ShiftCrypto BitBox02

Protect your coins with the latest Swiss-made hardware wallet. The BitBox02 features a dual-chip design with a secure chip. The source code has been independently audited by security researchers and is fully open source.

On-device security

Securely verify transactions, receive addresses and other data on the built-in screen by using gesture confirmation (tap, slide and hold). Enter your password directly on the device instead of the BitBoxApp.

Secure chip

To avoid brute force attacks, a monotonic counter in the secure chip limits the total attempts of device-password entries. Password stretching increases the resources needed to test each possible password, making such attacks difficult.

Bootloader

The BitBox accepts only firmware signed by Shift Crypto. The bootloader prevents firmware downgrades and installing firmware for a different edition of the BitBox (Multi or Bitcoin-only). The bootloader can also display the hash of the firmware before running it for binary transparency.

Seed generation and storage

The encrypted seed is stored on the microcontroller unit (MCU), protected by both the secure chip and the user-chosen device password. The BitBox uses multiple sources of entropy to generate the seed.

Open-source

The firmware of the BitBox is open-source and allows for deterministic builds, which means you can verify what you are installing: Don't trust, verify! In addition, we have a bug bounty program to encourage an independent review of the firmware and responsible disclosure of any findings.

Attestation and encryption

Each device is attested during factory setup and the BitBoxApp checks the authenticity of your device each time. The USB communication between the app and the device is encrypted in order to protect against malicious USB cables and software stacks.

Additional Information