BitBox
Best for verifiable firmware openness
How it rates
- Firmware source published in a public repository
- Device security or specification page published
- Technical documentation reachable without an account
- Terms page not found at the conventional address at this check
Each indicator scores 2, 1 or 0. A pillar is the points earned over the points available; the overall score is the weighted sum. Every source below is public — check any of them yourself.
- MetFirmware source published in a public repository
Vendor repository reachable at this check.
github.com/BitBoxSwiss - MetDevice security or specification page published
Security or specification page reachable at this check.
bitbox.swiss/bitbox02/ - MetIndependent security research or audit programme published
Security research programme published by the vendor.
bitbox.swiss/bitbox02/ - MetTechnical documentation reachable without an account
Documentation open at this check.
bitbox.swiss/bitbox02/ - MetVendor organisation identifiable from the repository
Repository published under the vendor organisation (Shift Crypto / BitBox).
github.com/BitBoxSwiss
- Met
- Met
- Not metLegal or terms page public
Not found at the conventional address at this check.
- Met
- MetPurchase information viewable without an account
No account required to reach the shop at this check.
bitbox.swiss/shop/
- Met
- Met
- Met
- MetDocumentation site separate from marketing
Dedicated documentation or support resource published.
bitbox.swiss/bitbox02/ - MetSecurity posture stated publicly
Security claims published on a reachable page.
bitbox.swiss/bitbox02/
- Met
- MetVendor entity identifiable
Vendor organisation identifiable as Shift Crypto / BitBox.
github.com/BitBoxSwiss - Met
- Not metTerms or legal documentation published
Not found at the conventional address at this check.
- Met
- Met
- Met
- Met
- Met
- Not metLegal documentation reachable
Not found at the conventional address at this check.
A Swiss-made wallet with open firmware, deterministic builds and encrypted microSD backup, available in Bitcoin-only and multi-coin editions.
Our assessment
BitBox is made by Shift Crypto in Zurich and is the quietest well-designed device in this comparison. Its firmware is open source with deterministic builds, meaning you can compile the code yourself and confirm the binary matches what the vendor shipped — a stronger claim than simply publishing source.
Reproducible builds close the gap between source and binary
Publishing source proves what the code says. Deterministic builds prove that the code is what is actually running on the device you bought. Only a handful of wallets in this category do both, and it is the single most useful openness property a hardware wallet can offer.
Backup that a beginner can actually complete
Instead of asking a first-time user to hand-copy 24 words correctly under pressure, BitBox writes an encrypted backup to a bundled microSD card. Most real-world self-custody losses are recovery failures rather than hacks, and this design attacks the failure mode that actually happens.
Bitcoin-only, made permanent
The Bitcoin-only edition ships firmware that cannot be reverted to multi-coin — the restriction is set at the factory rather than being a software preference. That removes an entire class of code from the device rather than merely disabling it, which is a meaningfully different guarantee.
Who it suits
BitBox fits buyers who want auditable Swiss-made hardware with a recovery process that is hard to get wrong, in either a Bitcoin-only or multi-coin configuration. Buyers who need a large touchscreen for reviewing complex smart-contract interactions should consider Keystone or OneKey instead.
How rivals compare
| Service | Score | Best for | |
|---|---|---|---|
| Trezor | 9.9 | verifiable firmware openness | Read → |
Frequently asked
Does this score mean BitBox is secure?
No. It measures what a buyer can verify before purchase: published firmware source, documented security claims, and open documentation. Physical security is not tested by us and is not scored.
Why does firmware openness matter so much here?
It is the one substantive security property an outsider can check without specialist equipment. Everything else on a hardware wallet requires trusting the vendor or a third-party teardown.
What would raise this score?
Publishing firmware source, a dedicated security or audit page, and open technical documentation at stable public addresses — all of which are checkable by anyone.