CryptoReview
Submit listing

Best Air-Gapped Hardware Wallets

Air-gapped hardware wallets isolate private cryptographic keys from internet-connected devices by eliminating continuous wireless connections like Wi-Fi or Bluetooth. Instead, transaction approval relies on optical transfers using QR codes or physical media such as microSD cards. This keeps keys offline.

Hardware choices diverge significantly across security certifications, firmware accessibility, and blockchain support. Models on this list range from $49.99 budget devices to specialized units priced near $400. While some designs run open-source firmware with verifiable builds, others use proprietary code or dedicate their hardware exclusively to the Bitcoin network.

Updated Oct 20, 2026 6 picks All hardware wallets
  1. 1
    Touchscreen multichain storage

    ELLIPAL

     4.1/5

    ELLIPAL Titan 2.0 signs transactions through optical QR code scanning, pairing an offline four-inch display with a companion app for iOS and Android. A CC EAL5+ secure element guards private keys inside a sealed metal shell that detects physical breach attempts. The unit supports over 10,000 digital assets. The primary trade-off is proprietary closed-source firmware, preventing outside review of device code.

    QR code (air-gapped) · microSDSecure elementClosed sourceAir-gapped signing
    • QR-only signing keeps the wallet physically separate from phones
    • CC EAL5+ secure element protects Titan 2.0 key storage
    • Intrusion detection wipes stored data after physical opening
    Visit websiteRead review
  2. 2
    Audited open-source firmware

    OneKey

     4.1/5

    OneKey Classic 1S models feature an EAL6+ secure element and support offline onboarding. The platform supports over 100 blockchains and 30,000 coins and tokens. Firmware and client applications are open source, backed by SlowMist audits and reproducible builds. However, unauthorized hardware was reported through the former CryptoBilis reseller in July 2026.

    USB-C · BluetoothSecure elementFully open sourceAir-gapped signing
    • EAL6+ secure element on Classic 1S models
    • Firmware and apps are open source with reproducible builds
    • Supports 100+ chains and 30,000+ coins and tokens
    Visit websiteRead review
  3. 3
    Triple chip security

    Keystone

     4.0/5

    Keystone 3 Pro uses three secure elements, QR transaction transmission, and a four-inch touchscreen with fingerprint recognition. Operating with open-source firmware audited by Keylabs in 2023, it connects to more than 45 external software wallets and stores over 5,500 assets. A key operational trade-off is the anti-tamper housing: detected physical intrusion can render the device unusable.

    QR code (air-gapped) · microSDSecure elementFully open sourceAir-gapped signing
    • QR signing keeps private keys offline during transactions
    • Three secure-element chips support physical attack resistance
    • 4-inch touchscreen shows transaction details clearly
    Visit websiteRead review
  4. 4
    Low-cost air-gapped storage

    SafePal

     3.9/5

    SafePal S1 delivers offline QR code transaction signing at an entry price of $49.99. It houses an EAL 6+ secure element alongside an onboard camera, supporting more than 200 distinct blockchains. A companion app coordinates signing data without direct wired links. Its primary trade-off is firmware transparency, as the S1 uses partially closed-source code rather than fully open software.

    Bluetooth · QR code (air-gapped)Secure elementPartially open sourceAir-gapped signing
    • S1 price is $49.99
    • S1 supports 200+ blockchains
    • S1 uses QR-based air-gapped signing
    Visit websiteRead review
  5. 5
    Bitcoin-only open source

    Foundation Passport

     3.7/5

    Foundation Passport provides air-gapped Bitcoin signing via QR codes, running open-source code under CERN-OHL-S v2 and GPLv3 licenses. Backed by security audits from Keylabs in 2021 and 2025, Passport Prime runs the KeyOS microkernel for sandboxed cryptographic apps. The distinct limitation is its network restriction: the hardware only supports Bitcoin, excluding all other blockchain ecosystems.

    QR code (air-gapped)Fully open sourceAir-gapped signingBitcoin-only
    • Air-gapped QR signing keeps transaction approval separate from connected devices
    • Firmware is open source under GPLv3
    • Keylabs audited Passport Core in 2021 and Passport Prime in 2025
    Visit websiteRead review
  6. 6
    High assurance offline custody

    NGRAVE

     3.7/5

    NGRAVE ZERO pairs an EAL7-certified operating environment with a four-inch touchscreen and biometric authentication. The Belgian device operates without wireless chips, passing signing requests through two-way QR scanning to the LIQUID mobile app. It supports 15 major coins plus EVM tokens. The main drawback is the $398 base cost, and the LIQUID app is under maintenance as of October 18, 2026.

    QR code (air-gapped)Secure elementAir-gapped signingPrice from: $398
    • Fully air-gapped signing through QR codes
    • EAL7-certified security architecture
    • 4-inch touchscreen with biometric access
    Visit websiteRead review

How we picked

Technical specifications recorded in the directory guided how our editorial team evaluated and ranked each air-gapped hardware wallet. Devices were evaluated for isolated key generation and non-networked transaction approval.

Rankings reflect measurable factors:

  • Physical security architecture, including Common Criteria EAL ratings and hardware tamper detection.
  • Firmware transparency, prioritizing open-source codebases and public third-party security audits.
  • Supported blockchain networks, token standards, and independent software wallet integrations.
  • Hardware baseline pricing relative to onboard displays and build materials.

FAQ

What makes a hardware wallet air-gapped?

An air-gapped wallet lacks physical or wireless network interfaces such as Wi-Fi, Bluetooth, or direct USB data connections. It communicates solely through optical QR codes or external memory cards to approve raw transaction data.

How do air-gapped wallets sign transactions?

A connected software wallet creates an unsigned transaction and displays it as a QR code. The air-gapped device scans this code, verifies the parameters on its screen, signs the payload internally, and generates a return QR code for broadcast.

Are open-source hardware wallets safer than closed-source models?

Open-source firmware allows independent researchers to inspect code for vulnerabilities and verify reproducible software builds. Closed-source devices do not allow independent public review of their code.

Can air-gapped hardware wallets update their firmware?

Firmware updates on air-gapped wallets occur through removable microSD cards or local optical transfers. Some listed wallets use removable microSD cards for firmware updates.