[Wallets](https://revain.org/wallets/) › OneKey

# OneKey: keys, security, fees and reviews

## In short

- **Key control**: Non-custodial: assets are never held or controlled by OneKey; OneKey cannot access, freeze or move them.
- **Fees**: Device price: OneKey Pro 2 $299, OneKey Pro $278, Classic 1S $99, Classic 1S Pure $79 in the official shop (as of 31 October 2026).
- **Risks and caveats**: Losing every recovery method means permanent loss; OneKey cannot restore a wallet.
- **Checked**: 31 October 2026

## Key facts

- **Official site**: [onekey.so](https://onekey.so/)

Key facts checked on 31 October 2026 against official sources.

## What is OneKey

OneKey makes hardware wallets (OneKey Pro 2, OneKey Pro, Classic 1S and Classic 1S Pure) and a free OneKey app for desktop, mobile and browsers. It is run by ONEKEY LIMITED, a Hong Kong company. Keys are generated and kept on the device; the app adds swaps, trading and dApp access through third parties.

## Who holds the keys

| Parameter | Details |
|---|---|
| Key control | Non-custodial: assets are never held or controlled by OneKey; OneKey cannot access, freeze or move them. |
| Recovery | The recovery phrase (and any passphrase) is the backup; OneKey cannot recover or reset it. |
| Seed phrase | Generated offline on the device; it must not be photographed or stored digitally. |
| Custodian | OneKey describes itself as a technology provider, not a custodian, exchange or money transmitter. |

## Features and supported networks

| Parameter | Details |
|---|---|
| Supported networks | More than 30,000 coins on 100+ blockchains, according to OneKey. |
| Secure element | TMC THD89 secure element in OneKey 1S and Pro, listed on the Common Criteria portal as EAL6+ certified (Spain, 16 July 2025). |
| Connectivity | OneKey Pro: USB-C, encrypted Bluetooth, air-gapped QR signing and fingerprint unlock. |
| Platforms | OneKey app for macOS, Windows, Linux, iOS, Android and a Chrome extension; web app. |
| Swaps | Swaps and trading of crypto and other assets through the OneKey app. |

## Security and audits

- Firmware and app code are published on GitHub (OneKeyHQ); the OneKey Pro firmware repository is under GPL-3.0.
- The THD89 Secure Microcontroller from Tongxin Microelectronics is listed on the Common Criteria portal as certified EAL6+ (certificate issued in Spain on 16 July 2025, valid to 16 July 2030).
- SlowMist audited OneKey firmware (blog post updated 26 January 2026): overall conclusion Low Risk, one medium issue fixed, no critical or high findings, according to OneKey.
- OneKey Pro received an EU-Type Examination Certificate under EN 18031 from an EU notified body, according to OneKey; OneKey also states ISO/IEC 27001 certification.

## Security incidents

No security incident is recorded in the sources checked on 31 October 2026 (the company’s own channels and incident databases): [onekey.so/security](https://onekey.so/security/), [onekey.so/blog/updates/one-key-has-passed-a-secu](https://onekey.so/blog/updates/one-key-has-passed-a-security-audit-by-slow-mist/), [github.com/OneKeyHQ/app-monorepo](https://github.com/OneKeyHQ/app-monorepo?tab=security-ov-file#readme), [defillama.com/hacks](https://defillama.com/hacks), [hacked.slowmist.io/search](https://hacked.slowmist.io/search/), [rekt.news/leaderboard](https://rekt.news/leaderboard), [blog.onekey.so/our-response-to-recent-security-f](https://blog.onekey.so/our-response-to-recent-security-fix-reports-13914fea8afd), [nvd.nist.gov/vuln/detail/CVE-2023-25758](https://nvd.nist.gov/vuln/detail/CVE-2023-25758)

## Fees

| Parameter | Details |
|---|---|
| Device price | OneKey Pro 2 $299, OneKey Pro $278, Classic 1S $99, Classic 1S Pure $79 in the official shop (as of 31 October 2026). |
| Subscription | OneKey app is free; OneKey Prime is an optional paid subscription. |

## History

| Date | Event |
|---|---|
| 2019 | ONEKEY LIMITED copyright notice starts in 2019. |
| 16 July 2025 | THD89 secure microcontroller certified EAL6+ under Common Criteria. |
| January 2026 | SlowMist firmware security audit published. |

## Risks and caveats

- Losing every recovery method means permanent loss; OneKey cannot restore a wallet.
- OneKey cannot reverse a broadcast transaction or make a third-party service return assets.
- Sanctioned and restricted persons may not use the products.

## About the developer

- **Legal entity**: ONEKEY LIMITED, a Hong Kong company, Business Registration Number 73618989.
- **Headquarters**: Registered office: 9 Queens Road Central, Central, Hong Kong.
- **Licence / registration**: Terms governed by Hong Kong law; local entities in several jurisdictions, details on request.

## Official links

- Website: [onekey.so](https://onekey.so/)
- Security: [onekey.so/security](https://onekey.so/security/)
- Source code: [github.com/OneKeyHQ](https://github.com/OneKeyHQ)
- Support: [help.onekey.so/?url_locale=en](https://help.onekey.so/?url_locale=en)
- Download: [shop.onekey.so](https://shop.onekey.so/)

## Questions and answers

**Is OneKey self-custodial?**

Yes. Keys are generated and stored on the device; OneKey never holds assets and cannot access, freeze or move them.

**Is OneKey open source?**

Its firmware and app code are on GitHub; the OneKey Pro firmware is under GPL-3.0.

**Does OneKey have a certified secure element?**

Yes. OneKey 1S and Pro use the TMC THD89 chip, which the Common Criteria portal lists as EAL6+ certified since 16 July 2025.

**Has OneKey been audited?**

SlowMist audited the firmware (published January 2026) with an overall Low Risk conclusion; the one medium issue was fixed.

**Who makes OneKey?**

ONEKEY LIMITED, a company incorporated in Hong Kong.

## Sources

- [OneKey — Home](https://onekey.so/)
- [OneKey — Security](https://onekey.so/security/)
- [OneKey — OneKey Pro](https://onekey.so/products/onekey-pro-hardware-wallet/)
- [OneKey — Shop](https://shop.onekey.so/)
- [OneKey Help Center — Terms of Use](https://help.onekey.so/articles/11461297?url_locale=en)
- [OneKey Help Center — About the company](https://help.onekey.so/articles/11461294?url_locale=en)
- [OneKey blog — SlowMist security audit](https://onekey.so/blog/updates/one-key-has-passed-a-security-audit-by-slow-mist/)
- [OneKey blog — OneKey Pro passes EN 18031](https://onekey.so/blog/ecosystem/onekey-pro-passes-eu-en-18031-cybersecurity-certification/)
- [Common Criteria portal — certified products list](https://www.commoncriteriaportal.org/products/certified_products.csv)
- [GitHub — OneKeyHQ/firmware-pro](https://github.com/OneKeyHQ/firmware-pro)

## More in this section

- [COLDCARD](https://revain.org/wallets/coldcard/)
- [Blockstream Jade](https://revain.org/wallets/blockstream-jade/)
- [Foundation Passport](https://revain.org/wallets/foundation-passport/)
- [Arculus](https://revain.org/wallets/arculus/)
- [Armory](https://revain.org/wallets/armory-wallet/)
- [Wallet of Satoshi](https://revain.org/wallets/wallet-of-satoshi/)
- [All Wallets →](https://revain.org/wallets/)

## Related

- [BitBox](https://revain.org/wallets/bitbox/)
- [Xapo Bank](https://revain.org/wallets/xapo-wallet/)
- [Xverse](https://revain.org/wallets/xverse/)
- [Wirex](https://revain.org/wallets/wirex-wallet/)
- [UniSat Wallet](https://revain.org/wallets/unisat/)
- [Binance Wallet](https://revain.org/wallets/binance-wallet/)
- [Phoenix Wallet](https://revain.org/wallets/phoenix/)
- [Natrium](https://revain.org/wallets/natrium-wallet/)

## How voting works

Votes are anonymous and carry no text. Each device has one vote per item; press the same button again to remove it. Cloudflare Turnstile checks that a person is voting. We keep a random device ID in a cookie and a salted hash of the IP address to limit abuse — no names, no accounts. Votes are visitors’ opinions, not investment advice.

Page updated: 2026-10-31

---
Source: https://revain.org/wallets/onekey/