Bitkey Review

Bitkey is a hexagonal device measuring 66 × 60 × 13.6 mm and weighing 72.4 g, with a Corian solid-surface body, an OLED touchscreen (466 × 466 pixels according to the firmware configuration) and a fingerprint sensor. Block quotes battery life of up to a year per charge, and a USB-C charging cable is included. Setup and daily use run through the Bitkey app for iOS 15.2 or later and Android 7.0 or later with NFC. There is no desktop app.

Every action that needs the Hardware Key works the same way: unlock the device with your fingerprint, hold it to the phone and confirm on its screen. Firmware updates use the same tap-to-update flow from the app's Security hub. Because there is no seed phrase, setup skips writing down and checking 12 or 24 words, and Block describes setup as taking minutes. The other side of this is that the phone is always involved, and the wallet must be online to send bitcoin.

The app and the device interface are available in English only, which can be a barrier for non-English speakers. The first-generation Bitkey (2024, no screen) still receives firmware updates, but the model with a screen is the one Block now sells.

Bitkey is Bitcoin-only and supports on-chain transactions only; Lightning is not supported. Inside the app, Block integrates exchange partners for buying, selling, transfers and automatic withdrawals, and it advertises built-in inheritance through a beneficiary feature. Users who run their own infrastructure can connect the app to their own Electrum server.

The 2-of-3 setup is fixed and always includes Block's Server Key, so Bitkey cannot be added as a cosigner to a multisig wallet built in other software. What you can export is the wallet descriptor (an xpub bundle with all three public keys and the script structure) and your transaction history as a CSV file.

Coin control, Tor and CoinJoin are not documented. The app runs only on iOS and Android and the device connects only over NFC, so there is no USB, QR or microSD workflow with desktop wallet software.

Bitkey is not anonymous to set up: an email address is required for critical alerts, and the app works through Block's servers. Block's privacy notice lists diagnostics providers and product analytics platforms, and hardware device statistics are collected through SDKs to troubleshoot problems and deliver firmware updates. The published app source shows that customer builds have analytics always on, with no setting to disable them; the only toggle exists in internal debug builds. The in-app support form also sends device details such as serial number and firmware version by default.

For on-chain data, Block uses Chain Code Delegation, proposed as BIP-89: the server holds only a bare public key. Block states that, as a result, it cannot determine a customer's balance, reconstruct transaction history or correlate addresses. Optional push notifications for incoming transactions do share receive addresses with Block. The custom Electrum server option is offered for more privacy, performance or control.

Tor support is not documented, and the wallet cannot work offline: Block notes that keys can be air-gapped but the wallet itself must be online to track funds and broadcast transactions.

Block sells Bitkey for $250 in the US, €230 in the EU and £230 in the UK. The first-generation model without a screen launched in 2024 at $150 and is no longer the product Block promotes. The price covers the device, a USB-C charging cable and the app. The warranty is two years in the EU and one year elsewhere.

The official store serves about 96 countries, including much of Europe and Latin America, and all orders ship from the US. Bitkey is not sold to New York State or to APO/FPO/DPO addresses, and Japan, Russia and mainland China are not on the list. It is also sold through Amazon in the US and Canada. Bitkey is not offered under any virtual-currency or financial-services licence. Block announced the screen model on 27 April 2026.

What the price buys is less a piece of hardware than a recovery system: no seed phrase to protect, a recovery path for each kind of loss, and a co-signer that cannot act alone. Whether that is good value depends on how far you rely on Block's continued service and on your cloud account, compared with storing a seed phrase yourself.

Bitkey takes a different route from most hardware wallets. Instead of a seed phrase, every wallet is a fixed 2-of-3 multisig: an App Key on the phone, a Hardware Key on the device and a Server Key held by Block. The loss of any one key can be recovered through the cloud backup, Delay & Notify or Recovery Contacts. The device has a narrow attack surface: NFC is its only data link, the USB-C port carries power only, and the signing core is separate from the chip that drives the screen. Firmware, app and server code are published under the MIT licence.

The costs of the design are just as clear. Everyday use runs through Block's servers, and the App Key backup depends on a single iCloud or Google Drive account. Customer builds of the app send analytics that cannot be turned off, an email address is required, and the app is available only in English. Bitkey handles on-chain bitcoin only, with no Lightning. Outsiders cannot reproduce the firmware builds, no independent audit report is published, and Block has not published a fingerprint retry limit. None of this points to a known flaw, but it is a different trust model from a self-contained seed-phrase wallet.

Choose this wallet if:

• You hold bitcoin and do not want to write down and safeguard a seed phrase.
• You want built-in recovery from a lost phone or a lost device, with optional help from trusted Recovery Contacts.
• You are comfortable with Block as a co-signer that cannot move funds alone, and with a phone-centred, NFC-only workflow.

Skip this wallet if:

• You want a wallet that works without any vendor server, or full control over analytics and account data.
• You hold assets other than bitcoin or need Lightning payments.
• You need an interface in a language other than English, a desktop app, or a device you can add as a cosigner to your own multisig setup.