Bitcoin-only hardware wallets: how to choose

Bitcoin-only hardware wallets suit people who hold only bitcoin or want to keep their BTC savings separate from other assets. If you do not use Ethereum, Solana or other networks, support for them in a multi-currency wallet may go unused. Bitcoin-only firmware contains no code for these networks, so vulnerabilities in that particular code do not affect the device.

This approach simplifies BTC storage, but it comes with limitations: some wallets can switch to multi-currency firmware, while others cannot. This article compares those options, looks at specific models and explains what to consider if you are buying your first bitcoin wallet or want to keep bitcoin separate from altcoins.

Bitcoin-only hardware wallets vs multi-currency models

Bitcoin-only hardware wallets and multi-currency models consist of electronic components and firmware, and often share the same hardware. For example, the BitBox02 Bitcoin-only is physically identical to the BitBox02 Multi, while the Trezor Safe 5 Bitcoin-only uses the same hardware platform as the standard version. The difference lies in the firmware: the Bitcoin-only version supports bitcoin addresses, transaction signing, multisig and PSBT—a format for exchanging transactions between software and a signing device. It contains no code for Ethereum, its smart contracts or its tokens.

These devices fall into three groups based on whether their firmware can be changed:

• General-purpose wallets with a choice of firmware. Trezor, Keystone 3 Pro and OneKey can run Bitcoin-only firmware and switch back to a multi-currency version when needed.
• Factory Bitcoin-only editions that allow switching. The manufacturer supplies these as Bitcoin-only devices but permits multi-currency firmware to be installed. This group includes Bitcoin-only Trezor models and the OneKey Classic 1S Pure BTC-Only.
• Models that cannot switch to multi-currency firmware. The BitBox02 Bitcoin-only blocks this change in its bootloader. No multi-currency firmware exists for Blockstream Jade, Foundation Passport Core or SeedSigner; Jade also supports the Liquid network.

Benefits of Bitcoin-only hardware wallets

Simpler storage and clearer instructions for family

Bitcoin is often held for years, so a clear interface matters both today and five years from now, when you or a family member return to the wallet. A Bitcoin-only wallet has no unrelated networks or tokens, although bitcoin address types and account settings can still vary. This makes it easier to prepare clear instructions for your family, focusing on the specific device, compatible software and the steps for transferring funds. If you use a more complex security setup, also explain how to access the backup and any additional recovery information.

More attention to bitcoin features

Bitcoin-only hardware wallets are developed with a focus on bitcoin features, including modern Taproot addresses, passphrases—additional wallet passwords—and multisig, where a transfer requires signatures from several keys. Depending on the model, you may be able to verify a multisig wallet’s configuration on the device screen or sign transactions supplied in PSBT format using QR codes or microSD, without a cable connection to a computer.

Compatibility with third-party apps reduces dependence on the manufacturer: you can use the device with Sparrow, Nunchuk, Specter or Electrum if the software supports your model. Even if support for the manufacturer’s app ends, you may not need to replace the wallet. Where the software allows it, you can also connect to your own node, which independently verifies the blockchain.

Less frequent firmware updates

A firmware update installs new code that you will trust to sign transactions. Multi-currency versions need changes for reasons such as hard forks—changes to the rules of individual networks—new token standards and new transaction types. Bitcoin-only firmware has fewer of these reasons to change, and Trezor explicitly lists less frequent updates as a benefit, alongside a lower risk of bugs.

Check update notices in the official app or on the manufacturer’s website, regardless of how long it has been since the previous release. Scammers use emails and ads urging users to “update firmware immediately” to direct them to fake websites. Our hardware wallet firmware update guide explains when to install an update and how to prepare.

Fewer attack paths through bitcoin forks

Bitcoin, Litecoin, Bitcoin Cash and Bitcoin’s test network use related transaction formats, so transaction data alone may not reliably identify the network. If a device fails to check that keys are being used for the selected network, an attacker could disguise a request to sign a bitcoin transaction as a transfer on another network.

In 2020, a researcher known as monokh described this type of vulnerability in Ledger: apps for bitcoin forks, including Litecoin, could access bitcoin keys and sign Bitcoin transactions. Ledger fixed the issue on August 5, 2020, in version 1.4.6 of the Bitcoin app. That same year, BitBox’s developers, then known as Shift Crypto, found a similar vulnerability in the Bitcoin-only Coldcard wallet, where the attack used Bitcoin’s test network.

Although Bitcoin-only firmware has no fork apps that could provide this attack path, the Coldcard case shows that similar vulnerabilities can arise through the test network. Do not use the test network with the same seed phrase that protects your main funds, and install current firmware security fixes.

No EVM token spending approvals

On EVM networks, meaning Ethereum and compatible networks, hardware wallet owners can lose funds by confirming a dangerous request themselves. An unlimited approve lets a smart contract spend tokens without a set limit, while permit grants permission through a message signature. With blind signing, the device does not show enough information to understand the action you are authorizing.

After obtaining such permission, an attacker can use a drainer—a program that automatically withdraws funds. Protecting private keys does not prevent token losses caused by a spending approval you confirmed.

Bitcoin has no approve mechanism or smart contracts in the usual EVM sense, and Bitcoin-only firmware does not sign these permissions. Software intended solely for BTC also has no list of unrelated EVM tokens, a common channel for phishing links. When making a regular transfer, check the recipient address, amount and fee on the device’s own screen. If malware on your computer replaces the address, carefully comparing it with the address supplied by the recipient can reveal the substitution before you sign.

Less code and a smaller attack surface

Supporting each additional network requires code to process transactions, display their details and, depending on the network, implement new cryptographic algorithms. A bug in any of these components can create a vulnerability, so removing unused features reduces the number of possible attack paths—the attack surface.

One example is CVE-2026-65058, added to the CVE database on July 21, 2026. The vulnerability affected how Trezor Safe 3, Safe 5 and Safe 7 displayed Ethereum transaction data: during a smart contract interaction, the device showed only the initial part of the calldata—the data that specifies the contract action—but signed the transaction with all the supplied data. An attacker could alter the undisplayed portion and obtain a signature for a different action. Bitcoin-only firmware contains none of this Ethereum code, so the vulnerability did not affect it.

Trezor fixed the issue, but it illustrates why dedicated firmware can benefit someone who holds only BTC: removing support for unused networks also removes vulnerabilities that might exist in that specific code.

Limitations to consider before buying

If you hold Ordinals or Runes, even a regular bitcoin transfer needs extra checking. The Ordinals protocol associates data inscriptions with individual satoshis—the smallest units of bitcoin—while Runes enables tokens on the Bitcoin network. The software you use to prepare a BTC transfer may not account for these assets when selecting UTXOs, the unspent amounts from previous transactions that make up your balance. As a result, a transfer could accidentally send an Ordinals inscription to another recipient or cause the loss of Runes tokens.

Identify which UTXOs you need to preserve, then exclude them from spending in software with coin control—manual UTXO selection—such as Sparrow. Sparrow itself does not replace checking Ordinals and Runes in specialized software.

Some Bitcoin-only hardware wallets cannot switch to multi-currency firmware. On the BitBox02 Bitcoin-only, this restriction is enforced by the bootloader. If you might want to use other coins on the same device, choose a model that allows a firmware change.

For users in Ukraine, the lack of USDT support can be a significant limitation, as part of their savings may be held in stablecoins. Jade supports USDt on the Liquid sidechain, but before buying you need to check whether your exchange or P2P counterparty supports withdrawals to that network. USDT on TRON or Ethereum requires a wallet that supports the relevant network.

If you want to keep BTC separate, you can use a Bitcoin-only device for long-term savings and a second wallet for stablecoins and regular transactions. Create an independent seed phrase on the second device for this separation. Our article on choosing a network and wallet for USDT covers those options in detail.

Devices designed for bitcoin

BitBox02 Bitcoin-only and BitBox02 Nova Bitcoin-only

Swiss manufacturer BitBox enforces its Bitcoin-only restriction in a protected bootloader, which prevents a change of firmware edition. This applies to both the classic BitBox02 and the BitBox02 Nova: Bitcoin-only versions cannot switch to Multi, so a regular update will not add support for other coins either.

The BitBox02 Nova has a scratch-resistant glass display, a security chip with EAL6+ certification and Bluetooth for use with iPhone and iPad. The classic BitBox02 connects over USB-C to a computer or Android phone. Both models let you create a backup on a microSD card and display the seed phrase words so you can write them down on paper. In BitBoxApp, the bitcoin account combines supported address types, so you do not need to set up separate SegWit and Taproot accounts to get started.

These models suit users who want a straightforward initial setup and a device that blocks switching to multi-currency firmware. Before ordering a Nova, check the edition: Multi and Bitcoin-only are separate versions that cannot be switched between. Our BitBox02 Nova review covers the differences between models, backups and using BitBoxApp in more detail.

Blockstream Jade Plus and Jade Core

Blockstream has been developing bitcoin infrastructure since 2014. Jade Plus launched in January 2025, and Jade Core joined the range on April 28, 2026. Both devices support bitcoin and Liquid, a sidechain for transfers of L-BTC—bitcoin moved onto that network—and other assets, including USDt.

Jade Plus has a camera for QR-based signing; Jade Core has no camera. You can use Plus with Sparrow or Nunchuk without a USB or Bluetooth connection. Core communicates over USB-C or Bluetooth and draws power through USB-C because it has no battery. Liquid is not supported in QR mode, even on Plus: using that network requires a USB or Bluetooth connection to Blockstream app.

Jade does not use a conventional security chip, or Secure Element. Instead, it protects PIN access with a “virtual secure element”: the device communicates with an oracle server that helps verify the PIN and unlock the wallet without gaining access to your private keys. You can run your own oracle server if you prefer. On Jade Plus, you can also avoid storing the seed phrase permanently by scanning SeedQR—a QR code containing the seed phrase data—each time you use it. This method requires a camera and is not available on Jade Core.

Consider Jade Plus if you want open-source code and QR-based signing. Jade Core suits users who prefer USB-C or Bluetooth connectivity and a device without a battery. With either model, consider how PIN verification through the oracle server works, and how you will connect to Liquid if you need that network.

Foundation Passport Core and Passport Prime

US company Foundation spent several years producing open-source, Bitcoin-only Passport wallets, assembled in the US, with signing via QR codes and microSD. Passport Core belongs to that generation and remains a conventional Bitcoin-only device.

Passport Prime, which became available to all buyers in May 2026, serves a broader range of purposes. Running its own operating system, KeyOS, it combines a Bitcoin wallet with FIDO2 security keys, two-factor authentication codes and encrypted file storage. For bitcoin, Prime supports multisig and QR-based signing.

KeyOS is also designed for third-party apps. For example, Foundation showcases an Offline Cake Wallet concept for signing Monero transactions offline; showing a concept does not mean the app is already available to install. Given its broader feature set, Prime should be assessed as a separate security platform rather than treated as equivalent to a device with minimal Bitcoin-only firmware.

Our catalog includes the previous-generation Passport 2 and Passport Prime. Consider Passport 2 for holding BTC only, or Prime if you also need security keys, 2FA codes and other KeyOS features.

SeedSigner and Krux

SeedSigner and Krux are open-source projects that let you build your own transaction-signing device. SeedSigner runs on a Raspberry Pi Zero with a camera and a small display. Krux runs on compatible devices with a Kendryte K210 chip, such as Maix Amigo or M5StickV.

You need to load the seed phrase at the start of each session, either by entering it or scanning SeedQR; the device does not retain it after being switched off. Krux also offers optional encrypted seed storage on the device or an SD card, but that copy needs a strong password and should not be your only recovery method.

These devices have no security chip, so backup storage and checks of the device itself need particular care. A standard, unencrypted SeedQR contains your seed phrase data, so protect it as carefully as the written words. SeedSigner and Krux are often used as one signer in a multisig setup to add a key independent of a commercial manufacturer. We do not recommend them for beginners: assembly, firmware installation and verifying the authenticity of a downloaded firmware file require experience.

Wallets that can run Bitcoin-only firmware

Trezor Safe 3, Safe 5 and Safe 7

You can buy Trezor Safe 3, Safe 5 and Safe 7 in factory Bitcoin-only editions or configure them for BTC only by selecting the appropriate firmware in Trezor Suite. On a new device, you choose it during the first installation; on an existing wallet, you use the device settings. After switching from Universal, other coins remain at their blockchain addresses, but Trezor Suite stops displaying them for that device. Bitcoin-only firmware is also available for older Trezor models.

For factory Bitcoin-only Trezor devices, Suite has no button to switch back to Universal, but the manufacturer’s support team confirms that you can install it manually using the custom firmware installation feature. Check your backup before changing firmware, as the procedure may require a device reset and wallet recovery. Unlike BitBox, a factory Bitcoin-only Trezor edition does not block multi-currency firmware in the bootloader.

Trezor suits users who want an established brand with a large community and the option to use other coins later. On the models from our catalog shown below, you can select Bitcoin-only firmware during setup; these are general-purpose devices, not separate factory Bitcoin-only editions.

Keystone 3 Pro: signing via QR codes

Keystone 3 Pro has three firmware branches: Multi-Coin, Cypherpunk for bitcoin and privacy coins including Monero and Zcash, and Bitcoin-Only. Switching to Bitcoin-only used to be irreversible, which is why some reviews still describe that restriction. The current official firmware page allows switching between branches in either direction, provided the target version has the same or a higher version number. If the branch you want has not reached that version yet, you will need to wait for its release.

Keystone 3 Pro signs transactions via QR codes without a cable or wireless connection to a computer or phone. It has a 4-inch touchscreen, a fingerprint scanner and three security chips. With Bitcoin-only firmware, it works with Sparrow, Nunchuk and BlueWallet, and supports multisig and Shamir Backup—a backup you can split into several shares, choosing how many are needed for recovery.

Keystone suits users who want QR-based signing and a large screen for checking transactions, along with the option to return to multi-currency firmware later. This signing method is known as air-gapped signing: the device exchanges data with the software through QR codes.

OneKey Classic 1S, Classic 1S Pure BTC-Only and OneKey Pro

OneKey Classic 1S Pure BTC-Only is a factory Bitcoin-only model without a battery. On Classic 1S and OneKey Pro, you install the relevant firmware through OneKey App; the same device management section lets you return to the multi-currency version. Check your backup before switching: the official instructions include restoring the wallet from its seed phrase on the device itself.

OneKey publishes its firmware code on GitHub, allowing independent researchers to examine how the device protects keys and signs transactions.

If you want to avoid declining battery capacity over the years, Classic 1S Pure BTC-Only is a Bitcoin-only option without a battery. Consider Classic 1S or Pro if you need their other features and the ability to switch between Bitcoin-only and multi-currency firmware.

Why installing only Bitcoin on Ledger does not make it Bitcoin-only

Some advice suggests making a Ledger “Bitcoin-only” by leaving just the Bitcoin app installed. This does reduce the number of installed apps, but the operating system, app installation mechanism and Ledger Wallet remain multi-currency. The device receives the same firmware as other devices of that model. Ledger has no separate Bitcoin-only firmware or edition, so installing only Bitcoin limits your use of the wallet to one asset without giving it the same properties as dedicated firmware.

Factory Bitcoin-only or a firmware change: how to choose

Three scenarios can help you choose a model:

• You may want to use other coins. Choose a Trezor, Keystone 3 Pro or OneKey that allows firmware changes: you can start with Bitcoin-only and retain the option to switch to multi-currency firmware.
• You will hold only bitcoin and want to block a change of edition. The BitBox02 Nova Bitcoin-only or classic BitBox02 Bitcoin-only fit this requirement: their bootloaders do not allow Multi firmware to be installed.
• You want to reduce dependence on one device or manufacturer. If you have experience and are prepared to manage the backups, consider 2-of-3 multisig: a transfer requires signatures from two of three independent keys. For example, you could combine BitBox, Jade and either Keystone or Trezor, using Sparrow or Nunchuk to prepare transactions and collect signatures. With independent seed phrases, one compromised key is not enough to authorize a transfer, and if one device is lost, you can recover access using the other two keys. Recovery also requires a saved copy of the multisig wallet configuration.

What to do after buying

Start by checking the device, and choose the firmware before creating the wallet or funding it for the first time. Then prepare a backup and test receiving and sending a small amount.

• Check the device before creating the wallet. Inspect the packaging and security features, then follow the manufacturer’s authenticity checks using BitBoxApp, Trezor Suite, Blockstream app, Keystone’s verification page or OneKey App. Intact packaging alone does not prove that a device is genuine.
• Install the firmware you need. For a general-purpose model, choose Bitcoin-only during initial setup, before creating the seed phrase.
• Create and check a backup. Generate the seed phrase on the device itself, write it on paper or a metal plate, and complete the built-in check if the model supports one. Our article on safe seed phrase storage covers physical backup options.
• Set up compatible software. This could be the manufacturer’s app, Sparrow or Nunchuk. For privacy, connect to your own node if the software allows it, so you do not send queries about your addresses to a third-party server. A Tor connection hides your IP address from the server, but the server still sees the queries and can link addresses together.
• Test receiving and sending a small amount. First compare the receiving address on the device’s screen with the one in the software, then send a little BTC to it. Once the funds arrive, transfer part of them to another address you control, checking the details on the wallet’s screen. After a successful test, you can move the main amount.
• If you chose multisig, prepare for recovery. Use independent keys, save the wallet configuration and keep the backups in different physical locations. Test the recovery procedure before transferring a substantial amount.

Conclusion

Bitcoin-only hardware wallets suit people who hold only bitcoin or want to separate long-term BTC savings from other assets. Dedicated firmware reduces unused code and removes the attack paths associated with it, while protecting the seed phrase and checking transfers on the device screen remain essential with any model.

Choose based on the signing method, compatibility with your devices and the option to change firmware: BitBox does not allow switching between Bitcoin-only and Multi, while Trezor, Keystone and OneKey allow firmware changes. In the Jade range, QR-based signing is available on Plus, whereas Core uses USB-C or Bluetooth. If you plan to use multisig, test whether you can recover the wallet before transferring a substantial amount.