−$40code
HardwareUpdated: Nov 11, 2026
SafePal
SafePal is a maker of low-cost multi-chain hardware wallets: two models sign through QR codes with a built-in camera, one connects over Bluetooth, and all use the SafePal mobile app.
Also known as:SafePal walletSafePal S1
What Is SafePal?
SafePal is a hardware wallet maker founded in 2018 that describes itself as a remote-first company. It sells three low-cost multi-chain devices, all managed with the SafePal mobile app, which the company says supports more than 200 blockchains.
The SafePal S1 and SafePal S1 Pro are air-gapped. They exchange data with the phone only through QR codes, using a built-in camera, and SafePal says their USB-C port is for charging. The SafePal X1 has no camera and connects over Bluetooth instead.
Keys are created on the device and backed up with a standard BIP39 recovery phrase. SafePal lists an EAL6+ secure element for each model, but it does not name the chip or publish certificate details. Firmware application code for the S1 and X1 is public on GitHub under the GPL-3.0 licence.
Several points remain open or disputed. SafePal says Keylabs audited the X1, but no report has been published. In 2021 Kraken Security Labs reported that the S1's tamper detection was ineffective, which SafePal disputed, and that a firmware downgrade went undetected, which was later fixed. In August 2026 SafePal disclosed a leak of customer order data; according to the company, no seed phrases or private keys were involved.
WalletHardware Wallet
A hardware wallet is a dedicated device that keeps private keys offline and signs transactions internally, so the keys never reach an internet-connected computer or phone.
BlockchainBlockchain
A blockchain is a shared, append-only record of transactions kept by many independent computers, so no single party can rewrite it.
Read full definition: BlockchainHardwareAir-Gapped Wallet
An air-gapped wallet is a cryptocurrency wallet that remains completely offline, disconnected from the internet, to prevent exposure to online threats and attacks.
Read full definition: Air-Gapped WalletHardwareQR Code Signing
QR Code Signing is a method used in cryptocurrency transactions where a QR code is generated to confirm and sign a transaction, enhancing security and user convenience.
Read full definition: QR Code SigningHardwareUSB-C Connectivity
USB-C connectivity means a hardware wallet has a USB Type-C port for a wired connection to a computer or phone, and on many models for power or charging.
Read full definition: USB-C ConnectivityHardwareBluetooth Connectivity
Bluetooth Connectivity enables wireless communication between devices, like hardware wallets and smartphones, using Bluetooth or Bluetooth Low Energy (BLE) for secure data transfer.
Read full definition: Bluetooth ConnectivityBlockchainBIP39
BIP39 is a standard for generating mnemonic seed phrases that are used to create deterministic wallets and securely back up cryptocurrency private keys.
Read full definition: BIP39BlockchainMnemonic Phrase
A mnemonic phrase is a set of words that stores a cryptocurrency wallet's private keys, allowing users to recover access if lost.
Read full definition: Mnemonic PhraseSecurityEAL Certification
EAL certification (Evaluation Assurance Level) under Common Criteria shows how rigorously a hardware component, such as the secure chip of a hardware wallet, was evaluated, from EAL1 to EAL7.
Read full definition: EAL CertificationHardwareSecure Element
A secure element is a tamper-resistant chip built to store secrets and resist physical attacks such as side-channel analysis and fault injection.
Read full definition: Secure ElementHardwareFirmware
Firmware is the software that runs on a hardware wallet itself: it generates keys, shows transaction details on the screen and signs.
Read full definition: FirmwareBlockchainPrivate Key
A private key is the secret number that proves ownership of a crypto address and signs its transactions. Whoever has it controls the funds.
Real-World Examples
Example 1: Sending from a SafePal S1: the app displays the unsigned transaction as a QR code, the device scans it and shows recipient and amount, and after confirmation it displays a QR code with the signature for the phone to scan.
Example 2: A user who finds scanning QR codes slow picks the SafePal X1 and pairs it with the phone over Bluetooth, accepting a wireless link in exchange for convenience.
Example 3: After the order-data leak, a customer receives an email that uses his real name and address and asks for his recovery phrase. He ignores it: the phrase is never entered anywhere except on the device.
HardwareQR Code Signing
QR Code Signing is a method used in cryptocurrency transactions where a QR code is generated to confirm and sign a transaction, enhancing security and user convenience.
Read full definition: QR Code SigningHardwareBluetooth Connectivity
Bluetooth Connectivity enables wireless communication between devices, like hardware wallets and smartphones, using Bluetooth or Bluetooth Low Energy (BLE) for secure data transfer.
Read full definition: Bluetooth ConnectivityBlockchainMnemonic Phrase
A mnemonic phrase is a set of words that stores a cryptocurrency wallet's private keys, allowing users to recover access if lost.
Read full definition: Mnemonic PhraseSafePal hardware wallets
Browse wallets grouped by this feature
Affiliate link — we may earn a commission at no extra cost to you. Learn more about affiliate links
Frequently Asked Questions
How do the SafePal S1 and SafePal X1 differ in how they connect?
The SafePal S1 and S1 Pro are air-gapped: they exchange data with the phone only through QR codes, using a built-in camera, and SafePal says their USB-C port is for charging. The SafePal X1 has no camera and connects over Bluetooth instead, accepting a wireless link in exchange for convenience. All are managed with the SafePal mobile app.
Which of SafePal's security claims can be checked independently?
Some can, some cannot. Firmware application code for the S1 and X1 is public on GitHub under GPL-3.0. SafePal lists an EAL6+ secure element for each model but does not name the chip or publish certificate details, and it says Keylabs audited the X1 without a published report. Kraken Security Labs' 2021 findings on the S1 were partly disputed by SafePal.
Did the 2026 SafePal data leak put my coins at risk?
According to SafePal, the August 2026 leak involved customer order data, not seed phrases or private keys. The practical risk is targeted phishing, such as emails that use real names and addresses and ask for a recovery phrase. The phrase is never entered anywhere except on the device, so such requests should be ignored.
Sources
Ready to Choose a Secure Wallet?
Use our tools to find the right hardware wallet for your needs.