Blockstream Jade Plus ($149): Bitcoin-only wallet with Liquid support, open-source hardware and firmware, a camera for QR air-gap signing and a blind PIN oracle instead of a secure element.
By the WalletInsights editorial team
We may earn a commission from purchases through affiliate links. This does not affect our ratings. Affiliate Disclosure
Blockstream Jade Plus is a $149 Bitcoin-only hardware wallet with Liquid support, open-source hardware and firmware, reproducible builds, a 1.9-inch colour screen and a camera for QR air-gapped signing. Instead of a secure element it uses a blind PIN oracle, run by Blockstream or self-hosted. No third-party audit has been published. It fits Bitcoin users who want verifiable code and air-gap options.
Security Warning
Avoid buying from unofficial marketplaces — counterfeit risk.
Known incidentsFirmware 1.0.38 (2025-11-26) and 1.0.41 (2026-08-22) were published as security releases after responsible disclosures (DARKNAVY; Spiral's Loupe, Kvazar and others). Blockstream's changelog does not detail the issues.
PIN storageBlind PIN oracle: server stores only a hash of the PIN plus a nonce; AES-256 key split between Jade and oracle
Connectivity5 items
USB ConnectionYes
BluetoothYes
NFCNo
QR CodeYes
Air-GappedYes
Physical Characteristics5 items
Dimensions65 × 30 × 12 mm
Weight25g
DisplayIPS LCD (Colour) (1.9")
Body MaterialReinforced plastic (Black) or aluminum alloy (Metal variants)
The Jade Plus has no hardware secure element. Blockstream instead uses what it calls a virtual secure element. The recovery phrase is stored encrypted in the flash memory of the ESP32-S3 chip from Espressif, protected by Secure Boot, and the AES-256 key needed to decrypt it is split between Jade and a blind PIN oracle, a server that Blockstream runs by default. According to Blockstream, the oracle stores only a hash of the PIN plus a nonce and knows neither the PIN, the keys nor the wallet's addresses; the channel to it is encrypted with an ECDH key exchange and can run over Tor. After three wrong PIN entries, Jade and the oracle both delete their part of the secret, and the wallet has to be restored from the recovery phrase.
The benefit of this approach is that no closed secure-element chip is involved: hardware, firmware and the oracle server code are open source, so the whole model can be inspected. Blockstream states that a stolen device holds nothing of value to extract on its own. The trade-off is a dependency: unlocking with the PIN requires a connection to an oracle, either Blockstream's server or the user's own instance of the open-source blind_pin_server. A stateless mode that loads the wallet from a SeedQR (Temporary Signer) works without the oracle.
Firmware is signed by Blockstream, checked by Secure Boot and protected against downgrades, and reproducible builds let anyone confirm that the official binary matches the tagged source code. Anti-Exfil adds host-provided randomness to each signature to prevent a compromised device from leaking keys through nonces, and the optional Genuine Check verifies a device-specific key signed by Blockstream to detect clones. Blockstream has not published a third-party audit; in December 2025 it said it was investigating options for one. Firmware 1.0.38 (November 2025) and 1.0.41 (August 2026) were security releases following responsible disclosures by outside researchers, and the changelog does not detail the issues.
SecurityKey Factor
The Jade Plus creates and restores standard BIP39 recovery phrases of 12 or 24 words, so a backup is not tied to Blockstream hardware and can be restored on other BIP39-compatible wallets. In advanced setup the phrase can also be exported as a SeedQR or CompactSeedQR, a QR code the camera can scan later to load the wallet. Blockstream recommends keeping the phrase offline, written down, on Blockstream's metal backup or on its Blockstream Capsule.
A BIP39 passphrase is supported, and each passphrase opens a separate hidden wallet that needs its own backup. The device can also derive child recovery phrases under BIP85. Documented derivation paths include BIP84 (native SegWit), BIP49 (wrapped SegWit), BIP48 for multisig and BIP86 for Taproot single-key spending.
The PIN cannot be recovered or reset. After three wrong entries the device and the oracle erase their secrets, and only the recovery phrase restores access. The oracle holds part of the unlock key, not a copy of the seed, so there is no vendor backup. Shamir (SLIP-39) shares, social recovery and backup cards are not supported; mnemonic import accepts only 12- or 24-word phrases. The recovery phrase, plus any passphrase, therefore remains a single point of failure. Because the process follows the familiar BIP39 routine, we estimate the backup as straightforward, though this is an editorial judgement rather than a test.
Recovery & backups
The Jade Plus measures 65 × 30 × 12 mm and weighs 25 g in plastic or 30 g in aluminium alloy. It has a 1.9-inch IPS colour screen at 320 × 170 pixels, a 280 mAh battery, a USB-C port and a 640 × 480 camera for QR codes. Navigation uses physical buttons. Transaction details are shown on the screen for review before signing. When the PIN is entered, the firmware starts each digit at a random value, so watching the button presses does not reveal the code.
Setup runs through the Blockstream app (formerly Blockstream Green) on macOS, Windows, Linux, iOS and Android. Computers and Android devices connect over USB, phones over Bluetooth; on iOS, Bluetooth is the only option. Bluetooth is off by default and has to be enabled on the device. The device interface is in English only, while the companion app is multilingual.
For air-gapped use, the camera reads PSBTs as QR codes, and USB drives or SD cards (FAT32, through a USB-C reader or Blockstream's JadeLink) carry PSBTs and firmware files. There is no built-in microSD slot and no NFC. Firmware can be updated from the app over USB or Bluetooth, through a browser portal using WebSerial, from USB storage or from the command line. Our view of day-to-day handling is an editorial estimate from these specifications: the small screen and button navigation are typical of compact devices, and QR signing adds steps compared with a cable.
Usability / UX
The Jade Plus is a Bitcoin-only device with support for Liquid, Blockstream's Bitcoin sidechain, including Liquid-issued assets managed through the Blockstream app. Blockstream does not publish how many Liquid assets are supported. Other blockchains, smart contracts and WalletConnect are not supported.
For Bitcoin, Blockstream lists its own app plus Sparrow, Nunchuk, Specter, BlueWallet, Electrum, Liana, Keeper, Wasabi and Bitcoin Safe, and Bitcoin Core via HWI. For Liquid, it lists the Blockstream app and SideSwap. QR signing covers Bitcoin only, so Liquid transactions need a USB or Bluetooth connection. The Blockstream app also offers Lightning, but Lightning payments use a key held by the app, not by Jade.
Multisig is well covered. Jade registers and backs up multisig configurations on the device, so it can verify receive and change addresses, and it supports BIP67 sorted multisig and registered descriptor wallets. Blockstream's help center and firmware changelog give different upper limits for cosigners, so we do not state one. The wallet exports xpubs as animated QR codes and descriptors to USB storage. Coin control is available in the Blockstream app and in Sparrow, and the Blockstream app lets users buy bitcoin directly into Jade-secured storage.
Ecosystem & integrations
According to Blockstream, the Jade Plus does not connect to the internet. The online component of its security model is the PIN oracle, which is needed to unlock the device. Blockstream states that the oracle does not learn the PIN, the keys or the wallet's addresses, and that it can be reached over Tor. Users who prefer not to rely on Blockstream's server can run their own oracle, for example on a Raspberry Pi reached over Tor.
The Blockstream app requires no account or personal data. Its analytics programme is opt-in and can be switched off at any time in the settings; when it is off, the app sends no usage data, according to Blockstream. Anti-Exfil also guards against a compromised device leaking key material through its signatures.
Bluetooth is off by default, and Blockstream offers a No-Radio firmware variant for users who want no radio at all. With the camera and USB storage, Bitcoin transactions can be signed without a cable or wireless link. Key generation mixes the hardware random number generator with further entropy sources, including camera images, battery and temperature readings and input from the companion app. Blockstream documents no CoinJoin support or other metadata protection for the device.
Privacy
The Jade Plus costs $149 in black reinforced plastic and $169 in aluminium alloy, available in Genesis Grey, Lunar Silver, Black, Rose Gold and Sovereign Green, according to Blockstream's store on 26 October 2026; the product page lists the metal version at $169.99. The store showed the device in stock, shipping from North America and Germany.
For that price the hardware includes a colour screen, camera, battery, Bluetooth and USB-storage support, with open-source hardware and firmware and reproducible builds. It does not include a hardware secure element or a published third-party audit, and the device's ongoing security depends on firmware updates, two of which since launch were security releases.
Blockstream sells two other models. The original Jade, now called Jade Classic, is still available at a regular price of $79 (reduced to $67 at the time of writing), and Blockstream said at the Jade Plus launch that it would continue to receive firmware support. Jade Core, launched on 28 April 2026 at $99, has no camera and no battery. Buyers who do not need QR signing or a battery can consider Jade Core. Blockstream documents air-gapped use through JadeLink, USB drives and SD cards for the Jade Plus only.
Price & value
The Blockstream Jade Plus combines fully open-source hardware and firmware, reproducible builds, Anti-Exfil signing and a camera for QR air-gapped use for $149. Its defining choice is the security model: there is no secure element, and the seed is protected by encryption on the ESP32-S3 with a key split between the device and a blind PIN oracle. This makes the design auditable end to end, but PIN unlock depends on reaching an oracle, either Blockstream's server or one the user runs. The open points are a missing third-party audit, which Blockstream said in December 2025 it was still investigating, two security firmware releases whose fixes the changelog does not describe, an English-only device interface and a scope limited to Bitcoin and Liquid. None of this points to a known flaw, but buyers should understand the oracle model before relying on it.
Choose this wallet if:
You hold Bitcoin, possibly with Liquid assets, and want hardware, firmware and PIN server code you can inspect and rebuild.
You want QR or USB-storage air-gapped signing with Bluetooth off by default, or removed entirely with the No-Radio firmware.
You use multisig with Sparrow, Nunchuk, Specter or Liana and want the device to verify receive and change addresses.
Skip this wallet if:
You want a wallet whose key protection rests on a hardware secure element rather than on a remote oracle.
You hold coins other than Bitcoin and Liquid assets.
You do not need a camera or battery: Blockstream's own Jade Core ($99) omits both.
✓Our Verdict
The Blockstream Jade Plus combines fully open-source hardware and firmware, reproducible builds, Anti-Exfil signing and a camera for QR air-gapped use for $149. Its defining choice is the security model: there is no secure element, and the seed is protected by encryption on the ESP32-S3 with a key split between the device and a blind PIN oracle. This makes the design auditable end to end, but PIN unlock depends on reaching an oracle, either Blockstream's server or one the user runs. The open points are a missing third-party audit, which Blockstream said in December 2025 it was still investigating, two security firmware releases whose fixes the changelog does not describe, an English-only device interface and a scope limited to Bitcoin and Liquid. None of this points to a known flaw, but buyers should understand the oracle model before relying on it.
Choose this wallet if:
You hold Bitcoin, possibly with Liquid assets, and want hardware, firmware and PIN server code you can inspect and rebuild.
You want QR or USB-storage air-gapped signing with Bluetooth off by default, or removed entirely with the No-Radio firmware.
You use multisig with Sparrow, Nunchuk, Specter or Liana and want the device to verify receive and change addresses.
Skip this wallet if:
You want a wallet whose key protection rests on a hardware secure element rather than on a remote oracle.
You hold coins other than Bitcoin and Liquid assets.
You do not need a camera or battery: Blockstream's own Jade Core ($99) omits both.
Ready to buy Blockstream Jade Plus?
We may earn a commission if you purchase through our links. This doesn't affect our editorial independence.
Impermanent loss happens when asset prices in a liquidity pool diverge from external markets, reducing the value of liquidity providers' holdings compared to simply holding the assets.
Jade is a hardware wallet from Blockstream, designed to securely store Bitcoin private keys offline, ensuring safe transactions and protection from online threats.
Recovery is the process of restoring access to a cryptocurrency wallet using its seed phrase or mnemonic backup if the original wallet is lost or inaccessible.
Secure Boot is a security feature that ensures only trusted software runs on a device by verifying its integrity during startup, preventing unauthorized code execution in crypto systems.
A nonce is a sequential number in a blockchain transaction that ensures transactions from the same account process in order and prevents replay attacks.
In cryptocurrency, a swap is the direct exchange of one token for another on a blockchain, often via decentralized exchanges (DEXs) without intermediaries.
Reproducible Builds refer to the process where the same source code consistently produces identical binary outputs, ensuring verifiable and trustworthy software in blockchain and crypto projects.
Anti-Klepto Protocol is a blockchain security mechanism that prevents unauthorized data exfiltration by verifying nonces to ensure transaction authenticity and integrity.
Firmware Attestation is the process of verifying the authenticity of a device's firmware to ensure it has not been tampered with, commonly used in hardware wallets for security.
BIP39 is a standard for generating mnemonic seed phrases that are used to create deterministic wallets and securely back up cryptocurrency private keys.
A backup in cryptocurrency is a secure copy of a wallet's seed phrase or private keys. It enables recovery of funds if the original wallet is lost or damaged.
A metal backup is a durable metal plate or device engraved with a cryptocurrency wallet's seed phrase, providing fireproof and waterproof protection for offline key storage.
A passphrase is an additional security layer for cryptocurrency wallets, acting as a 25th word in the BIP39 seed phrase, protecting access to hidden wallets.
A hidden wallet conceals a secondary cryptocurrency wallet behind an additional passphrase on the same seed, providing plausible deniability against coercion.
BIP85 is a Bitcoin Improvement Proposal for generating child seeds from a master seed, providing deterministic entropy for use in secure key derivation and backup processes.
SegWit (Segregated Witness) is a Bitcoin upgrade that moves transaction signatures to a separate data structure, increasing block capacity and enabling efficient scaling solutions like the Lightning Network.
Multisig (multi-signature) is a security feature that requires multiple private keys to authorize a transaction, enhancing protection against unauthorized access in blockchain networks.
Taproot (BIP 341) is a Bitcoin upgrade that introduces Schnorr signatures and Tapscript, enhancing privacy by making complex scripts look like simple payments and improving efficiency.
Vendor Backup is a service by hardware wallet manufacturers that securely stores encrypted seed phrase shards with third parties, enabling recovery without self-custody of the full seed.
Shamir Secret Sharing (SSS) divides a secret, like a crypto wallet seed, into multiple shares. A threshold number of shares reconstructs it, enhancing security as in SLIP-39 backups.
Social Recovery allows users to regain access to their crypto wallet through approvals from trusted guardians or contacts, bypassing traditional seed phrases.
USB-C Connectivity refers to the use of a USB Type-C port for fast, reversible connections in blockchain devices like hardware wallets, enabling secure data transfer and charging.
A companion app is a software application used to manage and interact with cryptocurrency wallets or blockchain networks, typically offering features like transactions and security controls.
Bitcoin (BTC) is the first decentralized cryptocurrency, launched in 2009. It uses blockchain technology for secure, peer-to-peer digital transactions without intermediaries.
A sidechain is a separate blockchain connected to a main chain, allowing for faster transactions or experimentation without affecting the main chain's security.
WalletConnect is a protocol that enables secure communication between decentralized applications (dApps) and mobile wallets through QR code scanning or deep linking.
Specter is a Bitcoin hardware wallet solution designed for advanced users, offering secure storage through a customizable, self-hosted setup with options like Specter Desktop and Specter DIY.
BlueWallet is a mobile Bitcoin wallet that allows users to securely store, send, and receive Bitcoin. It offers features like Lightning Network support and multi-sig capabilities.
Electrum is a lightweight Bitcoin wallet that allows users to store, send, and receive Bitcoin securely. It is known for its speed and low resource usage.
QR Code Signing is a method used in cryptocurrency transactions where a QR code is generated to confirm and sign a transaction, enhancing security and user convenience.
Coin Control is a feature that allows users to manually select which unspent transaction outputs (UTXOs) to use in a transaction, giving more control over privacy and fees.
A Random Number Generator (RNG) produces unpredictable numbers essential for cryptographic security in blockchain, such as generating private keys and nonces.
CoinJoin is a privacy technique in cryptocurrency where multiple users combine their transactions, making it harder to trace individual senders and receivers.
HODL is cryptocurrency slang for holding assets long-term despite price volatility, rather than selling. It originated from a 2013 forum post misspelling 'hold' as 'I AM HODLING.'
Offline Signing refers to signing cryptocurrency transactions on a device that is not connected to the internet, ensuring private keys remain secure from online threats.
Non-extractable keys are private keys generated and stored within a hardware wallet that users cannot export or remove, protecting them from malware or physical attacks.
Blockstream Jade Plus does not use a Secure Element, but relies on other security measures. Your private keys never leave the device and all transactions must be physically confirmed on screen. The firmware is open-source, meaning security researchers worldwide can audit the code for vulnerabilities.
What if Blockstream goes out of business?
Blockstream's firmware is open-source — even if the company disappears, the community can maintain the software. Your seed phrase works with any BIP39-compatible wallet, so your funds are always recoverable.
What if I lose my Blockstream Jade Plus?
Your cryptocurrency is stored on the blockchain, not on the device. If you lose your Blockstream Jade Plus, you can recover full access using your seed phrase on any compatible wallet.
How long will Blockstream Jade Plus receive security updates?
Blockstream actively maintains Blockstream Jade Plus with regular firmware updates.
Is the Blockstream Jade Plus safe without a secure element?
The Jade Plus replaces a secure element with a blind PIN oracle: the seed is encrypted on the device, and the decryption key is split between Jade and an oracle server. Three wrong PINs erase both parts. Blockstream states that a stolen device holds nothing of value to extract. The design is open source and can be inspected, but PIN unlock depends on an oracle, and no third-party audit has been published. It is a different model from a secure element, with its own trade-offs, not a weaker or stronger one by default.
Is the Blockstream Jade Plus open source?
Yes. Blockstream describes the hardware and firmware as fully open source, and the firmware is published on GitHub under GPL3, with some components under their own licences. The blind PIN oracle server is open source too. Reproducible builds allow anyone to check that the official firmware is built from the tagged source code.
Does the Jade Plus have Bluetooth, and can it work air-gapped?
It has USB-C and Bluetooth, but Bluetooth is off by default, and a No-Radio firmware variant is available. For air-gapped use, the camera scans QR codes, and USB drives or SD cards (via a USB-C reader) carry PSBTs and firmware. QR signing works for Bitcoin only; Liquid transactions need USB or Bluetooth. There is no NFC.
What happens if I forget my PIN or the oracle is unavailable?
The PIN cannot be recovered. After three wrong entries, Jade and the oracle delete their secrets, and you restore the wallet from your 12- or 24-word recovery phrase. Because unlocking requires an oracle, Blockstream documents running your own open-source oracle as an alternative to its server, as well as a stateless mode that loads the wallet from a SeedQR without the oracle. The BIP39 phrase can also be restored on other compatible wallets.
Which coins does the Blockstream Jade Plus support?
Bitcoin and the Liquid sidechain, including Liquid-issued assets through the Blockstream app. No other blockchains are supported. Lightning is available in the Blockstream app, but it uses a key held by the app rather than by Jade.
Jade Plus, Jade Core or Jade Classic: which should I choose?
All three are Blockstream devices. The Jade Plus ($149) has a camera, battery and USB-storage air-gap support. Jade Core ($99, launched in April 2026) has no camera and no battery. The original Jade, now sold as Jade Classic at a regular $79, remains on sale with continued firmware support. Blockstream documents air-gapped use through USB drives and SD cards for the Jade Plus only.
Some links on this page are affiliate links. If you purchase through them, I may earn a commission at no additional cost to you. This helps support the site and allows me to continue creating detailed, independent reviews.
Our rating methodology is evolving. Ratings and assessments will be refined as we improve our scoring framework to reflect the most accurate results.
Ready to Secure Your Crypto?
Find the right hardware wallet based on your needs, budget, and security priorities.
