OneKey: keys, security, fees and reviews
In short
- Key control
- Non-custodial: assets are never held or controlled by OneKey; OneKey cannot access, freeze or move them.
- Fees
- Device price: OneKey Pro 2 $299, OneKey Pro $278, Classic 1S $99, Classic 1S Pure $79 in the official shop (as of 31 October 2026).
- Risks and caveats
- Losing every recovery method means permanent loss; OneKey cannot restore a wallet.
- Checked
- 31 October 2026
Visitor ratings: do you like OneKey?
Key facts
- Official site
- onekey.so
Key facts checked on 31 October 2026 against official sources.
What is OneKey
OneKey makes hardware wallets (OneKey Pro 2, OneKey Pro, Classic 1S and Classic 1S Pure) and a free OneKey app for desktop, mobile and browsers. It is run by ONEKEY LIMITED, a Hong Kong company. Keys are generated and kept on the device; the app adds swaps, trading and dApp access through third parties.
Who holds the keys
| Parameter | Details |
|---|---|
| Key control | Non-custodial: assets are never held or controlled by OneKey; OneKey cannot access, freeze or move them. |
| Recovery | The recovery phrase (and any passphrase) is the backup; OneKey cannot recover or reset it. |
| Seed phrase | Generated offline on the device; it must not be photographed or stored digitally. |
| Custodian | OneKey describes itself as a technology provider, not a custodian, exchange or money transmitter. |
Features and supported networks
| Parameter | Details |
|---|---|
| Supported networks | More than 30,000 coins on 100+ blockchains, according to OneKey. |
| Secure element | TMC THD89 secure element in OneKey 1S and Pro, listed on the Common Criteria portal as EAL6+ certified (Spain, 16 July 2025). |
| Connectivity | OneKey Pro: USB-C, encrypted Bluetooth, air-gapped QR signing and fingerprint unlock. |
| Platforms | OneKey app for macOS, Windows, Linux, iOS, Android and a Chrome extension; web app. |
| Swaps | Swaps and trading of crypto and other assets through the OneKey app. |
Security and audits
- Firmware and app code are published on GitHub (OneKeyHQ); the OneKey Pro firmware repository is under GPL-3.0.
- The THD89 Secure Microcontroller from Tongxin Microelectronics is listed on the Common Criteria portal as certified EAL6+ (certificate issued in Spain on 16 July 2025, valid to 16 July 2030).
- SlowMist audited OneKey firmware (blog post updated 26 January 2026): overall conclusion Low Risk, one medium issue fixed, no critical or high findings, according to OneKey.
- OneKey Pro received an EU-Type Examination Certificate under EN 18031 from an EU notified body, according to OneKey; OneKey also states ISO/IEC 27001 certification.
Security incidents
No security incident is recorded in the sources checked on 31 October 2026 (the company’s own channels and incident databases): onekey.so/security, onekey.so/blog/updates/one-key-has-passed-a-secu, github.com/OneKeyHQ/app-monorepo, defillama.com/hacks, hacked.slowmist.io/search, rekt.news/leaderboard, blog.onekey.so/our-response-to-recent-security-f, nvd.nist.gov/vuln/detail/CVE-2023-25758
Fees
| Parameter | Details |
|---|---|
| Device price | OneKey Pro 2 $299, OneKey Pro $278, Classic 1S $99, Classic 1S Pure $79 in the official shop (as of 31 October 2026). |
| Subscription | OneKey app is free; OneKey Prime is an optional paid subscription. |
History
| Date | Event |
|---|---|
| 2019 | ONEKEY LIMITED copyright notice starts in 2019. |
| 16 July 2025 | THD89 secure microcontroller certified EAL6+ under Common Criteria. |
| January 2026 | SlowMist firmware security audit published. |
Risks and caveats
- Losing every recovery method means permanent loss; OneKey cannot restore a wallet.
- OneKey cannot reverse a broadcast transaction or make a third-party service return assets.
- Sanctioned and restricted persons may not use the products.
About the developer
- Legal entity
- ONEKEY LIMITED, a Hong Kong company, Business Registration Number 73618989.
- Headquarters
- Registered office: 9 Queens Road Central, Central, Hong Kong.
- Licence / registration
- Terms governed by Hong Kong law; local entities in several jurisdictions, details on request.
Official links
- Website: onekey.so
- Security: onekey.so/security
- Source code: github.com/OneKeyHQ
- Support: help.onekey.so/?url_locale=en
- Download: shop.onekey.so
Questions and answers
Is OneKey self-custodial?
Yes. Keys are generated and stored on the device; OneKey never holds assets and cannot access, freeze or move them.
Is OneKey open source?
Its firmware and app code are on GitHub; the OneKey Pro firmware is under GPL-3.0.
Does OneKey have a certified secure element?
Yes. OneKey 1S and Pro use the TMC THD89 chip, which the Common Criteria portal lists as EAL6+ certified since 16 July 2025.
Has OneKey been audited?
SlowMist audited the firmware (published January 2026) with an overall Low Risk conclusion; the one medium issue was fixed.
Who makes OneKey?
ONEKEY LIMITED, a company incorporated in Hong Kong.
Sources
- OneKey — Home
- OneKey — Security
- OneKey — OneKey Pro
- OneKey — Shop
- OneKey Help Center — Terms of Use
- OneKey Help Center — About the company
- OneKey blog — SlowMist security audit
- OneKey blog — OneKey Pro passes EN 18031
- Common Criteria portal — certified products list
- GitHub — OneKeyHQ/firmware-pro
More in this section
Related
How voting works
Votes are anonymous and carry no text. Each device has one vote per item; press the same button again to remove it. Cloudflare Turnstile checks that a person is voting. We keep a random device ID in a cookie and a salted hash of the IP address to limit abuse — no names, no accounts. Votes are visitors’ opinions, not investment advice.
Page updated: