BitBox02 Review

The BitBox02 scores 7.4 out of 10 in our hardware wallet ratings, rescored from current evidence on 1 November 2026. The basis is desk research: Shift Crypto's firmware repository, release notes and build documentation on GitHub, plus its shop listing as last checked on 24 July 2026. We did not test a device. The score is carried by inspectable, reproducible firmware with published circuit-board files. It is held back by a secure chip with no published certification level and by signing that always needs a cable.

How the BitBox02 scores in hardware wallets

Five criteria apply in this category. Each is marked 0 to 10 and carries equal weight, as set out in our ratings methodology. This review covers the original BitBox02 in its Multi and Bitcoin-only editions. The Nova is a separate device and is not scored here.

The overall score is a plain average: (8 + 7 + 10 + 5 + 7) / 5 = 37 / 5 = 7.4.

Change from the previous scoring: open source rose from 9 to 10. The firmware README now links PCB schematics, a bill of materials and an x-ray image for board revision 2.1. Each release, such as v9.27.1 of 31 August 2026, also links reproduction instructions and community signatures. That meets the standard the category applies to Coldcard, Keystone and Blockstream. The other four marks are unchanged, and the overall score moves from 7.2 to 7.4.

Strongest criterion: what can be inspected

Open source (10)

Three things are needed for a 10 here: published firmware, builds that can be reproduced, and published hardware design files. The BitBox02 has all three. The bitbox02-firmware repository holds the bootloader and firmware under the Apache-2.0 licence. The build guide pins the compiler toolchain and warns that other compiler versions will not reproduce the official binary. Each release lists four hashes, one for each device and edition: BitBox02 Multi, BitBox02 Bitcoin-only, Nova Multi and Nova Bitcoin-only. The BitBox02 shows that hash at startup, so a user can match the running firmware against a build anyone can make.

This matters because a hardware wallet asks you to trust code you cannot see running. Reproducible builds turn that trust into something a third party can check.

Price & value (8)

At EUR 124.17 the BitBox02 sat in the lower half of the category's price range when last checked. Beyond the recovery words, the firmware can also back the seed up to a microSD card. The mark stays at 8 rather than 9 because the shop price could not be rechecked this round (see below).

Weakest criteria: deficiency versus not measured

Air-gap & verification (5): a deficiency

Signing needs a live USB-C connection to the BitBoxApp. The firmware documents no QR-code or microSD-only signing route, so a fully air-gapped workflow is not possible. Verification still happens on the device: the screen shows the address, amount and network fee for confirmation, and since v9.27.0 it shows long amounts in full rather than truncated. The same 5 applies to Ledger, which also signs only over a live connection.

Secure element (7): partly not measured

The README names the parts: a Microchip ATSAMD51J20A microcontroller runs the firmware and talks over I2C to a Microchip ATECC608B secure element. Shift Crypto does not state a Common Criteria assurance level for the ATECC608B on the sources we could open. Devices that name both chip and certification, such as Ledger's ST33K1M5 and Trezor's OPTIGA Trust M, both at EAL6+, score 9. This is a gap in what is published, not evidence of a weakness in the chip.

Asset coverage (7)

The Multi edition supports a defined set of networks rather than thousands of tokens. The firmware changelog records Ethereum with ERC-20 tokens and EVM networks, Cardano (including token sends and vote delegation) and Litecoin. That is wider than the Bitcoin-only devices at 4 and narrower than Keystone, Ledger and Trezor at 9 or 10. The edition is fixed by the firmware build, so a Bitcoin-only unit cannot be switched to Multi later.

What the score does not cover

• The current price. bitbox.swiss and its shop refused automated access (HTTP 403) on 1 November 2026. The price mark rests on the 24 July 2026 check and will be revisited when the shop can be opened.
• The BitBoxApp's Lightning wallet. The app's September 2026 release added a beta Lightning wallet on mobile. Its keys are held by the phone app, not the device, so it does not have the hardware's protection, and it is not scored.
• Update cadence and bug fixes. The changelog lists security fixes, including "security improvements" in v9.26.3 and v9.26.5. No criterion scores patch history, and none of these was a disclosed loss of funds.
• Durability, support and shipping. We did not handle the device.

For how the chip, the firmware and the backup each protect a seed, see our guide to what protects your keys in a hardware wallet.

BitBox02 vs the closest rated peers

The BitBox02 and the Coldcard Mk5 tie at 7.4 and are listed alphabetically. They get there in opposite ways. The Mk5 scores higher for its two-vendor chip design and microSD signing, and lower for price and its Bitcoin-only scope. The Trezor Safe 5 has the same connected signing model and the same open-source mark. It finishes a point ahead because its chip is named with an EAL6+ certificate and its asset list is wider.

Who it suits

On the scored evidence, the BitBox02 fits someone who wants firmware they or others can rebuild and check, at a mid-range price. It also fits Bitcoin plus Ethereum, EVM or Cardano holders, who can use the Multi edition, and people happy to sign over USB-C. It is not the device for anyone who needs to sign without ever connecting the wallet, or who wants a published chip certification.