BitBox02 Review: Honest Take From a Skeptical Retail Buyer

If you have landed on this BitBox02 review expecting a glowing affiliate-driven recommendation, you are in the wrong place. We test hardware wallets the way a person who has already lost money in crypto would test them: assume the vendor is wrong until proven right, assume the supply chain is compromised until proven clean, and assume the marketing copy is lying until the firmware says otherwise.

The BitBox02 is made by Shift Crypto, a Zurich-based company founded in 2015. It comes in two editions: a Bitcoin-only edition and a Multi edition that also handles Ethereum, ERC-20 tokens, Litecoin and Cardano. We spent two weeks with the Multi edition for this writeup.

What the BitBox02 actually is

It is a small USB-C device, roughly the size of a USB stick, with an OLED screen and capacitive touch sliders on either side. There are no clicky buttons. You confirm transactions by sliding your fingers, and you can rotate the device by 180 degrees if you prefer to use the other hand.

Internally, it uses a dual-chip architecture: a general-purpose microcontroller paired with a Microchip ATECC608A secure element. The firmware is open source (github.com/digitalbitbox/bitbox02-firmware) and reproducible builds are documented. Cure53 audited the firmware in 2019 and again in 2024, and both reports are published on the Shift Crypto site.

That last point is the most important sentence in this review. If a hardware wallet vendor will not show you the audit, it does not have one.

Setup, in practice

You install the BitBoxApp (desktop or Android), plug the device in, and it walks you through generating a 24-word seed. The seed is generated on-device, mixed with host entropy, which is the standard approach. You then back up the wallet to the bundled microSD card — and this is where the BitBox02 differs from most competitors.

Instead of writing 24 words on a piece of paper as the only backup, the BitBox02 stores an encrypted backup of the seed on the microSD. You still get the 24 words if you want them (you can display them on-device), but the microSD is the recommended primary backup. If you lose the device, you buy a new one, insert the microSD, type your password, and you are back.

This is convenient. It is also a tradeoff. A microSD card sitting in a drawer is a different threat model from steel-stamped seed words in a safe. We covered the broader question of how to back up a seed in our seed phrase storage guide, and the same logic applies here: any single point of failure is a problem, regardless of whether it is paper, metal, or flash memory.

Security model — what we trust, what we don’t

The good:

• Firmware is open source and reproducibly built.
• The secure element holds key material and is configured so the microcontroller cannot extract it.
• Transactions are displayed on the device screen before signing. You see the address and amount, not the host’s claim about the address and amount.
• Anti-klepto (a protocol that proves the device is not leaking your private key through nonce manipulation) is implemented for Bitcoin and Ethereum signatures.

The not-so-good:

• The ATECC608A is a commodity secure chip. It is not Common Criteria EAL5+ certified the way the chips in some Ledger devices are. Shift Crypto’s argument is that they don’t need EAL5+ because the open-source firmware lets you verify what’s actually running. That is a reasonable argument. It is not the same argument as “more secure.”
• The capacitive sliders. After two weeks I still occasionally mis-slide. For a confirmation device this matters less than for typing, but it is annoying.
• No air-gapped option. The device must be plugged into a computer to sign. Compare with something like a Keystone, which we cover in our air-gapped wallet comparison.

Quantum resistance

The BitBox02 uses ECDSA for Bitcoin and Ed25519 for some other chains. Neither is quantum-resistant. If a cryptographically relevant quantum computer arrives in the next decade, every Bitcoin address that has ever broadcast a transaction is exposed, regardless of which hardware wallet generated the signature. This is not a BitBox02 problem; it is a Bitcoin problem and an industry problem. We wrote about the realistic timelines and what wallets are doing about it in our quantum resistance breakdown.

If quantum risk is your top concern today, no current consumer hardware wallet — BitBox02, Ledger, Trezor, Coldcard — solves it. Anyone telling you otherwise is selling something.

Where the BitBox02 falls short

Asset coverage is the obvious one. If you hold Solana, Sui, Aptos, Cosmos ecosystem tokens, or anything outside the Bitcoin / Ethereum / Litecoin / Cardano set, the BitBox02 is going to disappoint. The BitBoxApp won’t show those balances and third-party integration is narrower than Ledger Live or Trezor Suite.

For users who chase presale tokens on multiple chains — and we do cover those projects, with appropriate skepticism, in our presale risk methodology — the BitBox02 Multi is workable for ETH and ERC-20s but will leave gaps elsewhere.

The other shortfall is ecosystem size. Shift Crypto is a small Swiss company. They are not going anywhere soon (they have been around for over a decade), but if they did, third-party recovery tooling for the encrypted microSD backup is limited. You can still recover from the 24 words using any BIP-39 wallet, so you are not locked in — but the smooth microSD recovery experience depends on Shift Crypto being around.

Price and where to buy

At time of writing the Multi edition retails for around 149 CHF / USD direct from shiftcrypto.ch, and the Bitcoin-only edition is similar. Buy direct from the manufacturer. Do not buy from Amazon, do not buy from eBay, do not buy from a “discount reseller.” Supply chain attacks on hardware wallets are real and documented, and saving twenty dollars is not worth the risk. We covered some of these patterns in our hardware wallet supply chain guide.

Honest summary

The BitBox02 is a credible, transparent, audited hardware wallet from a small Swiss company that has done the open-source homework most of its competitors only partially do. It is not the most feature-rich device on the market, the touch sliders are average, and the asset coverage is narrower than the big two. But for a Bitcoin-and-Ethereum-focused user who values reproducible firmware and a tidy backup workflow over chain breadth, it is a defensible choice — provided you buy it direct, treat the microSD as one of two backups rather than the only one, and accept that no hardware wallet on the market today will save you from a quantum future or from your own mistakes.