Blockstream Jade Plus Review

The Blockstream Jade Plus scores 7.0 out of 10 in our hardware wallet ratings, rechecked against current evidence on 1 November 2026. The basis is desk research: Blockstream's Jade product page, its help center and blog, and the Blockstream/Jade repository on GitHub. We did not test a device. Jade Plus earns full marks for open source and for air-gapped signing. It loses most ground on asset coverage, because it handles only Bitcoin and Liquid, and on the secure element criterion, because it deliberately has no secure element chip.

How Jade Plus scores in hardware wallets

Five criteria apply in this category. Each is marked 0 to 10 and carries equal weight, as described in our ratings methodology. The entry scores Jade Plus, not the cheaper Jade Core, which lacks the camera, the battery and the air-gapped functions.

The overall score is a plain average: (6 + 5 + 10 + 10 + 4) / 5 = 35 / 5 = 7.0.

No marks changed in this rescoring. The price, the design and the asset list were the same on 1 November as at the July check. Blockstream's 12 August 2026 post on the virtual secure element explains the design in more detail. It does not change what the device contains.

Strongest criteria: open code and no-cable signing

Open source (10)

Jade meets each part of the category's top standard. The firmware is public, the repository includes hardware schematics and a bill of materials for the device boards, and a REPRODUCIBLE.md guide explains how to rebuild an official firmware image and compare it with the release, minus Blockstream's signature block. The blind oracle server code is open too. Because no secure element is used, no part of the key-protection path runs on closed chip firmware under a non-disclosure agreement. That is the trade Blockstream says it was making.

Air-gap & verification (10)

Jade Plus can sign without any data cable. The camera reads an unsigned transaction as a QR code from the wallet app, the user confirms it on the device screen, and the signed result goes back as a QR code. SD card and USB drive signing are also supported, and firmware can be updated through an air-gapped route. Blockstream's help center documents QR use with third-party coordinators such as Nunchuk, and USB and QR guides for Sparrow. Blockstream also noted that QR-only users were not exposed to the December 2025 host-side crash bug, which was fixed in firmware 1.0.37.

Weakest criteria: deficiency versus design choice

Asset coverage (4): a design choice that scores low by definition

Jade handles bitcoin and assets issued on Liquid, Blockstream's Bitcoin sidechain, and nothing on other chains. The product page's comparison table ticks "Bitcoin-only" while the same page describes a wallet for Bitcoin and Liquid. We score the narrower reading consistently with the Bitcoin-only Coldcards, which also get 4. As the methodology states, that is a deliberate scope decision, not a fault.

Secure element (5): a different guarantee, not a missing fact

The seed is encrypted with a key that needs three secrets: the PIN, a secret on the device, and a secret held by a blind oracle that never learns the PIN. The PIN attempt counter lives on the oracle, so tampering with the hardware cannot reset it. The oracle can deny access but cannot spend funds, and users can run their own. The costs are stated by Blockstream itself. Unlocking needs the oracle to be reachable, and its August 2026 post says the ESP32 microcontroller "isn't hardened silicon". It does not claim resistance to laboratory attacks such as fault injection.

The mark sits between the certified single chips at 9 and a device with no protection at all. The methodology describes this design rather than penalising it, but it is a materially different assurance from a chip certified to a published level.

Price & value (6)

$169.99 puts Jade Plus in the $160 to $200 band, where the category gives 6, or 7 when a backup accessory ships in the box. Blockstream's page does not list box contents. Jade Core at $99 runs the same firmware, but it cannot sign air-gapped and is not the scored model.

What the score does not cover

• Security history. No criterion scores incidents. On record: the host-side crash bug in firmware 1.0.24 to 1.0.36, disclosed on 16 December 2025, with no confirmed loss of funds reported. There was also an important security update, 1.0.41, on 22 August 2026. Blockstream said in July 2026 that Jade was not affected by the Coldcard seed-generation flaw.
• Oracle availability. How often Blockstream's oracle is reachable is not measured.
• Build quality, battery life and support. We did not handle the device.

The trade-offs between secure elements, open microcontrollers and backups are covered in our guide to what protects your keys in a hardware wallet.

Jade Plus vs the closest rated peers

The Coldcard Q matches Jade Plus on open source, air-gap and scope. It costs more but uses two secure elements from different vendors, which puts it 0.6 ahead. Jade Plus and the Ledger Nano Gen5 tie at 7.0 and are listed alphabetically. They are near opposites: Ledger is stronger on the chip and assets, while Jade is stronger on inspectable code and cable-free signing.

Who it suits

On the scored evidence, Jade Plus fits Bitcoin and Liquid users who want to sign over QR codes, and who value fully inspectable code over a closed, certified chip. It also suits people prepared to depend on, or self-host, the oracle that unlocks the device. It does not fit anyone holding assets on other blockchains, or anyone whose main worry is a thief with laboratory equipment.