Best Bitcoin hardware wallets with a secure element

Ranked by my current ratings (each review has the score). Only Bitcoin-only devices, or Bitcoin-only firmware editions, are ranked. Prices are the vendor's list price as of November 2026.

Bitkey says the hardware key is generated and stored offline in a secure enclave and unlocked with your fingerprint. Its hardware post says critical keys sit in a secure vault that uses a physical unclonable function (PUF) unique to each device, and that the keys are encrypted while the device is off. Bitkey does not publish the chip model.

The device is one key in a 2-of-3 multisig: your hardware key, a key in the Bitkey app, and a server key Block runs in an AWS Nitro Enclave. No single key can move funds. That design protects you more than the chip does, and it also means Block holds one of your three keys.

Best for: someone who wants a phone-first setup with recovery help and accepts a company key. See Bitkey vs Jade Plus.

The Specter DIY board itself has no secure element. Add a Specter Shield or Shield-Lite with a JavaCard, and its security model calls smartcard storage recommended: the secret sits on a PIN-protected card, moves to the main chip's RAM only when unlocked, and never touches the main chip's flash. The card enforces its own PIN limit in hardware and bricks itself when the attempts run out, and the anti-phishing words come from both the device and the card, so you can tell if either was swapped.

What it costs you: assembly. Specter's site lists the Shield as an open-source extension board available from vendors, and the main discovery board is bought separately. Its other recommended mode, temporary seed mode, stores no key at all.

Best for: builders who want a secure element without trusting a hardware company's closed integration. See SeedSigner vs Specter DIY.

Foundation's developer docs say Passport Prime is built around a Microchip SAMA5D27 processor and a Microchip ATECC608C secure element. It erases the master key after 10 consecutive wrong PIN attempts, and Security Words warn you if someone swapped the device. The code and the hardware designs are open.

What to watch: in July 2026 Foundation fixed a Passport Prime security check where a device error could be reported as a successful verification, in the Envoy app. A secure element can only vouch for a device if the software reading it reports the answer honestly. Keep Envoy and KeyOS updated.

Best for: one-device self-custody with a chip, a camera, and a big touchscreen. See Passport Prime vs Jade Plus.

BitBox02's firmware README names the ATECC608B secure element, connected to a Microchip ATSAMD51 main chip. The firmware also reports ATECC608A or Infineon Optiga Trust M V3 on other units, and it uses the secure chip in the password-stretching step that unlocks the device. After 10 failed unlock attempts it resets.

What it cannot do: sign over QR or SD card. It is USB only. Buy the Bitcoin-only edition; current firmware is v9.27.1.

Best for: a desk-bound USB signer, or the third key in a multisig. See BitBox02 vs Jade Plus.

Keystone's Bitcoin-only page lists 3 secure elements, with seed phrases and fingerprint data stored separately, plus a self-destruct that destroys the keys if someone tampers with the case. It signs over QR codes. The device ships with multi-coin firmware, and Keystone says to update it after you receive it.

The secure elements could not stop the October 2026 breach. An attacker took the key Keystone uses to prove a device is genuine, and Keystone paused shipments and is destroying 18,835 unsold devices. The store lists the 3 Pro as a pre-order. I would wait until Keystone ships devices with a new key.

Trezor documents its chips in detail. The Safe 3 and Safe 5 use an Optiga Trust M V3, and the Safe 7 pairs it with TROPIC01. The secure element holds a secret that, with your PIN, encrypts the keys on the main chip, and it erases that secret after 16 wrong PINs on the Safe 3 and 5, or 10 on the Safe 7.

In 2026 Ledger Donjon extracted some of the secrets TROPIC01 protects using laser fault injection. Trezor's June response says the keys and the wallet backup are not stored on TROPIC01, and the attack needs disassembly, decapsulation, and lab equipment. The Bitcoin-only editions run firmware that supports only BTC accounts.

Best for: a cheap secure-element device from a company that publishes its chip choices. See Trezor Safe 3 vs Safe 5.

OneKey says the Bitcoin Edition is built with an EAL 6+ secure element and ships with Bitcoin-only firmware, with a switch to multi-coin firmware available anytime. It does not name the chip.

Researchers presenting at hardwear.io say a misconfigured random number generator in the secure element left all OneKey wallets on the market with the same pairing key protecting the seed, and call the flaws unfixable. Their abstract describes a wallet built on an STM32F405 and an ATECC608 and does not list models. A secure element is only as good as its setup, and I would buy something higher on this list first.

A secure element is a chip built to keep secrets in and resist physical attacks: probing, glitching, and reading memory off a stolen device. In practice it guards against one scenario: someone has your hardware wallet and wants the seed out of it. Trezor's design shows the usual job: the chip releases its secret only after the right PIN, and wipes it after too many wrong tries.

It does not protect you from:

My highest-rated wallets have no secure element. They protect the seed in other ways, and for most people the threat they defend against matters more than lab attacks on a stolen device.

SeedSigner stores nothing. Its README says it keeps seeds in memory only while powered, and wipes all memory when power is removed. There is no chip to attack because there is no secret on the device. You load the seed each session from a SeedQR or by typing the words.

Krux says it plainly: Krux does not include hardware secure elements, and the security of stored data relies on encryption. It stores nothing unless you choose to save an encrypted mnemonic, and its docs call that convenience, not a backup.

The Jade family has no secure element chip. Blockstream calls its design a "virtual secure element"; underneath it is a blind oracle. Jade encrypts the seed so that three secrets are needed to decrypt it: your PIN, a Jade secret, and an oracle secret. The oracle is a server Blockstream runs, reached through the companion app; Blockstream says it never learns your PIN or wallet data, and Jade and the oracle delete their keys after three wrong PINs. Blockstream's stated reason is that skipping the chip keeps Jade fully open source.

The trade-off is the server. A normal PIN unlock needs the oracle. You can run your own oracle, or skip it and unlock a camera Jade from a SeedQR, which turns it into a stateless signer like SeedSigner. Jade Core has no camera, so the SeedQR route is out.

A secure element asks you to trust code you usually cannot read. Trezor sells TROPIC01 as fully auditable, and in 2026 it was also the chip Donjon partly broke, which is what auditing is supposed to surface. Trezor calls the Optiga Trust M NDA-free; Ledger's Donjon team still describes the same chip's embedded software as fully closed source. Bitkey, Keystone, and OneKey do not name their chips at all.

Competitors quote EAL ratings like security scores. An Evaluation Assurance Level grades how rigorously a product was evaluated under Common Criteria, and does not measure the security of the system itself. EAL6 means a semi-formally verified design that was tested, and the "+" means extra requirements on top. It tells you a lab looked hard at the chip, and nothing about the wallet code around it.

If open code is your priority, see my open-source hardware wallet picks.

Much less. In a 2-of-3 multisig, a thief who extracts the seed from one stolen device still cannot spend. That is why a stateless SeedSigner or a Jade sits comfortably next to a BitBox02 or Passport Prime in the same wallet: no single device has to be perfect, and mixing designs means one flaw cannot reach every key. My multisig hardware wallet picks cover which devices pair well.

Competitor lists rank these first for "secure element." The chips are real, but the firmware carries code for other coins, so I do not recommend them.

For one device with a secure element and QR signing, buy the Passport Prime. Signing at a desk over USB? The BitBox02 Bitcoin-only costs less. Bitkey is the simplest route for anyone who wants recovery help and accepts a company key, and builders can add a smartcard to Specter DIY.

If the chip was never the point and you want the best Bitcoin-only wallet, look at the stateless and blind-oracle designs: SeedSigner, Jade Plus, and Krux. Unsure which threat matters to you? Build your stack walks through it.