BitBox: keys, security, fees and reviews

In short

Key control: Non-custodial: private keys are stored on the device and never transmitted; Shift Crypto provides no custodial services.
Fees: Device price: BitBox02 Nova $195.00, BitBox02 $166.00 in the official shop (archived shop page of 15 October 2026).
Risks and caveats: The user alone is responsible for the device password and backup; losing both the device and the backup means losing access.
Checked: 31 October 2026

Visitor ratings: do you like BitBox?

Key facts

Official site: bitbox.swiss

Key facts checked on 31 October 2026 against official sources.

What is BitBox

BitBox is a line of Swiss hardware wallets made by Shift Crypto AG: the BitBox02 (2019) and the BitBox02 Nova, each in a Multi and a Bitcoin-only edition. The devices keep private keys offline and work with the open-source BitBoxApp on desktop and mobile. The line started in 2015 with the Digital BitBox.

Who holds the keys

Who holds the keys — BitBox
Parameter	Details
Key control	Non-custodial: private keys are stored on the device and never transmitted; Shift Crypto provides no custodial services.
Recovery	Backup on the included microSD card; the 12 or 24 recovery words can also be written down and are compatible with other wallets.
Seed phrase	The wallet seed is stored encrypted on the microcontroller; access needs secrets on the secure chip, the microcontroller and the device password.

Features and supported networks

Features and supported networks — BitBox
Parameter	Details
Platforms	BitBoxApp for Windows, macOS, Linux, Android and iOS; the BitBox02 Nova adds iPhone and iPad support over Bluetooth.
Supported networks	Multi edition: over 1,500 coins and tokens (Bitcoin, Litecoin, Ethereum and EVM networks, Cardano via partner wallets); Bitcoin-only edition for bitcoin only.
Secure element	Dual-chip design: microcontroller plus a secure chip, Microchip ATECC608B (BitBox02) or Infineon Optiga Trust M V3 (BitBox02 Nova).
Connectivity	USB on both models; the BitBox02 Nova also has Bluetooth for iPhone and iPad, which can be permanently disabled.
Display	OLED screen with touch confirmation; tempered glass OLED on the BitBox02 Nova.
Swaps	Swaps of supported coins and a Lightning wallet inside the BitBoxApp.
Multisig	Multisig account registration with xpub verification; anti-klepto protection against nonce covert-channel attacks.

Security and audits

The BitBox02 firmware is open source under the Apache-2.0 licence (GitHub BitBoxSwiss/bitbox02-firmware) and builds are reproducible; the BitBoxApp is also open source.
The secure chip in the BitBox02 Nova (Infineon OPTIGA Trust M) is listed by Infineon as based on CC EAL 6+ (high) certified hardware; BitBox describes the Nova chip as EAL6+ certified. No certification is claimed for the BitBox02's ATECC608B.
BitBox states the BitBox02 firmware was audited by Census Labs; the audit report was not reviewed here. A bug bounty programme with a public hall of thanks is run.
On 10 September 2026 attackers used a flaw at newsletter provider Brevo to download BitBox's newsletter email list and send phishing emails; BitBox states its own systems, app and devices were not compromised.

Security incidents

Security incidents — BitBox
Date	What happened	Source
10 September 2026	Data breach: Attackers used a flaw at newsletter provider Brevo to access BitBox's account, download the newsletter contact list (email addresses only) and send two phishing campaigns asking for recovery words; BitBox states its own systems, app and devices were not compromised.	blog.bitbox.swiss

Fees

Fees — BitBox
Parameter	Details
Device price	BitBox02 Nova $195.00, BitBox02 $166.00 in the official shop (archived shop page of 15 October 2026).

History

History — BitBox
Date	Event
2015	Douglas Bakkum and Jonas Schnelli start the BitBox line with the Digital BitBox (BitBox01).
2019	BitBox02 released.
10 September 2026	Newsletter email list exposed through a flaw at provider Brevo; phishing emails sent to subscribers.

Risks and caveats

The user alone is responsible for the device password and backup; losing both the device and the backup means losing access.
Phishing: BitBox never asks for recovery words; in 2026 fake emails sent through its newsletter provider asked users for them.

About the developer

Legal entity: Shift Crypto AG (trade name BitBox), registration number CH-498.818.196, Canton of Zurich.
Headquarters: Soodmattenstr. 4, 8134 Adliswil, Switzerland (postal address); privately held company based in Zurich.
Founders: Douglas Bakkum (Member of the Board, CEO) and Jonas Schnelli started the BitBox line.
Licence / registration: Not a financial or custodial service provider.

Official links

Website: bitbox.swiss
Security: bitbox.swiss/bitbox02/security-features
Source code: github.com/BitBoxSwiss
Support: support.bitbox.swiss
Blog: blog.bitbox.swiss/en

Questions and answers

Is BitBox self-custodial?

Yes. Keys stay on the device and are never transmitted; Shift Crypto AG offers no custodial services.

Is BitBox open source?

Yes. The BitBox02 firmware (Apache-2.0) and the BitBoxApp are open source, and firmware builds are reproducible.

Which coins does BitBox support?

The Multi edition supports over 1,500 coins and tokens including Bitcoin, Ethereum and EVM networks; the Bitcoin-only edition supports only bitcoin.

Does BitBox have a secure element?

Yes, a secure chip next to the microcontroller: ATECC608B in the BitBox02 and Infineon OPTIGA Trust M in the BitBox02 Nova, which Infineon lists as based on CC EAL 6+ certified hardware.

Who makes BitBox?

Shift Crypto AG, a privately held Swiss company based in the Zurich area; the BitBox line started in 2015.

Sources

How voting works

Votes are anonymous and carry no text. Each device has one vote per item; press the same button again to remove it. Cloudflare Turnstile checks that a person is voting. We keep a random device ID in a cookie and a salted hash of the IP address to limit abuse — no names, no accounts. Votes are visitors’ opinions, not investment advice.

Page updated: 2026-10-31