Best Bitcoin hardware wallets for iPhone

Trezor's own FAQ spells out the problem: "On iOS, wired accessories require Apple-specific licensing that isn't supported by these models." That is why Trezor lists the Safe 5 and Safe 3 as limited on iOS, good for tracking and receiving, while signing needs a desktop or an Android phone. BitBox says the same about its first model: "The original BitBox02 is not supported by the BitBoxApp on iPhone or iPad."

Three connection methods do work with an iPhone. Camera QR: the phone shows the unsigned transaction as a QR code, the wallet scans it, signs, and shows a QR code the phone scans back. Only pictures cross the gap. Bluetooth: the wallet pairs with an app over radio. NFC: you tap the wallet to the back of the phone, and the phone powers the exchange for the second or two it takes.

I only rank Bitcoin-only devices that sign from an iPhone today, in the order set by my rating methodology. If you still need the app half of the setup, my software wallets page covers that side.

SeedSigner is a signing device you build from a Raspberry Pi Zero, a small screen, and a camera, usually for under $50. It has no USB data link, no Bluetooth, and no NFC, so the iPhone never touches it. The project lists BlueWallet, Keeper, and "any bitcoin wallet software that supports QR codes" among compatible apps, and both named apps run on iOS.

Setup on an iPhone takes three steps. Build the device and create a seed with dice or camera entropy. Show the public key as a QR code and scan it into BlueWallet or Keeper to make a watch-only wallet. To spend, the app shows a QR code, SeedSigner scans it, you check the address and amount on its screen, and the app scans the signed QR back.

The honest con: in September, SeedSigner merged a fix for change checks that forged PSBT key data could fool, and the latest release, 0.8.7 from July, predates it. Until the next release ships, check every output address on the screen yourself. Read my SeedSigner review for the rest, or see how it stacks up in Krux vs SeedSigner.

Jade Plus has a built-in camera for air-gapped QR signing and a 280 mAh battery, so it works away from a cable. Blockstream's companion-app table lists BlueWallet and Keeper among the mobile apps that sign with Jade Plus over QR. It costs $149 in plastic or $169 in metal.

It also has Bluetooth. The store page lists one iOS Bluetooth route, the Blockstream app for iOS via Bluetooth, which shows bitcoin, Lightning, and Liquid assets in one view. I still prefer QR with BlueWallet, Bitcoin Keeper, or Nunchuk, for the reason below.

Setup: unlock the Jade Plus with QR, export the wallet to BlueWallet or Keeper by scanning its QR code, then sign by scanning back and forth. The con worth knowing: in 2025 DARKNAVY found a buffer overflow in Jade's descriptor registration command, fixed in 1.0.37, and Blockstream says "QR mode is not vulnerable as it does not expose an RPC interface at all". That is a good argument for QR on any device. Full details in my Jade Plus review.

Krux is open-source firmware you flash onto off-the-shelf Kendryte K210 devices, such as the Maix Amigo and M5StickV. Some of those boards come assembled with touchscreens; others need assembly. It talks to coordinators through QR codes, SD cards, and thermal printers, and its docs list BlueWallet and Bitcoin Keeper among its mobile coordinators.

Setup mirrors SeedSigner: flash the firmware, make a seed, scan the public key QR into your iPhone app, and pass signed transactions back by QR. The cost depends on which board you buy, and the project calls itself a research and development project, so expect less polish than a commercial wallet. The latest release is v26.09.0 from October. See my Krux review.

The original Jade has the same camera-and-QR workflow at a lower price: $67 on Blockstream's store, down from a $79 list price when I checked on November 5, 2026. Its store page lists BlueWallet, Sparrow, Electrum, and Specter among compatible apps, and it has a 240 mAh battery.

Same setup as the Jade Plus: QR with BlueWallet, Bitcoin Keeper, or Nunchuk, or Bluetooth with the Blockstream app. The trade-off against the Jade Plus is size and screen. Compare them in Jade vs Jade Plus, or read my Jade review.

Bitkey is the one device here designed around the phone. It connects over Near-field Communication (NFC), unlocks with a fingerprint, has an OLED touchscreen, and needs iOS 15.2 or later. Every Bitkey wallet is a 2-of-3: a hardware key on the device, an app key on your phone with an encrypted cloud backup, and a server key Bitkey holds to help with recovery. Any two can approve a transaction.

That design makes recovery easy and gives you less independence than a wallet where you hold every key. Bitkey also logged several 2026 security updates, all minor in my incident tracker, including one where an attacker with an NFC radio in close physical proximity could set a PIN on a device before setup; production builds no longer allow unlock by PIN. Read my Bitkey review or Bitkey vs Jade.

Jade Core has the same 1.9-inch screen as the Jade Plus but no camera and no battery, so it cannot sign by QR and it needs power from a cable. On an iPhone, its store page lists one route: the Blockstream app for iOS via Bluetooth. That app is made by my employer. Jade Core costs $99.

The con is the link itself. Jade's 2025 descriptor overflow was reachable over Bluetooth or USB but never over QR, fixed in 1.0.37, and Jade Core has no QR mode to fall back on. If you want air-gapped signing, the original Jade costs less. Read my Jade Core review.

Passport Prime pairs with Foundation's Envoy app over QuantumLink, Foundation's Bluetooth protocol, which uses CRYSTALS-Kyber for its key exchange. Envoy runs on Android or iOS. Foundation says "QuantumLink is required for initial setup and for syncing with Envoy", and after setup the device can sign through QR codes or files, with Bluetooth toggled off from its control center.

If you'd rather skip Envoy after setup, Foundation's connect guide lists BlueWallet, Bitcoin Keeper, Sparrow, and a dozen others that sign by QR code. At $349 it is the most expensive pick here.

The con: Foundation had a rough 2026. My incident tracker logs five major entries this year, including a Magic Backup server flaw and multisig change checks fixed in KeyOS 1.4.0. Read my Passport Prime review or Passport Prime vs Jade Plus.

BitBox's support hub says "iPhone and iPad require a BitBox02 Nova", on iOS 16 or later. It connects over Bluetooth to the BitBoxApp. Bluetooth is enabled by default to allow use with iOS devices, and you can only switch it off from the desktop BitBoxApp over USB, which also ends iPhone use until you switch it back on.

I don't have a Nova review on the site yet, so this one links to BitBox's own documentation. If you already own the original model, my BitBox02 review covers it, but it won't sign from an iPhone.

Trezor lists the Safe 7 as having "Full compatibility on iOS and Android" through Trezor Suite over encrypted Bluetooth. The Bitcoin-only edition sells for $249, and on Bitcoin-only firmware "all other networks will be deactivated" in Suite. The regular Safe 7 is multi-coin, so buy the Bitcoin-only edition by name.

Two cons. In June a researcher showed a host could complete Safe 7 pairing without the code shown on the device; Trezor now rejects the bad values. And Ledger Donjon broke the TROPIC01 chip with a lab laser attack that needs the device in hand, which Trezor says "cannot be applied remotely with a firmware update" to fix, though it says your PIN, funds, and backup stay protected. The site has no review of the Bitcoin-only edition yet.

Bitkey is the only Bitcoin-only NFC hardware wallet I can tell you to buy today. Portal also signs over NFC, but its store was down when I checked. Passport Prime has NFC too, though Foundation uses it for "encrypted NFC backup cards" called Keycards, not for signing.

Most of the other NFC wallets you'll find are multi-coin cards. Tangem says it can "Store 14100+ tokens across 90 blockchains". Bitcoin-only, dummy. Tangem cards also have a hardware problem: Ledger Donjon used a laser to set a card's access password to an attacker-controlled value, and the flaw "cannot be patched, as the cards have no firmware update mechanism." See Portal vs Tangem for the head-to-head.

Whatever you tap, check the address on the wallet's own screen. A wallet without a screen leaves the phone as the only place to read the address, and the phone is the device you are trying not to trust. Bitkey has an OLED touchscreen, so you can.

Is NFC an air gap? No. It is a short-range radio, safer than a radio that stays on all day, but still a live link while you tap. Bitkey's own security update described an attacker who needed an NFC radio "in close physical proximity" to the device. Keep the wallet in your hand and away from strangers' phones during setup.

In April 2026 a fake Ledger Live app on Apple's App Store drained about $9.5 million from 50 users by asking them to type in their seed phrase. It was a macOS app, and Ledger's real Mac app isn't on the App Store at all. Apple removed it only after the losses. It sits in my 2026 hardware wallet incidents list.

These work with an iPhone, and I still would not keep bitcoin on them. More coins means more code, and more code means more bugs near your keys.