This third entry in our series reviewing the leading hardware bitcoin wallets on the market scrutinizes their privacy and security.

robots

twitter:card

What’s the Best Hardware Wallet on the Market? Part 3 –

twitter:title

twitter:site

Review

Bitbox

coinkite

coldcard

hardware wallets

Keepkey

Ledger

ledger nano x

Shapeshift

shift cryptosecurity

Trezor

bounty program

bug bounty program

coldcard mk3

hardware

hardware wallet

hardware wallet manufacturer

ledger

ledger nano

Bitcoin Wallet Reviews: What&rsquo;s the Best Hardware Wallet on the Market? Part 3

This is the third article in a three-part series that examines five of the most popular Bitcoin hardware wallets. Read the first part, focused on the wallets&rsquo; physical safety and outward appearance here. Read the second part, focused on simplicity, accessibility and privacy, here. By request, samples were provided by some of the companies for review purposes. After assessing the physical sturdiness, appearance, simplicity, accessibility and privacy of five of the leading hardware bitcoin wallets on the market, it&rsquo;s time to analyze arguably the most important feature of all: security.&nbsp; There are plenty of convenient features and integrations to be found in hardware wallets, but none of them are as valuable and important as the efficiency with which they secure your bitcoin. The main expectation of the device is not to enable Bluetooth connectivity or seamlessly integrate with a trading platform, but to serve its base function of keeping coins safe and away from hackers&rsquo; malevolence. Just like a mobile phone should be able to make calls before running 3D video games, a hardware wallet is supposed to offer robust cryptographic security.&nbsp; Thankfully, the devices scrutinized in this three-part analysis are the five best options available on the market, so any security compromises in favor of extra features are minimal. Furthermore, the hardware wallets covered in this review were not arbitrarily chosen &mdash; they each benefit from the positive recommendations of bitcoin.org. In no particular order, these devices are Trezor Model T, Ledger Nano X, ShapeShift&rsquo;s KeepKey, Shift Cryptosecurity&rsquo;s bitcoin-only BitBox02 and Coinkite&rsquo;s Coldcard Mk3. How to Assess Hardware Wallet Security In the context of hardware wallets, there are multiple types of &ldquo;security&rdquo; and many complex issues that have to be taken into consideration.&nbsp; First of all, the private keys these wallets protect should not get leaked during remote or physical attacks. They must act as a proxy which manages your keys without being exposed to the risk of malware, spyware, keyloggers, viruses or other malicious pieces of software that can infect your computer.&nbsp; Secondly, both addresses and amounts of cryptocurrency being sent during transactions must be verifiable. Each hardware wallet is endowed with a universal microcontroller which communicates with its encrypted aspects and facilitates user input &mdash; and this is the most vulnerable and tricky component of these devices. Thankfully, the new generation of hardware wallets has solved any issues with this user input by integrating easily readable screens which display all of the information required to compare with the computer or mobile phone input before validating the transaction. (But, as a general piece of advice, always check everything to be sure that your device is functioning properly and doesn&rsquo;t result in you losing your bitcoin.)&nbsp; Thirdly, it&rsquo;s important to take into account the integration of secure chips (as in the case of the Ledger Nano X, BitBox02 and Coldcard) and the ease with which users can create a multisig security model (the Trezor Model T and Coldcard are the champions in that field). Fourthly, it&rsquo;s essential to reduce the attack surface by creating a Bitcoin-only firmware. Some manufacturers take this feature very seriously, and the fact that you can&rsquo;t glitch the software due to the inclusion of altcoins can make a lot of difference in security. As scarce digital commodities, your bitcoin require uncompromising security.&nbsp; The use of open-source software and native SegWit (bech32) addresses are also criteria for security and privacy. The former enables easier audits by security experts and quicker fixes, while the latter reduces transaction fees and grants access to CoinJoins via Wasabi Wallet.&nbsp; Furthermore, it&rsquo;s important to check if the hardware wallet manufacturer enables bounty programs for bug disclosures. The existence of a clear, financial incentive for the discovery of various security issues attracts ethical hackers who may bring significant contributions and ultimately add to security. Last but not least, a price comparison will be presented. Sometimes the &ldquo;you get what you pay for&rdquo; principle applies and, in this context, it&rsquo;s important to introduce cost as an extra metric for security. So, here are the sections you can expect to find in this final entry in this series: History of hacks. The presence of secure chips. The difficulty of setting up multisig. The option of a bitcoin-only device. The use of open-source software. Support for bech32. Use of bug bounty programs. Price. 1. History of Hacks Historically speaking, every hardware wallet manufacturer has encountered issues with hackers and exploits. No design is perfect and absolute security from hacks is virtually impossible. The golden rule when it comes to hardware wallets is to treat them the same way you would treat paper wallets: Make sure that nobody gets physical access. For more information on physical security, please refer to the first article in this series. This section is based on the findings of Wallet.fail, white hat hackers Dmitry Nedospasov, Josh Datko and Thomas Roth, as well as independent researchers Saleem Rashid, Sergei Volokitin, LazyNinja, TheCharlatan, Kaspar Etter and Reddit user De_Wilde_Weldoener. Furthermore, it should be noted that all of the issues presented have been fixed by the hardware wallet manufacturers and that the findings serve as a reminder that no device is perfect and should always be physically protected. Trezor During its 35C3 presentation in December 2018, the team members of the Wallet.fail project presented multiple issues with the Ledger and Trezor hardware wallets. Most notably, Roth was able to extract the seed phrases and PIN from a Trezor One, while his collaborator Nedospasov introduced a prototype for the &ldquo;Trezor Glitcher&rdquo; &mdash; a device which instantly exploits the vulnerabilities of Trezor hardware wallets. The issue they exploited was that private keys were being moved in the RAM during software upgrades, and a fix was released 62 days later with version 1.8.0 of the firmware. Trezor&rsquo;s devices were also found to be vulnerable in August 2017, as explained by security enthusiast Doshay Zero404Cool in an extensive blog post. Basically, the author identified vulnerability issues with the ST32F05 chip (which is used in the Trezor Model T and the KeepKey). Saleem Rashid has also written an article which explains all of the technical intricacies involved, and Trezor fixed the issue eight days later with firmware update 1.5.2. These are only two of the most notable examples of security issues with Trezor hardware wallets, which have been identified and fixed over the last couple of years. However, it&rsquo;s this openness and willingness to constantly solve security issues that makes Trezor a trusted, device manufacturer. The large community and the numerous security experts who constantly scrutinize the hardware and software developed by Trezor are one of its most important security guarantees and the reason why Trezor is still the industry standard for hardware wallets. Ledger From a design perspective, Ledger&rsquo;s hardware wallets are the exact opposite of Trezor&rsquo;s: They rely on a secure element chip which acts as a closed-source blackbox and aren&rsquo;t as open about security. Its bounty program webpage doesn&rsquo;t contain a list of fixed issues but only mentions bug submission criteria and procedures, as well as the company&rsquo;s &ldquo;Wall of Fame.&rdquo; Before the new Nano X model was launched in the second quarter of 2019, Ledger&rsquo;s Nano S has been subjected to two significant and well-documented exploits. Firstly, Rashid reported a security issue in November 2017, which Ledger patched four months later. More specifically, the architecture of the microcontroller unit (which communicates with the buttons, screen and USB port) could be tweaked to run a custom firmware which tricks the secure element chip.&nbsp; In December 2018, the Wallet.fail team also managed to successfully launch a compromising attack on the Ledger Nano S, which allowed it to run the video game Snake on the device. It was a way for it to prove that the physical design is flawed and anybody can install malevolent software which bypasses the initial verification process and might be able to redirect the funds to another address. This demonstration was most likely a rebuttal to the famous statement made by Ledger co-founder BTChip, who tweeted support of the idea that Ledger devices are so secure that they can have their software reset and be sold to other users. In May 2019, the Wallet.fail team identified a lack of memory protections in the STM32WB55 chip from the Ledger Nano X, and it&rsquo;s still unclear if the issue was fixed by a firmware update. As a company, Ledger isn&rsquo;t as transparent as Trezor and oftentimes doubles down on issues as intentional design choices (both Rashid and the Wallet.fail team have encountered communication issues). Therefore, purchasing any Ledger device implies trusting the company&rsquo;s security model to a degree that isn&rsquo;t necessarily compatible with the cypherpunk spirit of open-source software. KeepKey From a hardware and firmware perspective, the KeepKey is very similar to the Trezor Model T. The only major differences can be found in the enclosure (which is more premium in the case of the KeepKey), the design and architecture, and the software of choice (which ShapeShift has modified to fit its business philosophy). In April 2019, Sergei Volokitin managed to take advantage of a design flaw in order to glitch the KeepKey. As he explains in his OffensiveCon19 presentation, Volokitin was able to successfully run an injection attack which glitched the device in less than five minutes and made it susceptible to the installation of custom, malevolent software. The conclusion drawn referred to the board design and choice of chips, as the microcontroller is not made to resist such attacks. Also, the large number of...

description

twitter:description

What’s the Best Hardware Wallet on the Market? Part 3 - Bitcoin Magazine

This hardware bitcoin wallet review tests the simplicity, software, verification, unique features and privacy of the Trezor Model T, Ledger Nano X, KeepKey, BitBox02 and Coldcard Mk3.

Bitcoin Wallet Reviews: What’s the Best Hardware Wallet on the Market? Part 2 –

Privacy &amp; security

electrum personal

electrum personal server

electrum personal server and wasabi

financial sovereignty

full node

model t

Bitcoin Wallet Reviews: What&rsquo;s the Best Hardware Wallet on the Market? Part 2

This is the second article in a three-part series that examines five of the most popular Bitcoin hardware wallets. Read the first part here. By request, samples were provided by some of the companies for review purposes. There are multiple reasons why the user interface recommended, developed or provided by hardware wallet manufacturers is important.&nbsp; First of all, depending on the nature of this visual interaction, users get various degrees of privacy and security. For example, websites and browser plug-ins are convenient but very risky and vulnerable to malware and phishing attacks; proprietary software installed on the hard drive is excellent but may leak some data to the company server; and integrations with your full node via Bitcoin Core, the Electrum Personal Server or Wasabi are ideal because they enable complete sovereignty and maximum privacy.&nbsp; For the purpose of promoting a particularly safe way of storing and sending bitcoin, this review will intentionally exclude internet browser plug-ins and webpages (unless they are the only official way to access the wallet). These features are nice to have, but they are susceptible to third-party attacks and, therefore, may pose a threat to users&rsquo; security and data privacy. Instead, the focus will be on software clients that operate on the users&rsquo; computers, with a focus on minimizing interactions with the company&rsquo;s servers and maximizing sovereignty with full nodes. Secondly, since visual interfaces determine the overall user friendliness and ease of use for hardware wallets, they also represent an important factor for mass adoption and retail success. To nontechnical users, the official UI/UX is the only way through which they will ever experience their hardware wallet. Therefore, it&rsquo;s important to take into account the software&rsquo;s simplicity of use and whether or not it&rsquo;s available on multiple platforms. Thirdly, visual interfaces may also include extra features and integrations that simplify other activities such as buying bitcoin and exchanging it for fiat or altcoins. While accessing these services is not recommended for HODLers who are concerned about their privacy, some of these options may come in handy for traders and everyday users.&nbsp; Just as in the previous part of this analysis, the five hardware wallets under scrutiny for this review are Trezor&rsquo;s Model T, Ledger&rsquo;s Nano X, ShapeShift&rsquo;s KeepKey, Shift Cryptosecurity&rsquo;s BitBox02 and Coinkite&rsquo;s Coldcard Wallet Mk3. Given the criteria described above, the rest of the article will be split into five sections:&nbsp; Simplicity of use. Multi-platform software. Extra verification steps&nbsp;Unique features. Privacy. Hopefully, the results of this review will help determine the best hardware wallet choice for each user type. 1. Simplicity of Use Writing down the seed phrase, verifying some designated words on the hardware wallet&rsquo;s screen (or all of them, depending on the product&rsquo;s design) and setting up some kind of backup are all part of the exciting (yet slightly frightening) phase of getting immersed in financial sovereignty. The thought that, unlike in traditional finance, you cannot recover funds that you lose by mistake can sometimes be overwhelming. In this regard, simplicity really matters and good interfaces can make a lot of difference in the process of attaining financial sovereignty. As you are about to discover, the test includes four newbie-friendly devices and one power-user product that benefits from massive community support &mdash; but still requires a good understanding of operation security fundamentals and Bitcoin essentials for use. Simplicity of Use: Trezor Model T The web-based Trezor Wallet is the industry standard for hardware wallet user interfaces. The Trezor Model T uses the Trezor Bridge client software to facilitate communication between the hardware wallet and a computer. This application is a hybrid in that it requires installation but still runs in your browser.&nbsp; The installation is straightforward and easy; it teaches new users how to validate each operation on the device and introduces the concept of a recovery seed in a comprehensive way. The software also encourages the creation of backups and makes use of a familiar account and password system. After the initial setup is complete, everything is straightforward and clean: Users can send or receive bitcoin but also receive suggestions for nearby ATMs and exchanges where they can buy bitcoin.&nbsp; Trezor is the world&rsquo;s first hardware wallet manufacturer and all units reviewed in this test are more or less inspired by its designs and specifications. Thanks to its first-mover advantage and long-time popularity, every Trezor product has a lot of community support. In this regard, users will find that they can connect their Model Ts to the Electrum Web Server, Wasabi Wallet, Exodus and even ShapeShift.&nbsp; Some of these alternative options will grant more privacy and sovereignty, while others bring convenience through extra features. Overall, the experience is the industry standard for onboarding users to financial sovereignty and is worthy of a 10 out of 10 rating. Simplicity of Use: Ledger Nano X Ledger Live is a clean, simple and feature-packed local client which adds functionality to the Nano X. Conversely, the Ledger Nano X makes use of a local application called Ledger Live. What sets it apart from Trezor Bridge is the fact that the software installation takes place locally on your hard drive, so you can check your balance even when you&rsquo;re not connected to the internet (assuming that the data had been updated) and benefit from slightly improved privacy. Also, the app serves the purpose of checking the authenticity of the hardware wallet by interacting with the internal secure element. It still doesn&rsquo;t replace a full node or Wasabi synchronization, but it&rsquo;s a superior experience as compared to a webpage.&nbsp; Ledger Live is very intuitive and the installation process is basically a tutorial which teaches users about the device&rsquo;s basic functionality. After it&rsquo;s generated, the seed phrase needs to be validated word-by-word on the device for extra safety. At the end of the setup, each cryptocurrency application needs to be installed individually &mdash; so users can choose not to increase the attack surface with extra features by making the Nano X a BTC-only device.&nbsp; The interface also features a &ldquo;Buy Crypto&rdquo; menu which allows users to quickly buy bitcoin locally or exchange them for other cryptocurrencies via ShapeShift or Changelly.&nbsp; Correspondingly, the experience deserves a perfect-10 rating. Simplicity of Use: KeepKey The ShapeShift interface is clean, feature-packed and compatible with the KeepKey and the Trezor hardware wallets (Ledger will also be added). As a product of the parent company, KeepKey is seamlessly integrated with the ShapeShift Platform. New users are greeted by a familiar, simple and feature-packed interface which includes options to buy, send, receive and trade your bitcoin. Interestingly, this platform is designed to also support Trezor hardware wallets and plans to integrate functionality for Ledger products. In this regard, it seems like ShapeShift is trying to provide a software alternative to the dedicated user interfaces developed and provided by competing manufacturers. KeepKey also has Client, a barebones desktop application which allows users to check, send and receive BTC, and to connect to the ShapeShift website. It&rsquo;s basic and limited in functionality but may provide a more privacy-friendly experience for those who don&rsquo;t want to sign up to the ShapeShift platform. Speaking of alternative software, it should also be mentioned that, unlike the Ledger Nano X, the Trezor Model T and the Coldcard (all versions), there is no KeepKey compatibility with Wasabi Wallet. Luckily, ShapeShift&rsquo;s device works just fine with the Electrum Personal Server and can connect to full nodes running Bitcoin Core 0.18 or newer.&nbsp; KeepKey is excellent in its simplicity of use and deserves praise for also integrating rival manufacturers on the platform. However, it should be noted that the lack of compatibility with Wasabi Wallet is possibly the biggest current downside. Simplicity of Use: BitBox02 Under the &ldquo;Expert Settings&rdquo; menu, the BitBoxApp has two unique features: coin control and full node connectivity. Last but certainly not least, the BitBox02 offers a competitive alternative with the BitBoxApp. The installation experience is very similar to the one created by Ledger. However, there are two options which set the BitBox02 apart: It enables coin control (as opposed to merging UTXOs together, users get to choose from which amount they&rsquo;re sending, so that financial privacy gets protected), and it allows a seamless pairing with a local full node.&nbsp; Both of these features empower users with privacy and sovereignty in a comprehensive and straightforward interface. Basically, Shift Cryptosecurity&rsquo;s product is the middle ground between the Trezor and the Coldcard: It offers some power-user features while also keeping it basic. Also, the in-app guide, positioned on the right sidebar of the BitBoxApp, makes it simple to run the setup, even for newbies. Overall, the BitBox02 has a great, basic interface which somehow manages to integrate some advanced features that users who appreciate financial sovereignty will find useful. It doesn&rsquo;t include all of the trading features found in the KeepKey, nor does it have in-app access to a series of third-party exchange services as the Ledger and Trezor do, but it gets privacy and sovereignty right without overcomplicating matters.&nbsp; The BitBox02&rsquo;s intuitive onboarding also receives a perfect-10 rating for making power-user features simple.&nbsp;&nbsp; Simplicity of Use: Coldcard Wallet Mk3 For maximum privacy and financial sovereignty, Coldcard is designed to work with Wasabi Wallet and the Electrum Personal Server. Contrary to market trends, the Coldcard hardware wallet doesn&rsquo;t have a dedicated software client which...

This hardware bitcoin wallet review tests software, unique features and privacy of the Trezor Model T, Ledger Nano X, KeepKey, BitBox02 and Coldcard Mk3.

Best Hardware Wallet on the Market Review Part 2 - Bitcoin Magazine

For many, bitcoin security is only as good as the hardware wallet of choice. In this review, we put five popular options to the test.

Bitcoin Wallet Reviews: The Best Hardware Wallet –

colcard

Hardware wallet

bitbox02 and coldcard mk3

nano x

Putting Trezor, Ledger, KeepKey, BitBox and Coldcard to the test

Bitcoin Wallet Reviews: What&rsquo;s the Best Hardware Wallet on the Market?

This is the first article in a three-part series that examines five of the most popular Bitcoin hardware wallets. By request, samples were provided by some of the companies for review purposes. Hardware wallets are small and portable devices which empower users to manage the keys to their bitcoin in a way that combines security with convenience. Essentially, they serve as an extra layer of protection which stands against malevolent attacks that may happen on infected computers.&nbsp; Further Reading: What Are Bitcoin Wallets If you&rsquo;re HODLing your bitcoin, then you can resort to cheaper and more convenient cold storage options (like a computer that never gets connected to the internet, a USB flash drive, a paper wallet, some form of bearer item or even a plaque of metal). However, if your needs extend to trading or making payments with bitcoin, then hardware wallets are essential to sign transactions in a safe environment that hackers won&rsquo;t be able to access remotely.&nbsp; It&rsquo;s also possible to use your hardware wallet as a cold storage solution (you only connect it to your computer once to move your bitcoin keys onto it, and then store it in a safe environment). This way, you benefit from the advantage of on-device, private-key generation and greatly reduce risk by removing the likeliness of attacks via phishing, viruses, malware and spyware.&nbsp; Security experts are known to destroy the devices that they use to generate random passwords and private keys, as their processing units are mathematically more likely to replicate the result than another computer with similar specifications. Correspondingly, hardware wallets should be as personal as your toothbrush: Get them new and in the kind of packaging which guarantees their untampered nature, use them while they&rsquo;re still safe and then avoid passing them on to a second owner. Coldcard, one of the manufacturers presented in this review, goes as far as adding a &ldquo;SHOOT THIS&rdquo; marker on their products&rsquo; circuit boards for emergencies where privacy and security must be saved. This review aims to scrutinize and compare five of the most popular and secure hardware wallet solutions: Trezor Model T, Ledger Nano X, ShapeShift&rsquo;s KeepKey, Shift Cryptosecurity&rsquo;s bitcoin-only BitBox02 and Coinkite&rsquo;s Coldcard Mk3. They have been chosen on the grounds of their reputation in the field and the recommendation provided by the Bitcoin.org experts, and they all offer interesting and distinct features that will be detailed throughout the review. As a way of maintaining the balance and comparative objectivity of the process, only the latest models will be taken into consideration &mdash; while some devices are more common and popular, it&rsquo;s only fair to talk about the most recent product from each manufacturer.&nbsp; Criteria for analysis include&nbsp; Physical safety (including resemblance with a common household object, sturdiness and connectivity);&nbsp;User interface (including simplicity of use, multi-platform software and unique features);&nbsp;Security (including the public record of hacks, auditability of hardware/software, availability of Bitcoin-only versions for reduced attack surface, the ability to generate unlimited BTC addresses on the same device for greater privacy and full SegWit support for other integrations). 1. The Physical Safety of Hardware Wallets The first installment in this review will focus exclusively on the physical safety of hardware wallets. Beyond being devices with strong cryptographic encryption, hardware wallets are objects that require sturdiness, connectivity and, ideally, the ability to remain unnoticed in a drawer full of electronics. Security in hardware wallets isn&rsquo;t just about the software but also the ability to pass border checks without raising suspicions and dropping your device on hard surfaces without causing serious damage.&nbsp; Also, having a fairly common method for connecting your device to a computer or phone is essential for trust minimization and security: Not having to trust a proprietary format for cables and having the opportunity to buy a cheap generic product from any convenience store where computer peripherals are sold is likewise important. For power users, paper wallets and metal plates may prove to be a superior alternative &mdash; but for millions of causal holders and investors, it&rsquo;s important to have a simple and comprehensive security model. 1a. The Outer Appearance of the Hardware Wallets Each of the criteria enumerated above has been scrutinized with the purpose of identifying the best form factor and most secure build. A consensus about the visual similarities for the hardware wallets reviewed is that the Trezor Model T looks like a car key remote, the Ledger Nano X and the BitBox02 have the appearance of USB flash drives, the KeepKey resembles an external hard drive (at least when it&rsquo;s unplugged and the screen is switched off) and the Coldcard can be easily confused with a pocket calculator.&nbsp; Coinkite&rsquo;s Coldcard The Appearance of the Ledger Nano X. However, of all five products, the Ledger Nano X (like its predecessor, the Nano S) is ideal for those who want to conceal what the device is. If you don&rsquo;t want people to know that you own a hardware wallet when you pass an airport check or when burglars potentially break into your house, then you should go for the most common-looking product &mdash; and the Ledger hardware wallets resemble fairly cheap and mundane USB flash drives. The Appearance of the BitBox02. The BitBox02 is easily concealed as well, but its sleek, compact and futuristic design (which includes a visible LCD screen) may give away its special nature. Compared to the Ledger, it&rsquo;s harder to confuse with a USB flash drive (though, to ShiftCrypto&rsquo;s merit, the BitBox has a male connector which is more faithful to the design of storage devices). For concealing purposes, the original BitBox01 is superior thanks to its basic design. Shift Cryptosecurity&rsquo;s BitBox02 The Appearance of the Trezor Model T. The Trezor may fool some as a remote key for an automobile, though closer inspection will reveal pretty obvious physical differences. And if you&rsquo;re known to take the bus, rather than drive a car, you&rsquo;re not going to fool anybody. The Appearance of the Coldcard Mk3. Conversely, the Coldcard wallet&rsquo;s calculator-like design may be inconspicuous at first, but the impractically small screen and the lack of math operation buttons (the &ldquo;Okay&rdquo; tick and the &ldquo;X&rdquo; could be replaced by a plus and a minus, for instance) are clear clues that it serves a different purpose. Has anyone ever seen a calculator that can display only three to four digits and looks more like a validation machine? It&rsquo;s unlikely that airport security officers from an authoritarian country would be fooled by the design. The Appearance of the KeepKey. Last but not least, the KeepKey has the most unusual shape and size. When switched off, it might look like an external power bank or hard drive of sorts. However, the large and shiny LCD screen indicates that there might be something special about the device &mdash; and this is bad for security. The overall design is excellent for everyday usability and the hardware wallet itself is very sturdy. Nonetheless, it&rsquo;s unlikely for a KeepKey to remain unnoticed when you&rsquo;re crossing borders or when your house gets robbed. So, in a situation where you don&rsquo;t want anyone to know that you own a hardware wallet, just carry a Ledger and a couple of similar-looking USB flash drives with redundant data. Also, it would be wise to scratch off the logo. But then again, paper wallets, brain wallets and metal plates are more suitable for such scenarios. 1b. The Physical Sturdiness of Hardware Wallets Ideally, hardware wallets should have great durability to withstand physical shocks. If you&rsquo;re travelling and need the kind of device that you can simply throw into your bag and never worry about possibly breaking, then you should take a close look at the build quality and materials used. Thankfully, all products presented in this review are rugged and have worked without any issues after being dropped on the floor. However, the intention was not to see how quickly they break, so the rest of the analysis will take into account the materials being used &mdash; under the assumption that metal enclosures are sturdier than plastic cases. The Physical Sturdiness of the Trezor Model T. The Trezor Model T, just like every other hardware wallet made by the Czech company, is small, solid and well built. If anything, Trezor understands the importance of high-quality materials very well, as one of the products in its store is made of aluminum (but costs six times as much as the Model T). In support of those who bought the regular, plastic-made items, the company offers silicone and leather protection cases. Yet, assuming that no extra accessory comes with the Trezor, its score for sturdiness is 7 out of 10. Trezor Model T The Physical Sturdiness of the Ledger Nano X. The Ledger Nano X is sturdier thanks to its included steel cover. As long as the device is properly folded, the screen is protected and the core components are bound to take less damage during physical impacts. It&rsquo;s definitely not the best-built device in the test, but for its small size for form factor and design, it holds its merits for delivering a sturdy enclosure. For its construction, the Ledger Nano X scores a 9 out of 10. The Physical Sturdiness of the KeepKey. Conversely, the KeepKey is built like a tank and has a bulky form that should help it withstand physical shocks. If dropped on a hard surface or trampled under foot, it&rsquo;s the most likely product in this test to resist permanent damage to its body. However, the same can&rsquo;t be said for its large screen which can be easily cracked, thus deeming the device unusable. The combination of plastic and metal offers ruggedness and the rectangular power bank-like shape makes it robust, but it&rsquo;s the touchscreen display which may act as a point of failure. Nonetheless, the high-quality...

Bitcoin Wallet Reviews: The Best Hardware Wallet - Bitcoin Magazine

Douglas Bakkum and Stadicus of Shift Cryptosecurity discuss the new BitBox02 hardware wallet and upcoming BitBoxBase Bitcoin and Lightning node.

Video: Shift Cryptosecurity, BitBoxBase and BitBox02 –

Video

bitbox hardware

bitbox hardware wallet

bitcoin

bitcoin and lightning

bitcoin and lightning node

bitcoin magazine

conference in berlin

<figure class="wp-block-embed-youtube wp-block-embed is-type-video is-provider-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio"><div class="wp-block-embed__wrapper">
https://www.youtube.com/watch?v=tcANvySQO1Q
</div></figure>



During <a href="https://bitcoinmagazine.com/articles/the-lightning-conference-preview-in-six-stories">The Lightning Conference</a> in Berlin, Bitcoin security company <a href="https://shiftcrypto.ch/">Shift Cryptosecurity</a> presented two new products: a revised vision for their popular hardware wallet BitBox (which also has a BTC-only version) and a Bitcoin and Lightning node called the BitBoxBase, which promises to sync the entire Bitcoin blockchain in less than two days’ time and deliver an overall seamless experience.



In order to offer more details on these products and explain how they work and what kind of innovations they bring to the space, we interviewed two key figures from the company: CEO and co-founder Douglas Bakkum (inventor of the original BitBox hardware wallet) and hardware enthusiast Stadicus (who is in charge of the node division).



According to Bakkum, Shift Cryptosecurity’s philosophy is to “focus on the whole user experience, prioritize simplicity and govern decisions with hardware.”&nbsp;



Correspondingly, the two releases manage to follow this ethos while also providing some features which set them apart from the competition.



<figure class="wp-block-image"><img src="https://lh5.googleusercontent.com/0Q0ZPMvC4AoqwT5bh0zTJM4A2sR9F11MsgDtKfzs8Fc2ooizgkL9gEqDswGdBh8dQf2WLjMCYa8Ei9HpsetupmNYA8Uj7GxsgoG5TvPo6MkYESXpf-lmGibCWlgqbA" alt=""/><figcaption>The BitBox02 joins the club of bitcoin-only hardware wallets. Source: <a href="https://twitter.com/Stadicus3000/status/1185626663528345601?s=20">Twitter</a></figcaption></figure>



<h2>BitBox02: “The Best of Both Worlds Between Ledger and Trezor”</h2>



Bakkum has emphasized two areas of improvement for the second version of the BitBox hardware wallet: usability and security. In order to make backups more convenient for users, the BitBox02 includes a microSD card insert which saves an encrypted version of the private key and removes so-called “mnemonic anxiety” (fear of forgetting or losing the 12 or 24 words which make up the recovery seed phrase).&nbsp;



“For new users, it’s really confusing to understand seed keys, so external backups are extremely easy to understand and it happens instantly,” Bakkum told Bitcoin Magazine.



Furthermore, the BitBox02 is designed to combine the best features found in the two most popular hardware wallets on the market: It contains a general purpose microcontroller and runs open-source software like the Trezor, and also includes a security element in the form of a physical chip, as Ledger wallets do.



“We take what we think is the best of both worlds between Ledger and Trezor,” said Bakkum.



Bakkum also advocated for open-source firmware by saying that concealing the code may have fatal repercussions for the users, even when the intentions are good.&nbsp;



“In a lot of fields, it’s probably okay to be closed source, but in crypto where one mistake means you can lose your funds, I think it’s just a completely bad idea,” he said.



<figure class="wp-block-image"><img src="https://lh6.googleusercontent.com/qC_PlfGC0F_1AJEGJRynifTudtVl4TTXM_DrkLF6B8nPlYJUYnwx1nT512CI4bJg2ZKuiN83Sq0CPS8pV7rfCdfUxPC43-y4uSMYkucB0es4uMe14X9cspVFN_w4kw" alt=""/><figcaption>The BitBoxBase (or The Base) was presented as a prototype at The Lightning Conference in Berlin. Source: <a href="https://twitter.com/ShiftCryptoHQ/status/1185913723636146176?s=20">Twitter</a></figcaption></figure>



<h2>BitBoxBase: The First Retail Bitcoin and Lightning Node Running c-lightning</h2>



The BitBoxBase node prototype presented during The Lightning Conference featured a slick, black, 3D-printed cover which housed a palm-sized ROCKPro64 with 4 GB of RAM and an attached terabyte SSD. Before an interview with Bitcoin Magazine, node engineer Stadicus said that he was still experimenting with various hardware specifications and settings in order to deliver the best experience with the lowest production costs. However, it’s unlikely that anything except for the casing and cables will change before the official release date — which is expected to be in the first quarter of 2020.



“You see quite a few Lightning nodes out there,” Stadicus told Bitcoin Magazine. “They start with Lightning and then move a little bit toward the on-chain stuff, but to me it’s a little bit the other way around. First you want to solve the on-chain Bitcoin issues to give the users sovereignty and privacy and then we can add the fun stuff on top. I think this is probably the main differentiator between our product and Casa’s.”



The Base is meant to complete the ecosystem of Shift Cryptosecurity products by empowering users with more privacy to validate and store their own transactions without relying on third-party devices.&nbsp;



“We’re working on a product ecosystem that combines hardware and software to give you as much financial sovereignty as possible,” Stadicus said. “Having a secure cold storage solution with a hardware wallet, together with our BitBox app, offers a holistic user experience and maximizes individual sovereignty.”



Aside from the hardware architecture, what truly sets the BitBoxBase apart from the rest of available retail node solutions is the decision to use Blockstream’s c-lightning client for Lightning Network transactions.&nbsp;



“One reason why we chose c-lightning is that it has all these great server-side plugin capabilities, so we can program in any language that we want – and we usually use Go – and add functionality,” Stadicus said. “So, for example, if you want to open a channel from your hardware wallet, you cannot do that directly from either c-lightning or <a href="https://bitcoinmagazine.com/articles/lightnings-first-implementation-now-beta-developers-raise-25m">lnd</a>. But with c-lightning, you have these hooks to get into the program, write your own feature and use that to just add an additional functionality that is important for the whole ecosystem.”



The decision to not use lnd like the other major Bitcoin and Lightning node manufacturers comes with a trade-off, as applications such as ZapWallet and Joule can no longer be used.&nbsp;



“It was a hard choice for us because we deliberately gave away that whole suite of free applications, but we think that if you really want to have an easy plug-and-play solution, then that’s not the way to go, anyway,” Stadicus noted. “So, we decided that if we’re going all in, then we can use c-lightning. And I guess the little rebel in me was also [saying] that everybody is building on lnd so, we must go for c-lightning to avoid following the rabbit like everyone.”



<figure class="wp-block-image"><img src="https://lh6.googleusercontent.com/Pi9moDO2DoWESaXEUSb4UKO4Mk7i1IwETZZmdvNSWEjNXKbMBMEMYrhCGsufmHNYT09gbDrUfaZ5WnTlETnU8yaRxCjIkRfPHdzZtR21ZfM-AS7PQGL6RybBiAdHOw" alt=""/><figcaption>During The Lightning Conference, Stadicus presented his vision for building an accessible Bitcoin node. Source: <a href="https://twitter.com/ShiftCryptoHQ/status/1185849989995597824?s=20">Twitter</a></figcaption></figure>



<h2>On the BitBox App and Why Hardware Security Matters</h2>



Just as the heart was the element that connected the brain with the hands in <a href="https://www.imdb.com/title/tt0017136/">Fritz Lang’s “Metropolis,”</a> Shift Cryptosecurity is working on a software implementation which bridges its hardware products. Their effort is generically called the <a href="https://shiftcrypto.ch/app/">BitBoxApp</a> and is designed to be light and universal to all operating systems.&nbsp;



“We build hardware, but we also require good software for it,” Bakkum said. “Right now, we have a cross-platform desktop app that you can find on iOS, Windows and Linux. We also have a mobile version that we plan to release pretty soon, so that you will be able to plug your BitBox02 directly into your phone with a USB-C connection. That’s a big focus on usability and simplicity, and in the future we will try to add different types of services that are useful.”



Bakkum advocates the use of hardware wallets and nodes, even for newcomers to Bitcoin.&nbsp;



“For people new in the field, I think it’s extremely important to get their bitcoins secure, especially when exchanges are a ticking time bomb,” he said. “Your mobile wallet or desktop computer are also ticking time bombs, and so the best way to do it is via dedicated encrypted hardware.”



“From a certain point on, you should really care about privacy,” added Stadicus.

Video: Shift Cryptosecurity on Its Base Node and BitBox02 Wallet

During The Lightning Conference in Berlin, Bitcoin security company Shift Cryptosecurity presented two new products: a revised vision for their popular hardware wallet BitBox (which also has a BTC-only version) and a Bitcoin and Lightning node called the BitBoxBase, which promises to sync the entire Bitcoin blockchain in less than two days&rsquo; time and deliver an overall seamless experience. In order to offer more details on these products and explain how they work and what kind of innovations they bring to the space, we interviewed two key figures from the company: CEO and co-founder Douglas Bakkum (inventor of the original BitBox hardware wallet) and hardware enthusiast Stadicus (who is in charge of the node division). According to Bakkum, Shift Cryptosecurity&rsquo;s philosophy is to &ldquo;focus on the whole user experience, prioritize simplicity and govern decisions with hardware.&rdquo;&nbsp; Correspondingly, the two releases manage to follow this ethos while also providing some features which set them apart from the competition. The BitBox02 joins the club of bitcoin-only hardware wallets. Source: Twitter BitBox02: &ldquo;The Best of Both Worlds Between Ledger and Trezor&rdquo; Bakkum has emphasized two areas of improvement for the second version of the BitBox hardware wallet: usability and security. In order to make backups more convenient for users, the BitBox02 includes a microSD card insert which saves an encrypted version of the private key and removes so-called &ldquo;mnemonic anxiety&rdquo; (fear of forgetting or losing the 12 or 24 words which make up the recovery seed phrase).&nbsp; &ldquo;For new users, it&rsquo;s really confusing to understand seed keys, so external backups are extremely easy to understand and it happens instantly,&rdquo; Bakkum told Bitcoin Magazine. Furthermore, the BitBox02 is designed to combine the best features found in the two most popular hardware wallets on the market: It contains a general purpose microcontroller and runs open-source software like the Trezor, and also includes a security element in the form of a physical chip, as Ledger wallets do. &ldquo;We take what we think is the best of both worlds between Ledger and Trezor,&rdquo; said Bakkum. Bakkum also advocated for open-source firmware by saying that concealing the code may have fatal repercussions for the users, even when the intentions are good.&nbsp; &ldquo;In a lot of fields, it&rsquo;s probably okay to be closed source, but in crypto where one mistake means you can lose your funds, I think it&rsquo;s just a completely bad idea,&rdquo; he said. The BitBoxBase (or The Base) was presented as a prototype at The Lightning Conference in Berlin. Source: Twitter BitBoxBase: The First Retail Bitcoin and Lightning Node Running c-lightning The BitBoxBase node prototype presented during The Lightning Conference featured a slick, black, 3D-printed cover which housed a palm-sized ROCKPro64 with 4 GB of RAM and an attached terabyte SSD. Before an interview with Bitcoin Magazine, node engineer Stadicus said that he was still experimenting with various hardware specifications and settings in order to deliver the best experience with the lowest production costs. However, it&rsquo;s unlikely that anything except for the casing and cables will change before the official release date &mdash; which is expected to be in the first quarter of 2020. &ldquo;You see quite a few Lightning nodes out there,&rdquo; Stadicus told Bitcoin Magazine. &ldquo;They start with Lightning and then move a little bit toward the on-chain stuff, but to me it&rsquo;s a little bit the other way around. First you want to solve the on-chain Bitcoin issues to give the users sovereignty and privacy and then we can add the fun stuff on top. I think this is probably the main differentiator between our product and Casa&rsquo;s.&rdquo; The Base is meant to complete the ecosystem of Shift Cryptosecurity products by empowering users with more privacy to validate and store their own transactions without relying on third-party devices.&nbsp; &ldquo;We&rsquo;re working on a product ecosystem that combines hardware and software to give you as much financial sovereignty as possible,&rdquo; Stadicus said. &ldquo;Having a secure cold storage solution with a hardware wallet, together with our BitBox app, offers a holistic user experience and maximizes individual sovereignty.&rdquo; Aside from the hardware architecture, what truly sets the BitBoxBase apart from the rest of available retail node solutions is the decision to use Blockstream&rsquo;s c-lightning client for Lightning Network transactions.&nbsp; &ldquo;One reason why we chose c-lightning is that it has all these great server-side plugin capabilities, so we can program in any language that we want &ndash; and we usually use Go &ndash; and add functionality,&rdquo; Stadicus said. &ldquo;So, for example, if you want to open a channel from your hardware wallet, you cannot do that directly from either c-lightning or lnd. But with c-lightning, you have these hooks to get into the program, write your own feature and use that to just add an additional functionality that is important for the whole ecosystem.&rdquo; The decision to not use lnd like the other major Bitcoin and Lightning node manufacturers comes with a trade-off, as applications such as ZapWallet and Joule can no longer be used.&nbsp; &ldquo;It was a hard choice for us because we deliberately gave away that whole suite of free applications, but we think that if you really want to have an easy plug-and-play solution, then that&rsquo;s not the way to go, anyway,&rdquo; Stadicus noted. &ldquo;So, we decided that if we&rsquo;re going all in, then we can use c-lightning. And I guess the little rebel in me was also [saying] that everybody is building on lnd so, we must go for c-lightning to avoid following the rabbit like everyone.&rdquo; During The Lightning Conference, Stadicus presented his vision for building an accessible Bitcoin node. Source: Twitter On the BitBox App and Why Hardware Security Matters Just as the heart was the element that connected the brain with the hands in Fritz Lang&rsquo;s &ldquo;Metropolis,&rdquo; Shift Cryptosecurity is working on a software implementation which bridges its hardware products. Their effort is generically called the BitBoxApp and is designed to be light and universal to all operating systems.&nbsp; &ldquo;We build hardware, but we also require good software for it,&rdquo; Bakkum said. &ldquo;Right now, we have a cross-platform desktop app that you can find on iOS, Windows and Linux. We also have a mobile version that we plan to release pretty soon, so that you will be able to plug your BitBox02 directly into your phone with a USB-C connection. That&rsquo;s a big focus on usability and simplicity, and in the future we will try to add different types of services that are useful.&rdquo; Bakkum advocates the use of hardware wallets and nodes, even for newcomers to Bitcoin.&nbsp; &ldquo;For people new in the field, I think it&rsquo;s extremely important to get their bitcoins secure, especially when exchanges are a ticking time bomb,&rdquo; he said. &ldquo;Your mobile wallet or desktop computer are also ticking time bombs, and so the best way to do it is via dedicated encrypted hardware.&rdquo; &ldquo;From a certain point on, you should really care about privacy,&rdquo; added Stadicus.

Video: Shift Cryptosecurity, BitBoxBase and BitBox02 » Bitcoin Magazine

Tags

shift cryptosecurity

Bitcoin Wallet Reviews: What’s the Best Hardware Wallet on the Market? Part 3

Bitcoin Wallet Reviews: What’s the Best Hardware Wallet on the Market? Part 2

Bitcoin Wallet Reviews: What’s the Best Hardware Wallet on the Market?

Video: Shift Cryptosecurity on Its Base Node and BitBox02 Wallet