Hardware Wallet Comparison Chart
Black (Plastic)
Black (Plastic)
Device Type (Premium)
Full hardware bag
Device type
Full hardware wallet (flagship model, air-gap supported)
Device Type
Full Hardware Package (Starter Model, No Battery)
Supported coins
Bitcoin and over 1,000 other coins – excluding the "Bitcoin Only" version which exclusively supports Bitcoin.
Supported coins
Bitcoin and over 30,000 other coins
Supported currencies
Bitcoin and Liquid
Secure Element (SE) chip
Features — 2 independent security chips: Tropic Square TROPIC01 (primary) + Infineon OPTIGA (secondary)
Secure Element chip
THD89 (EAL6+) 4 units
Secure Element chip
None - Uses a Virtual Secure Element (Blind PIN Oracle key splitting)
Certification of Security Chips
2-of-2 design: OPTIGA Trust M (V3) achieved Common Criteria EAL6+, while TROPIC01 intentionally forewent EAL certification, opting instead for open-source independent verification.
Certification of security chips
THD89 — Common Criteria EAL6+ (ISO/IEC 15408) and complies with EU EN 18031 cybersecurity standards
Secure chip certification
No — no real security chip was used.
Publicly disclosed chip documentation (no NDA)
Open — The OPTIGA specification is public. TROPIC01 is open RISC-V hardware, with published blueprints, designed to eliminate the black box limitations that require NDAs.
Publicly available chip documentation (no NDA)
Not disclosed (due to a non-disclosure agreement)
Publicly-disclosed chip documentation (no NDA)
No issues — architecture is fully exposed
Hardware random number generator (TRNG/CRNG)
3 sets of hardware TRNGs — independent generators are in the TROPIC01 chip, the OPTIGA Trust M (V3) chip, and the main STM32U5 MCU
Hardware Random Number Generator (TRNG/CRNG)
THD89 EAL6+ SE TRNG — Multiple chipsets use THD89's TRNG as a random source.
Hardware Random Number Generator (TRNG/CRNG)
ESP32 CRNG – Random from internal RF noise at boot
Combining randomness from multiple sources
Blended from 4 sources: TROPIC01's TRNG + OPTIGA Trust M's TRNG + MCU STM32U5's TRNG/thermal noise + randomness from Trezor Suite on the host — a single point of failure chip or host does not compromise seed generation.
Mixing randomness from multiple sources
THD89 SE TRNG + MCU clock signal jitter + thermal noise mixed before generating BIP-39 / SLIP-39 seeds
Mixing randomness from multiple sources
MCU CRNG + RF Noise + CPU Clock/Timer Registers + Ambient Temperature + Host App Randomness
Anti-Klepto/Nonce
Does not support/generate deterministic nonces locally according to RFC 6979, but does not use the Sign-to-Contract protocol with the host.
Anti-Klepto/Nonce
Sign-to-Contract not supported/not enforced
Anti-Klepto/Nonce
Supports Anti-Exfil (Sign-to-Contract) / Prevents key exfiltration through signatures
PIN-protected system
The MAC&Destroy hardware counter in TROPIC01 prevents PIN guessing; keys are generated from the chip's own PUF function.
PIN Protection
PIN checked directly by the THD89 chip; Automatic data clearing after multiple incorrect entries; Fingerprint unlock; Supports hidden pockets with PIN
PIN-protected
Blind PIN Oracle — Share keys with a server that doesn’t know anything. When the machine is locked, there is no data to retrieve.
Verification of device authenticity
3-Layer Hardware Check: Uses dual Secure Element chips (TROPIC01 + OPTIGA™ Trust M) and an STM32U5 MCU microcontroller for joint certification, verified by Trezor Suite every time it's connected.
Post-Quantum Security: Adds a post-quantum cryptographic signature (ML-DSA-44) from the MCU to protect against certificate forgery from quantum computers.
Bootloader signature verification + holographic sticker sealing the USB-C port
Checking if the device is authentic
"Quantum-ready" secure boot + factory certificate verification during power-up and app connection
Verifying that the device is authentic
Authenticate with Blockstream App
Holographic Sticker
Post-Quantum Security
There is — use SLH-DSA-128 with firmware, authentication, and booting.
Post-quantum security
The manufacturer claims it is a "post-quantum ready architecture" and "quantum-ready secure boot," but does not specify the algorithm.
Post-quantum Security
Open source
Hardware (excluding 1 SE) + Firmware
Open Source
Firmware — reproducible builds audited by SlowMist
Open Source
Hardware + Firmware
Sign offline transactions (Air-gap)
Sign transactions offline (Air-gapped)
Sign offline transactions (Air-gap)
Microcontroller (MCU)
STM32U5G ARM Cortex-M33 160 MHz
Microcontroller (MCU)
High-Performance STM32 ARM Cortex-M
Microcontroller (MCU)
ESP32 / ESP32-S3
Firmware architecture
Trezor Core — Application/UI layer written in MicroPython on a C-coded system layer (storage, crypto, peripherals), with full source code disclosure.
Firmware Architecture
C/C++ source code specific to this model (OneKeyHQ/firmware-pro) - driving the touchscreen, camera-based QR scanning, and managing multiple secure chips.
Firmware architecture
Self-developed C/C++ (no MicroPython and no libngu); stateless SeedQR mode, no seed written to flash memory
Screen
2.5-inch 520x380 color touchscreen with 700 nits brightness, Gorilla Glass 3
Screen
3.5-inch 480x800 IPS color touchscreen with oleophobic-coated tempered glass
Screen
1.9 inch 320x170 LCD
How to control
Touchscreen + Haptic Feedback
How to control
Touchscreen + Fingerprint Scanner
How to control
2 Push Buttons
Connectivity
USB-C, Bluetooth 5.0+, Qi2 Wireless Charging
Connectivity
USB-C, Bluetooth (end-to-end encryption), QR scanning camera, Qi2 wireless charging
Connection
USB-C, Bluetooth, QR scan camera, SD card / USB drive slot
Wireless Connection
Bluetooth 5.0+, Qi2
Wireless Connectivity
USB-C, Bluetooth (end-to-end encrypted), QR scan camera, Qi2 wireless charging
Wireless Connectivity
Bluetooth, QR Scan Camera
Battery
LiFePO4 3.2V / 330 mAh
Battery
530 mAh + Qi2 Wireless Charging
Battery
280 mAh
Dust and Water Protection Standard
IP54
Dust and water resistance ratings
Dust/Water Protection Standard
How to back up data
12/24-word seed phrase, 20-word Multi-share Backup
How to back up data
Standard BIP39 seed phrases (12/18/24 words) and SLIP-39 support
How to back up data
BIP39 standard seed phrase 12/24 words
Buy from us for 100% genuine products ✅
Buy through an official distributor like Bitcast, guaranteeing 100% authentic products with tamper-evident packaging.
There are manuals and a support team.
Don't worry about incorrect settings. We provide a comprehensive guide from setup to transferring funds to and from exchanges, and the Bitcast team is available to offer advice and guidance.
Why Buy from Bitcast?
More than just a reseller, we are a team with expertise in Bitcoin Security.
✅ 100% Authentic, Official Warranty
Imported directly from the manufacturer, not through intermediaries. You can be confident that it is not a fake or modified device.
✅ User guide in Thai
Bitcast is an educational platform focusing on Bitcoin security, providing content and a support team to help you set up correctly from day one.
✅ Advice on choosing the right model
Not sure whether to choose Safe 3, 5, or 7? Our team is ready to advise you based on your budget and usage.
✅ After-sales service
Contact us directly for usage issues, no need to wait for overseas support teams.
✅ Express shipping in Thailand
Express delivery in Thailand. Daily cut-off at noon. Orders placed before noon today will be delivered tomorrow (within Bangkok).
✅ Express delivery service available; receive within 2 hours.
If you need it urgently, we offer express delivery, and you can receive your order within two hours (Bangkok area only).