Ellipal
Best for documentation-led evaluation
How it rates
- Tracked and verifiable from public sources at this check
- No public firmware repository identified at this check
- No dedicated security or audit disclosure identified at this check
- Terms page not found at the conventional address at this check
Each indicator scores 2, 1 or 0. A pillar is the points earned over the points available; the overall score is the weighted sum. Every source below is public — check any of them yourself.
- Not metFirmware source published in a public repository
No public firmware repository identified at this check.
- Not metDevice security or specification page published
No dedicated security or specification page identified at this check.
- Not metIndependent security research or audit programme published
No published security research or audit programme identified at this check.
- Not metTechnical documentation reachable without an account
No open technical documentation identified at this check.
- Not metVendor organisation identifiable from the repository
Not established at this check.
- Met
- Not metModel-specific product page public
Not identified at this check.
- Not metLegal or terms page public
Not found at the conventional address at this check.
- Met
- MetPurchase information viewable without an account
No account required to reach the shop at this check.
www.ellipal.com/
- Not metPublic repository organisation
No public repository organisation identified.
- Not metFirmware repository is the vendor's own
Not established at this check.
- Not metModel documentation published
Not identified at this check.
- Not metDocumentation site separate from marketing
Not identified at this check.
- Not metSecurity posture stated publicly
Not identified at this check.
- Met
- Met
- Not metSecurity or disclosure page published
Not identified at this check.
- Not metTerms or legal documentation published
Not found at the conventional address at this check.
- Met
- Met
- Not metDocumentation or support reachable
Not identified at this check.
- Not metPublic code repository reachable
Not identified at this check.
- Met
- Not metLegal documentation reachable
Not found at the conventional address at this check.
A fully air-gapped metal wallet with a large touchscreen and tamper response, running proprietary firmware that cannot be independently audited.
Our assessment
Ellipal Titan 2.0 is a fully air-gapped metal wallet: QR-code signing only, no USB, Bluetooth, Wi-Fi or NFC, an EAL5+ secure element, a 4-inch touchscreen and an anti-tamper mechanism that wipes the device if the case is opened. It also scores lowest in this comparison, and the reason is worth stating precisely.
What the score measures
Seventeen of our twenty-five indicators returned nothing. No public firmware repository, no reachable security or specification page, no model documentation, no separate documentation site, no legal terms — the pages either did not exist at conventional addresses or blocked retrieval. Our rubric scores what a prospective buyer can verify before paying, and the answer here was almost nothing.
Closed firmware is the structural issue
Unlike Trezor or Blockstream Jade, the Titan's firmware is proprietary and cannot be independently audited. For a device whose entire proposition is that it never touches a network, an outsider has no way to confirm what the firmware does when nobody is watching. That is a design choice with a real cost, and it is the one this score is pointing at.
The hardware is not the complaint
Air-gapping, the tamper-response mechanism and the metal casing are genuine engineering, and at around $135 the large screen is competitive. Reviewers consistently note the workflow is slow — two devices, cameras lined up, scan out, scan back — and that the mobile app is the only companion, with no desktop option.
Who it suits
Ellipal fits buyers who value air-gapped hardware and a large touchscreen and are willing to take the firmware on trust. Anyone who wants to verify what they are buying should choose Trezor, BitBox, Foundation Passport, Coldcard or Blockstream Jade.
How rivals compare
| Service | Score | Best for | |
|---|---|---|---|
| Trezor | 9.9 | verifiable firmware openness | Read → |
Frequently asked
Does this score mean Ellipal is secure?
No. It measures what a buyer can verify before purchase: published firmware source, documented security claims, and open documentation. Physical security is not tested by us and is not scored.
Why does firmware openness matter so much here?
It is the one substantive security property an outsider can check without specialist equipment. Everything else on a hardware wallet requires trusting the vendor or a third-party teardown.
What would raise this score?
Publishing firmware source, a dedicated security or audit page, and open technical documentation at stable public addresses — all of which are checkable by anyone.