has been subjected to two significant and well-documented exploits. Firstly, Rashid reported a security issue in November 2017, which Ledger patched four months later. More specifically, the architecture of the microcontroller unit (which communicates with the buttons, screen and USB port) could be tweaked to run a custom firmware which tricks the secure element chip.&nbsp; In December 2018, the Wallet.fail team also managed to successfully launch a compromising attack on the Ledger Nano S, which allowed it to run the video game Snake on the device. It was a way for it to prove that the physical design is flawed and anybody can install malevolent software which bypasses the initial verification process and might be able to redirect the funds to another address. This demonstration was most likely a rebuttal to the famous statement made by Ledger co-founder BTChip, who tweeted support of the idea that Ledger devices are so secure that they can have their software reset and be sold to other users. In May 2019, the Wallet.fail team identified a lack of memory protections in the STM32WB55 chip from the Ledger Nano X, and it&rsquo;s still unclear if the issue was fixed by a firmware update. As a company, Ledger isn&rsquo;t as transparent as Trezor and oftentimes doubles down on issues as intentional design choices (both Rashid and the Wallet.fail team have encountered communication issues). Therefore, purchasing any Ledger device implies trusting the company&rsquo;s security model to a degree that isn&rsquo;t necessarily compatible with the cypherpunk spirit of open-source software. KeepKey From a hardware and firmware perspective, the KeepKey is very similar to the Trezor Model T. The only major differences can be found in the enclosure (which is more premium in the case of the KeepKey), the design and architecture, and the software of choice (which ShapeShift has modified to fit its business philosophy). In April 2019, Sergei Volokitin managed to take advantage of a design flaw in order to glitch the KeepKey. As he explains in his OffensiveCon19 presentation, Volokitin was able to successfully run an injection attack which glitched the device in less than five minutes and made it susceptible to the installation of custom, malevolent software. The conclusion drawn referred to the board design and choice of chips, as the microcontroller is not made to resist such attacks. Also, the large number of...

description

twitter:description

What’s the Best Hardware Wallet on the Market? Part 3 - Bitcoin Magazine

This hardware bitcoin wallet review tests the simplicity, software, verification, unique features and privacy of the Trezor Model T, Ledger Nano X, KeepKey, BitBox02 and Coldcard Mk3.

Bitcoin Wallet Reviews: What’s the Best Hardware Wallet on the Market? Part 2 –

Privacy &amp; security

electrum personal

electrum personal server

electrum personal server and wasabi

financial sovereignty

full node

model t

Bitcoin Wallet Reviews: What&rsquo;s the Best Hardware Wallet on the Market? Part 2

This is the second article in a three-part series that examines five of the most popular Bitcoin hardware wallets. Read the first part here. By request, samples were provided by some of the companies for review purposes. There are multiple reasons why the user interface recommended, developed or provided by hardware wallet manufacturers is important.&nbsp; First of all, depending on the nature of this visual interaction, users get various degrees of privacy and security. For example, websites and browser plug-ins are convenient but very risky and vulnerable to malware and phishing attacks; proprietary software installed on the hard drive is excellent but may leak some data to the company server; and integrations with your full node via Bitcoin Core, the Electrum Personal Server or Wasabi are ideal because they enable complete sovereignty and maximum privacy.&nbsp; For the purpose of promoting a particularly safe way of storing and sending bitcoin, this review will intentionally exclude internet browser plug-ins and webpages (unless they are the only official way to access the wallet). These features are nice to have, but they are susceptible to third-party attacks and, therefore, may pose a threat to users&rsquo; security and data privacy. Instead, the focus will be on software clients that operate on the users&rsquo; computers, with a focus on minimizing interactions with the company&rsquo;s servers and maximizing sovereignty with full nodes. Secondly, since visual interfaces determine the overall user friendliness and ease of use for hardware wallets, they also represent an important factor for mass adoption and retail success. To nontechnical users, the official UI/UX is the only way through which they will ever experience their hardware wallet. Therefore, it&rsquo;s important to take into account the software&rsquo;s simplicity of use and whether or not it&rsquo;s available on multiple platforms. Thirdly, visual interfaces may also include extra features and integrations that simplify other activities such as buying bitcoin and exchanging it for fiat or altcoins. While accessing these services is not recommended for HODLers who are concerned about their privacy, some of these options may come in handy for traders and everyday users.&nbsp; Just as in the previous part of this analysis, the five hardware wallets under scrutiny for this review are Trezor&rsquo;s Model T, Ledger&rsquo;s Nano X, ShapeShift&rsquo;s KeepKey, Shift Cryptosecurity&rsquo;s BitBox02 and Coinkite&rsquo;s Coldcard Wallet Mk3. Given the criteria described above, the rest of the article will be split into five sections:&nbsp; Simplicity of use. Multi-platform software. Extra verification steps&nbsp;Unique features. Privacy. Hopefully, the results of this review will help determine the best hardware wallet choice for each user type. 1. Simplicity of Use Writing down the seed phrase, verifying some designated words on the hardware wallet&rsquo;s screen (or all of them, depending on the product&rsquo;s design) and setting up some kind of backup are all part of the exciting (yet slightly frightening) phase of getting immersed in financial sovereignty. The thought that, unlike in traditional finance, you cannot recover funds that you lose by mistake can sometimes be overwhelming. In this regard, simplicity really matters and good interfaces can make a lot of difference in the process of attaining financial sovereignty. As you are about to discover, the test includes four newbie-friendly devices and one power-user product that benefits from massive community support &mdash; but still requires a good understanding of operation security fundamentals and Bitcoin essentials for use. Simplicity of Use: Trezor Model T The web-based Trezor Wallet is the industry standard for hardware wallet user interfaces. The Trezor Model T uses the Trezor Bridge client software to facilitate communication between the hardware wallet and a computer. This application is a hybrid in that it requires installation but still runs in your browser.&nbsp; The installation is straightforward and easy; it teaches new users how to validate each operation on the device and introduces the concept of a recovery seed in a comprehensive way. The software also encourages the creation of backups and makes use of a familiar account and password system. After the initial setup is complete, everything is straightforward and clean: Users can send or receive bitcoin but also receive suggestions for nearby ATMs and exchanges where they can buy bitcoin.&nbsp; Trezor is the world&rsquo;s first hardware wallet manufacturer and all units reviewed in this test are more or less inspired by its designs and specifications. Thanks to its first-mover advantage and long-time popularity, every Trezor product has a lot of community support. In this regard, users will find that they can connect their Model Ts to the Electrum Web Server, Wasabi Wallet, Exodus and even ShapeShift.&nbsp; Some of these alternative options will grant more privacy and sovereignty, while others bring convenience through extra features. Overall, the experience is the industry standard for onboarding users to financial sovereignty and is worthy of a 10 out of 10 rating. Simplicity of Use: Ledger Nano X Ledger Live is a clean, simple and feature-packed local client which adds functionality to the Nano X. Conversely, the Ledger Nano X makes use of a local application called Ledger Live. What sets it apart from Trezor Bridge is the fact that the software installation takes place locally on your hard drive, so you can check your balance even when you&rsquo;re not connected to the internet (assuming that the data had been updated) and benefit from slightly improved privacy. Also, the app serves the purpose of checking the authenticity of the hardware wallet by interacting with the internal secure element. It still doesn&rsquo;t replace a full node or Wasabi synchronization, but it&rsquo;s a superior experience as compared to a webpage.&nbsp; Ledger Live is very intuitive and the installation process is basically a tutorial which teaches users about the device&rsquo;s basic functionality. After it&rsquo;s generated, the seed phrase needs to be validated word-by-word on the device for extra safety. At the end of the setup, each cryptocurrency application needs to be installed individually &mdash; so users can choose not to increase the attack surface with extra features by making the Nano X a BTC-only device.&nbsp; The interface also features a &ldquo;Buy Crypto&rdquo; menu which allows users to quickly buy bitcoin locally or exchange them for other cryptocurrencies via ShapeShift or Changelly.&nbsp; Correspondingly, the experience deserves a perfect-10 rating. Simplicity of Use: KeepKey The ShapeShift interface is clean, feature-packed and compatible with the KeepKey and the Trezor hardware wallets (Ledger will also be added). As a product of the parent company, KeepKey is seamlessly integrated with the ShapeShift Platform. New users are greeted by a familiar, simple and feature-packed interface which includes options to buy, send, receive and trade your bitcoin. Interestingly, this platform is designed to also support Trezor hardware wallets and plans to integrate functionality for Ledger products. In this regard, it seems like ShapeShift is trying to provide a software alternative to the dedicated user interfaces developed and provided by competing manufacturers. KeepKey also has Client, a barebones desktop application which allows users to check, send and receive BTC, and to connect to the ShapeShift website. It&rsquo;s basic and limited in functionality but may provide a more privacy-friendly experience for those who don&rsquo;t want to sign up to the ShapeShift platform. Speaking of alternative software, it should also be mentioned that, unlike the Ledger Nano X, the Trezor Model T and the Coldcard (all versions), there is no KeepKey compatibility with Wasabi Wallet. Luckily, ShapeShift&rsquo;s device works just fine with the Electrum Personal Server and can connect to full nodes running Bitcoin Core 0.18 or newer.&nbsp; KeepKey is excellent in its simplicity of use and deserves praise for also integrating rival manufacturers on the platform. However, it should be noted that the lack of compatibility with Wasabi Wallet is possibly the biggest current downside. Simplicity of Use: BitBox02 Under the &ldquo;Expert Settings&rdquo; menu, the BitBoxApp has two unique features: coin control and full node connectivity. Last but certainly not least, the BitBox02 offers a competitive alternative with the BitBoxApp. The installation experience is very similar to the one created by Ledger. However, there are two options which set the BitBox02 apart: It enables coin control (as opposed to merging UTXOs together, users get to choose from which amount they&rsquo;re sending, so that financial privacy gets protected), and it allows a seamless pairing with a local full node.&nbsp; Both of these features empower users with privacy and sovereignty in a comprehensive and straightforward interface. Basically, Shift Cryptosecurity&rsquo;s product is the middle ground between the Trezor and the Coldcard: It offers some power-user features while also keeping it basic. Also, the in-app guide, positioned on the right sidebar of the BitBoxApp, makes it simple to run the setup, even for newbies. Overall, the BitBox02 has a great, basic interface which somehow manages to integrate some advanced features that users who appreciate financial sovereignty will find useful. It doesn&rsquo;t include all of the trading features found in the KeepKey, nor does it have in-app access to a series of third-party exchange services as the Ledger and Trezor do, but it gets privacy and sovereignty right without overcomplicating matters.&nbsp; The BitBox02&rsquo;s intuitive onboarding also receives a perfect-10 rating for making power-user features simple.&nbsp;&nbsp; Simplicity of Use: Coldcard Wallet Mk3 For maximum privacy and financial sovereignty, Coldcard is designed to work with Wasabi Wallet and the Electrum Personal Server. Contrary to market trends, the Coldcard hardware wallet doesn&rsquo;t have a dedicated software client which...

This hardware bitcoin wallet review tests software, unique features and privacy of the Trezor Model T, Ledger Nano X, KeepKey, BitBox02 and Coldcard Mk3.

Best Hardware Wallet on the Market Review Part 2 - Bitcoin Magazine

For many, bitcoin security is only as good as the hardware wallet of choice. In this review, we put five popular options to the test.

Bitcoin Wallet Reviews: The Best Hardware Wallet –

colcard

Hardware wallet

bitbox02 and coldcard mk3

nano x

Putting Trezor, Ledger, KeepKey, BitBox and Coldcard to the test

Bitcoin Wallet Reviews: What&rsquo;s the Best Hardware Wallet on the Market?

This is the first article in a three-part series that examines five of the most popular Bitcoin hardware wallets. By request, samples were provided by some of the companies for review purposes. Hardware wallets are small and portable devices which empower users to manage the keys to their bitcoin in a way that combines security with convenience. Essentially, they serve as an extra layer of protection which stands against malevolent attacks that may happen on infected computers.&nbsp; Further Reading: What Are Bitcoin Wallets If you&rsquo;re HODLing your bitcoin, then you can resort to cheaper and more convenient cold storage options (like a computer that never gets connected to the internet, a USB flash drive, a paper wallet, some form of bearer item or even a plaque of metal). However, if your needs extend to trading or making payments with bitcoin, then hardware wallets are essential to sign transactions in a safe environment that hackers won&rsquo;t be able to access remotely.&nbsp; It&rsquo;s also possible to use your hardware wallet as a cold storage solution (you only connect it to your computer once to move your bitcoin keys onto it, and then store it in a safe environment). This way, you benefit from the advantage of on-device, private-key generation and greatly reduce risk by removing the likeliness of attacks via phishing, viruses, malware and spyware.&nbsp; Security experts are known to destroy the devices that they use to generate random passwords and private keys, as their processing units are mathematically more likely to replicate the result than another computer with similar specifications. Correspondingly, hardware wallets should be as personal as your toothbrush: Get them new and in the kind of packaging which guarantees their untampered nature, use them while they&rsquo;re still safe and then avoid passing them on to a second owner. Coldcard, one of the manufacturers presented in this review, goes as far as adding a &ldquo;SHOOT THIS&rdquo; marker on their products&rsquo; circuit boards for emergencies where privacy and security must be saved. This review aims to scrutinize and compare five of the most popular and secure hardware wallet solutions: Trezor Model T, Ledger Nano X, ShapeShift&rsquo;s KeepKey, Shift Cryptosecurity&rsquo;s bitcoin-only BitBox02 and Coinkite&rsquo;s Coldcard Mk3. They have been chosen on the grounds of their reputation in the field and the recommendation provided by the Bitcoin.org experts, and they all offer interesting and distinct features that will be detailed throughout the review. As a way of maintaining the balance and comparative objectivity of the process, only the latest models will be taken into consideration &mdash; while some devices are more common and popular, it&rsquo;s only fair to talk about the most recent product from each manufacturer.&nbsp; Criteria for analysis include&nbsp; Physical safety (including resemblance with a common household object, sturdiness and connectivity);&nbsp;User interface (including simplicity of use, multi-platform software and unique features);&nbsp;Security (including the public record of hacks, auditability of hardware/software, availability of Bitcoin-only versions for reduced attack surface, the ability to generate unlimited BTC addresses on the same device for greater privacy and full SegWit support for other integrations). 1. The Physical Safety of Hardware Wallets The first installment in this review will focus exclusively on the physical safety of hardware wallets. Beyond being devices with strong cryptographic encryption, hardware wallets are objects that require sturdiness, connectivity and, ideally, the ability to remain unnoticed in a drawer full of electronics. Security in hardware wallets isn&rsquo;t just about the software but also the ability to pass border checks without raising suspicions and dropping your device on hard surfaces without causing serious damage.&nbsp; Also, having a fairly common method for connecting your device to a computer or phone is essential for trust minimization and security: Not having to trust a proprietary format for cables and having the opportunity to buy a cheap generic product from any convenience store where computer peripherals are sold is likewise important. For power users, paper wallets and metal plates may prove to be a superior alternative &mdash; but for millions of causal holders and investors, it&rsquo;s important to have a simple and comprehensive security model. 1a. The Outer Appearance of the Hardware Wallets Each of the criteria enumerated above has been scrutinized with the purpose of identifying the best form factor and most secure build. A consensus about the visual similarities for the hardware wallets reviewed is that the Trezor Model T looks like a car key remote, the Ledger Nano X and the BitBox02 have the appearance of USB flash drives, the KeepKey resembles an external hard drive (at least when it&rsquo;s unplugged and the screen is switched off) and the Coldcard can be easily confused with a pocket calculator.&nbsp; Coinkite&rsquo;s Coldcard The Appearance of the Ledger Nano X. However, of all five products, the Ledger Nano X (like its predecessor, the Nano S) is ideal for those who want to conceal what the device is. If you don&rsquo;t want people to know that you own a hardware wallet when you pass an airport check or when burglars potentially break into your house, then you should go for the most common-looking product &mdash; and the Ledger hardware wallets resemble fairly cheap and mundane USB flash drives. The Appearance of the BitBox02. The BitBox02 is easily concealed as well, but its sleek, compact and futuristic design (which includes a visible LCD screen) may give away its special nature. Compared to the Ledger, it&rsquo;s harder to confuse with a USB flash drive (though, to ShiftCrypto&rsquo;s merit, the BitBox has a male connector which is more faithful to the design of storage devices). For concealing purposes, the original BitBox01 is superior thanks to its basic design. Shift Cryptosecurity&rsquo;s BitBox02 The Appearance of the Trezor Model T. The Trezor may fool some as a remote key for an automobile, though closer inspection will reveal pretty obvious physical differences. And if you&rsquo;re known to take the bus, rather than drive a car, you&rsquo;re not going to fool anybody. The Appearance of the Coldcard Mk3. Conversely, the Coldcard wallet&rsquo;s calculator-like design may be inconspicuous at first, but the impractically small screen and the lack of math operation buttons (the &ldquo;Okay&rdquo; tick and the &ldquo;X&rdquo; could be replaced by a plus and a minus, for instance) are clear clues that it serves a different purpose. Has anyone ever seen a calculator that can display only three to four digits and looks more like a validation machine? It&rsquo;s unlikely that airport security officers from an authoritarian country would be fooled by the design. The Appearance of the KeepKey. Last but not least, the KeepKey has the most unusual shape and size. When switched off, it might look like an external power bank or hard drive of sorts. However, the large and shiny LCD screen indicates that there might be something special about the device &mdash; and this is bad for security. The overall design is excellent for everyday usability and the hardware wallet itself is very sturdy. Nonetheless, it&rsquo;s unlikely for a KeepKey to remain unnoticed when you&rsquo;re crossing borders or when your house gets robbed. So, in a situation where you don&rsquo;t want anyone to know that you own a hardware wallet, just carry a Ledger and a couple of similar-looking USB flash drives with redundant data. Also, it would be wise to scratch off the logo. But then again, paper wallets, brain wallets and metal plates are more suitable for such scenarios. 1b. The Physical Sturdiness of Hardware Wallets Ideally, hardware wallets should have great durability to withstand physical shocks. If you&rsquo;re travelling and need the kind of device that you can simply throw into your bag and never worry about possibly breaking, then you should take a close look at the build quality and materials used. Thankfully, all products presented in this review are rugged and have worked without any issues after being dropped on the floor. However, the intention was not to see how quickly they break, so the rest of the analysis will take into account the materials being used &mdash; under the assumption that metal enclosures are sturdier than plastic cases. The Physical Sturdiness of the Trezor Model T. The Trezor Model T, just like every other hardware wallet made by the Czech company, is small, solid and well built. If anything, Trezor understands the importance of high-quality materials very well, as one of the products in its store is made of aluminum (but costs six times as much as the Model T). In support of those who bought the regular, plastic-made items, the company offers silicone and leather protection cases. Yet, assuming that no extra accessory comes with the Trezor, its score for sturdiness is 7 out of 10. Trezor Model T The Physical Sturdiness of the Ledger Nano X. The Ledger Nano X is sturdier thanks to its included steel cover. As long as the device is properly folded, the screen is protected and the core components are bound to take less damage during physical impacts. It&rsquo;s definitely not the best-built device in the test, but for its small size for form factor and design, it holds its merits for delivering a sturdy enclosure. For its construction, the Ledger Nano X scores a 9 out of 10. The Physical Sturdiness of the KeepKey. Conversely, the KeepKey is built like a tank and has a bulky form that should help it withstand physical shocks. If dropped on a hard surface or trampled under foot, it&rsquo;s the most likely product in this test to resist permanent damage to its body. However, the same can&rsquo;t be said for its large screen which can be easily cracked, thus deeming the device unusable. The combination of plastic and metal offers ruggedness and the rectangular power bank-like shape makes it robust, but it&rsquo;s the touchscreen display which may act as a point of failure. Nonetheless, the high-quality...

Bitcoin Wallet Reviews: The Best Hardware Wallet - Bitcoin Magazine

In this video review, Bitcoin Magazine tests Coinkite’s Coldcard Mk3 hardware wallet, assessing its user experience, security measures and more.

Video

allows

bip 174

bitcoin

bitcoin hardware

bitcoin magazine

bitcoin wallet

<figure class="wp-block-embed-youtube wp-block-embed is-type-video is-provider-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio"><div class="wp-block-embed__wrapper">
https://youtu.be/fkEZWhnxBBI
</div></figure>



In the video above, Bitcoin Magazine reviewed Coinkite’s Coldcard Mk3 bitcoin hardware wallet, evaluating it with a handful of important criteria, including coin control, UTXO selection, Lightning support and more.



<h2>Appearance and Feel</h2>



As the second version of Coinkite’s hardware wallet, the Mk3 feels almost identical to the earlier model. It features the same full-sized numeric keypad that you would find on a calculator, which, when applied to a bitcoin wallet, feels very convenient in contrast to clicking the same two buttons to confirm actions (often found on other hardware wallets). A notable design feature of the Coldcard Mk3 is the clear plastic casing that highlights the inner workings of the device. This, in my opinion, gives it a really unique, cypherpunk-esque feel.&nbsp;



<h2>Security and Usage</h2>



The Coldcard can be used by itself without the need to connect to a computer. This means that you can use the Mk3 in an air gapped fashion, which can be a huge plus in the eyes of a security-driven bitcoin user. This is possible thanks to the microSD slot built into the side of the wallet — you can pass along transaction (and other) information to and from a computer by simply putting the chip into the computer and then back into the wallet.&nbsp;



In terms of security, the Mk3 uses Microchip's ATECC608A to store the critical master secret: the 24-word seed phrase for your BIP 32/BIP 39 wallet.&nbsp;



“This little chip is very powerful,” Coldcard states on its website. “Communication is controlled by complex challenges and SHA-256 responses which prevent replay and eavesdropping. The secure element enforces cryptographically, that the attacker must know the PIN to access the secrets. An attacker cannot brute-force combinations or replay a previous login sequence.”



One of the most important features of the Coldcard is that it is based on BIP 174, which is a proposal in Bitcoin that allows for interoperation between bitcoin hardware wallets by introducing a binary file format that all hardware wallets can use. BIP 174 support also means that you can use the Coldcard with Bitcoin Core, Electrum Wallet, Wasabi or any software that supports BIP 174.&nbsp;



This is one of my favorite features about the Coldcard, because it provides users with the freedom to choose how they want to use their bitcoin wallet. In October 2019, Coinkite also <a href="https://twitter.com/COLDCARDwallet/status/1181658052031848448">released a software update</a> that allows users to view receive addresses on the screen of the Coldcard or save to an SD card in a simple text format.&nbsp;



Another neat security feature of the Coldcard is its “duress wallet,” which can be thought of as a decoy wallet with a separate amount of funds for use in the event of an attempted bitcoin heist. The wallet allows you to set up a “duress PIN code,” which is an alternative PIN that displays an entirely separate wallet that a user can pretend is their real one. Ideally, this wallet should have a small amount of bitcoin on it, enough to make it plausible that this is indeed all of the bitcoin they have. Also, because Coldcard supports BIP 39 passphrases, users can create an unlimited supply of distraction wallets.



Overall, the Coldcard Mk3 is a solid bitcoin wallet for any user, be they beginner or expert. Using the Coldcard allows a user to feel like they are interacting with bitcoin transactions in a very hands-on manner, which is a credit to its tech-y outer appearance, 128 by 64 pixel OLED screen that shows you all of the critical details of your transaction and the full-sized keypad that is accompanied by a solid “click” with every press.&nbsp;



Bitcoin Magazine is an official affiliate partner of Coldcard, so the Coldcard is available for sale online at <a href="https://store.b.tc/products/coldcard-mk3-bitcoin-hardware-walelt">store.b.tc</a>.This is an editorial hardware review by Bitcoin Magazine. All opinions expressed are the writer’s own without express approval or input from the manufacturer.

In this video review, Bitcoin Magazine tests Coinkite&rsquo;s Coldcard Mk3 hardware wallet, assessing its user experience, security measures and more.

Video Review: Coldcard Mk3

In the video above, Bitcoin Magazine reviewed Coinkite&rsquo;s Coldcard Mk3 bitcoin hardware wallet, evaluating it with a handful of important criteria, including coin control, UTXO selection, Lightning support and more. Appearance and Feel. As the second version of Coinkite&rsquo;s hardware wallet, the Mk3 feels almost identical to the earlier model. It features the same full-sized numeric keypad that you would find on a calculator, which, when applied to a bitcoin wallet, feels very convenient in contrast to clicking the same two buttons to confirm actions (often found on other hardware wallets). A notable design feature of the Coldcard Mk3 is the clear plastic casing that highlights the inner workings of the device. This, in my opinion, gives it a really unique, cypherpunk-esque feel.&nbsp; Security and Usage. The Coldcard can be used by itself without the need to connect to a computer. This means that you can use the Mk3 in an air gapped fashion, which can be a huge plus in the eyes of a security-driven bitcoin user. This is possible thanks to the microSD slot built into the side of the wallet &mdash; you can pass along transaction (and other) information to and from a computer by simply putting the chip into the computer and then back into the wallet.&nbsp; In terms of security, the Mk3 uses Microchip&rsquo;s ATECC608A to store the critical master secret: the 24-word seed phrase for your BIP 32/BIP 39 wallet.&nbsp; &ldquo;This little chip is very powerful,&rdquo; Coldcard states on its website. &ldquo;Communication is controlled by complex challenges and SHA-256 responses which prevent replay and eavesdropping. The secure element enforces cryptographically, that the attacker must know the PIN to access the secrets. An attacker cannot brute-force combinations or replay a previous login sequence.&rdquo; One of the most important features of the Coldcard is that it is based on BIP 174, which is a proposal in Bitcoin that allows for interoperation between bitcoin hardware wallets by introducing a binary file format that all hardware wallets can use. BIP 174 support also means that you can use the Coldcard with Bitcoin Core, Electrum Wallet, Wasabi or any software that supports BIP 174.&nbsp; This is one of my favorite features about the Coldcard, because it provides users with the freedom to choose how they want to use their bitcoin wallet. In October 2019, Coinkite also released a software update that allows users to view receive addresses on the screen of the Coldcard or save to an SD card in a simple text format.&nbsp; Another neat security feature of the Coldcard is its &ldquo;duress wallet,&rdquo; which can be thought of as a decoy wallet with a separate amount of funds for use in the event of an attempted bitcoin heist. The wallet allows you to set up a &ldquo;duress PIN code,&rdquo; which is an alternative PIN that displays an entirely separate wallet that a user can pretend is their real one. Ideally, this wallet should have a small amount of bitcoin on it, enough to make it plausible that this is indeed all of the bitcoin they have. Also, because Coldcard supports BIP 39 passphrases, users can create an unlimited supply of distraction wallets. Overall, the Coldcard Mk3 is a solid bitcoin wallet for any user, be they beginner or expert. Using the Coldcard allows a user to feel like they are interacting with bitcoin transactions in a very hands-on manner, which is a credit to its tech-y outer appearance, 128 by 64 pixel OLED screen that shows you all of the critical details of your transaction and the full-sized keypad that is accompanied by a solid &ldquo;click&rdquo; with every press.&nbsp; Bitcoin Magazine is an official affiliate partner of Coldcard, so the Coldcard is available for sale online at store.b.tc.This is an editorial hardware review by Bitcoin Magazine. All opinions expressed are the writer&rsquo;s own without express approval or input from the manufacturer.

Video Review: Coldcard Mk3 Hardware Wallet » Bitcoin Magazine

Coinkite has published official schematics and guides for users to build their own Coldcard hardware wallet but will it hurt the bottom line?

Coinkite Open Sources the Coldcard Hardware Wallet –

Adoption &amp; community

coincards

advanced users

bitcoin security

build

circuit

coldcard wallet

good engineering

In a <a href="https://blog.coinkite.com/coldcard-hardware-shared/">blog post</a> published on October 25, 2019, Coinkite released all of the information needed for users to build their own versions of its hardware wallet, the Coldcard. The post contains the complete circuit diagram of the device, accompanied by a list of off-the-shelf parts that can be purchased to start the DIY project.



The firmware of the Coldcard wallet <a href="https://github.com/Coldcard/firmware">has always been open source</a> as a way of guaranteeing both transparency (if the code is publicly available, then anyone can see that the bitcoin held in a Coldcard are secure) and potential for future improvements via community feedback (if anyone can contribute through messages or pull request submissions, then improvements can be made). 



“We encourage advanced users to make a unit themselves and publish their findings, it's one of the best methods to verify our code/hardware,” Coinkite CEO <a href="https://bitcoinmagazine.com/articles/video-interview-rodolfo-novak-on-the-coldcard-wallet-and-opendime">Rodolfo Novak</a> told Bitcoin Magazine. 



<figure class="wp-block-embed-youtube wp-block-embed is-type-video is-provider-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio"><div class="wp-block-embed__wrapper">
https://www.youtube.com/watch?v=fkEZWhnxBBI
</div></figure>



<h2>Security and Financial Implications for Coldcard Wallet</h2>



The decision to release a veritable instruction manual for building a Coldcard from scratch marks a major shift in the field of hardware wallet research and development. However, it also generates risks from a financial point of view. 



Previously, <a href="https://mcudev.github.io/trezor-dev-kit/">Trezor used the same approach</a> with the One hardware wallet, publishing a complete development kit with step-by-step instructions. Consequently, manufacturers from across the world created new products on the backbone of the original — even Coldcard borrowed software elements from the Trezor GitHub.



But in Novak’s view, the decision to publish the circuit boards and required parts is not detrimental to business for two reasons: Firstly, security researchers could already figure out the design thanks to Coldcard’s simplicity and secondly, DIY enthusiasts don’t get the same economies of scale for parts pricing (which could mean that producing a Coldcard by yourself can cost more than purchasing one from Coinkite). 



Furthermore, he pointed to the power of branding and the trust regular users have in Coinkite as a Bitcoin security company. 



“People buy trust — they trust our security expertise, supply chain control, design, setup and all that comes with that,” Novak said.



The hardware schematic and bill of materials are <a href="https://github.com/Coldcard/firmware/tree/master/hardware">clearly aimed</a> at enthusiasts who can do soldering on electronic boards and are able to follow complex instructions for building and wiring hardware. So, it’s unlikely that regular users will build their own Coldcard wallets rather than buy them from the manufacturer. 



<h2>Coinkite Tests Security and Good Engineering</h2>



Nonetheless, more advanced users from parts of the world where bitcoin is criminalized can simply follow the instructions and improve their asset security. It’s also possible for business-minded engineers to produce hardware wallets and sell them in places where Coinkite doesn’t ship or faces restrictions. 



Also, for Novak, the whole process is a true test of security and good engineering, since open sourcing is a bona fide act of issuing a challenge for security experts.



“It is great to see the level of interest for Coldcard,” he said. “As the security level of other competing products was a frustration for me, the turn of events also proved to me that the market is just as frustrated and willing to look into improved devices. We are happy that we can make Bitcoin security available to everyone.”

Coinkite Publishes Everything You Need to Build Your Own Coldcard Wallet

In a blog post published on October 25, 2019, Coinkite released all of the information needed for users to build their own versions of its hardware wallet, the Coldcard. The post contains the complete circuit diagram of the device, accompanied by a list of off-the-shelf parts that can be purchased to start the DIY project. The firmware of the Coldcard wallet has always been open source as a way of guaranteeing both transparency (if the code is publicly available, then anyone can see that the bitcoin held in a Coldcard are secure) and potential for future improvements via community feedback (if anyone can contribute through messages or pull request submissions, then improvements can be made). &ldquo;We encourage advanced users to make a unit themselves and publish their findings, it&rsquo;s one of the best methods to verify our code/hardware,&rdquo; Coinkite CEO Rodolfo Novak told Bitcoin Magazine. Security and Financial Implications for Coldcard Wallet The decision to release a veritable instruction manual for building a Coldcard from scratch marks a major shift in the field of hardware wallet research and development. However, it also generates risks from a financial point of view. Previously, Trezor used the same approach with the One hardware wallet, publishing a complete development kit with step-by-step instructions. Consequently, manufacturers from across the world created new products on the backbone of the original &mdash; even Coldcard borrowed software elements from the Trezor GitHub. But in Novak&rsquo;s view, the decision to publish the circuit boards and required parts is not detrimental to business for two reasons: Firstly, security researchers could already figure out the design thanks to Coldcard&rsquo;s simplicity and secondly, DIY enthusiasts don&rsquo;t get the same economies of scale for parts pricing (which could mean that producing a Coldcard by yourself can cost more than purchasing one from Coinkite). Furthermore, he pointed to the power of branding and the trust regular users have in Coinkite as a Bitcoin security company. &ldquo;People buy trust &mdash; they trust our security expertise, supply chain control, design, setup and all that comes with that,&rdquo; Novak said. The hardware schematic and bill of materials are clearly aimed at enthusiasts who can do soldering on electronic boards and are able to follow complex instructions for building and wiring hardware. So, it&rsquo;s unlikely that regular users will build their own Coldcard wallets rather than buy them from the manufacturer. Coinkite Tests Security and Good Engineering Nonetheless, more advanced users from parts of the world where bitcoin is criminalized can simply follow the instructions and improve their asset security. It&rsquo;s also possible for business-minded engineers to produce hardware wallets and sell them in places where Coinkite doesn&rsquo;t ship or faces restrictions. Also, for Novak, the whole process is a true test of security and good engineering, since open sourcing is a bona fide act of issuing a challenge for security experts. &ldquo;It is great to see the level of interest for Coldcard,&rdquo; he said. &ldquo;As the security level of other competing products was a frustration for me, the turn of events also proved to me that the market is just as frustrated and willing to look into improved devices. We are happy that we can make Bitcoin security available to everyone.&rdquo;

Coinkite Open Sources the Coldcard Hardware Wallet » Bitcoin Magazine

Tags

coinkite

Bitcoin Wallet Reviews: What’s the Best Hardware Wallet on the Market? Part 3

Bitcoin Wallet Reviews: What’s the Best Hardware Wallet on the Market? Part 2

Bitcoin Wallet Reviews: What’s the Best Hardware Wallet on the Market?

Video Review: Coldcard Mk3

Coinkite Publishes Everything You Need to Build Your Own Coldcard Wallet