[Wallets](https://revain.org/wallets/) › BitBox

# BitBox: keys, security, fees and reviews

## In short

- **Key control**: Non-custodial: private keys are stored on the device and never transmitted; Shift Crypto provides no custodial services.
- **Fees**: Device price: BitBox02 Nova $195.00, BitBox02 $166.00 in the official shop (archived shop page of 15 October 2026).
- **Risks and caveats**: The user alone is responsible for the device password and backup; losing both the device and the backup means losing access.
- **Checked**: 31 October 2026

## Key facts

- **Official site**: [bitbox.swiss](https://bitbox.swiss/)

Key facts checked on 31 October 2026 against official sources.

## What is BitBox

BitBox is a line of Swiss hardware wallets made by Shift Crypto AG: the BitBox02 (2019) and the BitBox02 Nova, each in a Multi and a Bitcoin-only edition. The devices keep private keys offline and work with the open-source BitBoxApp on desktop and mobile. The line started in 2015 with the Digital BitBox.

## Who holds the keys

| Parameter | Details |
|---|---|
| Key control | Non-custodial: private keys are stored on the device and never transmitted; Shift Crypto provides no custodial services. |
| Recovery | Backup on the included microSD card; the 12 or 24 recovery words can also be written down and are compatible with other wallets. |
| Seed phrase | The wallet seed is stored encrypted on the microcontroller; access needs secrets on the secure chip, the microcontroller and the device password. |

## Features and supported networks

| Parameter | Details |
|---|---|
| Platforms | BitBoxApp for Windows, macOS, Linux, Android and iOS; the BitBox02 Nova adds iPhone and iPad support over Bluetooth. |
| Supported networks | Multi edition: over 1,500 coins and tokens (Bitcoin, Litecoin, Ethereum and EVM networks, Cardano via partner wallets); Bitcoin-only edition for bitcoin only. |
| Secure element | Dual-chip design: microcontroller plus a secure chip, Microchip ATECC608B (BitBox02) or Infineon Optiga Trust M V3 (BitBox02 Nova). |
| Connectivity | USB on both models; the BitBox02 Nova also has Bluetooth for iPhone and iPad, which can be permanently disabled. |
| Display | OLED screen with touch confirmation; tempered glass OLED on the BitBox02 Nova. |
| Swaps | Swaps of supported coins and a Lightning wallet inside the BitBoxApp. |
| Multisig | Multisig account registration with xpub verification; anti-klepto protection against nonce covert-channel attacks. |

## Security and audits

- The BitBox02 firmware is open source under the Apache-2.0 licence (GitHub BitBoxSwiss/bitbox02-firmware) and builds are reproducible; the BitBoxApp is also open source.
- The secure chip in the BitBox02 Nova (Infineon OPTIGA Trust M) is listed by Infineon as based on CC EAL 6+ (high) certified hardware; BitBox describes the Nova chip as EAL6+ certified. No certification is claimed for the BitBox02's ATECC608B.
- BitBox states the BitBox02 firmware was audited by Census Labs; the audit report was not reviewed here. A bug bounty programme with a public hall of thanks is run.
- On 10 September 2026 attackers used a flaw at newsletter provider Brevo to download BitBox's newsletter email list and send phishing emails; BitBox states its own systems, app and devices were not compromised.

## Security incidents

| Date | What happened | Source |
|---|---|---|
| 10 September 2026 | Data breach: Attackers used a flaw at newsletter provider Brevo to access BitBox's account, download the newsletter contact list (email addresses only) and send two phishing campaigns asking for recovery words; BitBox states its own systems, app and devices were not compromised. | [blog.bitbox.swiss](https://blog.bitbox.swiss/en/email-address-exposure-at-newsletter-provider-brevo/) |

## Fees

| Parameter | Details |
|---|---|
| Device price | BitBox02 Nova $195.00, BitBox02 $166.00 in the official shop (archived shop page of 15 October 2026). |

## History

| Date | Event |
|---|---|
| 2015 | Douglas Bakkum and Jonas Schnelli start the BitBox line with the Digital BitBox (BitBox01). |
| 2019 | BitBox02 released. |
| 10 September 2026 | Newsletter email list exposed through a flaw at provider Brevo; phishing emails sent to subscribers. |

## Risks and caveats

- The user alone is responsible for the device password and backup; losing both the device and the backup means losing access.
- Phishing: BitBox never asks for recovery words; in 2026 fake emails sent through its newsletter provider asked users for them.

## About the developer

- **Legal entity**: Shift Crypto AG (trade name BitBox), registration number CH-498.818.196, Canton of Zurich.
- **Headquarters**: Soodmattenstr. 4, 8134 Adliswil, Switzerland (postal address); privately held company based in Zurich.
- **Founders**: Douglas Bakkum (Member of the Board, CEO) and Jonas Schnelli started the BitBox line.
- **Licence / registration**: Not a financial or custodial service provider.

## Official links

- Website: [bitbox.swiss](https://bitbox.swiss/)
- Security: [bitbox.swiss/bitbox02/security-features](https://bitbox.swiss/bitbox02/security-features/)
- Source code: [github.com/BitBoxSwiss](https://github.com/BitBoxSwiss)
- Support: [support.bitbox.swiss](https://support.bitbox.swiss/)
- Blog: [blog.bitbox.swiss/en](https://blog.bitbox.swiss/en/)

## Questions and answers

**Is BitBox self-custodial?**

Yes. Keys stay on the device and are never transmitted; Shift Crypto AG offers no custodial services.

**Is BitBox open source?**

Yes. The BitBox02 firmware (Apache-2.0) and the BitBoxApp are open source, and firmware builds are reproducible.

**Which coins does BitBox support?**

The Multi edition supports over 1,500 coins and tokens including Bitcoin, Ethereum and EVM networks; the Bitcoin-only edition supports only bitcoin.

**Does BitBox have a secure element?**

Yes, a secure chip next to the microcontroller: ATECC608B in the BitBox02 and Infineon OPTIGA Trust M in the BitBox02 Nova, which Infineon lists as based on CC EAL 6+ certified hardware.

**Who makes BitBox?**

Shift Crypto AG, a privately held Swiss company based in the Zurich area; the BitBox line started in 2015.

## Sources

- [BitBox — Home](https://bitbox.swiss/)
- [BitBox — About](https://bitbox.swiss/about/)
- [BitBox — Imprint](https://bitbox.swiss/imprint/)
- [BitBox — Security features](https://bitbox.swiss/bitbox02/security-features/)
- [BitBox — BitBox02 Nova](https://bitbox.swiss/bitbox02/nova/)
- [BitBox — Supported coins](https://bitbox.swiss/coins/)
- [BitBox — Shop](https://shop.bitbox.swiss/en/)
- [BitBox blog — Email address exposure at newsletter provider Brevo (24 September 2026)](https://blog.bitbox.swiss/en/email-address-exposure-at-newsletter-provider-brevo/)
- [GitHub — BitBoxSwiss/bitbox02-firmware](https://github.com/BitBoxSwiss/bitbox02-firmware)
- [Infineon — OPTIGA Trust M SLS32AIA product page](https://www.infineon.com/part/OPTIGA-TRUST-M-SLS32AIA)

## More in this section

- [Phoenix Wallet](https://revain.org/wallets/phoenix/)
- [UniSat Wallet](https://revain.org/wallets/unisat/)
- [Xverse](https://revain.org/wallets/xverse/)
- [COLDCARD](https://revain.org/wallets/coldcard/)
- [Blockstream Jade](https://revain.org/wallets/blockstream-jade/)
- [Foundation Passport](https://revain.org/wallets/foundation-passport/)
- [All Wallets →](https://revain.org/wallets/)

## Related

- [BC Vault](https://revain.org/wallets/bc-vault/)
- [SpectroCoin](https://revain.org/wallets/spectrocoin/)
- [Cake Wallet](https://revain.org/wallets/cake-wallet/)
- [KeepKey](https://revain.org/wallets/keepkey-wallet/)
- [BitPay Wallet](https://revain.org/wallets/bitpay/)
- [Bitpie](https://revain.org/wallets/bitpie/)
- [Coinbase Wallet](https://revain.org/wallets/coinbase-wallet/)
- [Enjin Wallet](https://revain.org/wallets/enjin/)

## How voting works

Votes are anonymous and carry no text. Each device has one vote per item; press the same button again to remove it. Cloudflare Turnstile checks that a person is voting. We keep a random device ID in a cookie and a salted hash of the IP address to limit abuse — no names, no accounts. Votes are visitors’ opinions, not investment advice.

Page updated: 2026-10-31

---
Source: https://revain.org/wallets/bitbox/