Premium, fully air-gapped hardware wallet with QR-only signing, a biometric sensor, an EAL7-certified ProvenCore OS and a steel GRAPHENE backup.
We may earn a commission from purchases through affiliate links. This does not affect our ratings. Affiliate Disclosure
The Ngrave Zero ($398, 2021) is a fully air-gapped multi-coin wallet: it has no data USB, Bluetooth, NFC or WiFi and signs only by scanning QR codes with its built-in camera. Its operating system is built on the Common Criteria EAL7-certified ProvenCore TEE (the secure element itself is an EAL5+ STSAFE-A100), and it adds a fingerprint sensor used in its proprietary "Perfect Key" seed generation plus the steel GRAPHENE backup. The main caveat is that the firmware is closed-source and fails WalletScrutiny’s reproducibility checks. It suits security-maximalist cold storage; users who prize open-source verifiability or fast everyday signing should look elsewhere.
Avoid buying from unofficial marketplaces — counterfeit risk.
Hardware & firmware protection
Backup & restore options
User experience & interface
Supported coins & integrations
Anonymity & data protection
Weighted average score
How we rate wallets
Seen enough?
Ngrave Zero · From $398 · Rated 61/100
Affiliate link — we may earn a commission at no extra cost to you. Learn more about our affiliate policy
Ngrave Zero — Hardware Wallet manufacturer: Ngrave (2021). Secure Element: EAL5+ (STSAFE-A100 secure element); device OS is EAL7-certified (ProvenCore TEE). Supported Networks: 15+ networks.
Seen the full specs? Check the latest price and availability.
Ngrave Zero · From $398 · Rated 61/100
Affiliate link — we may earn a commission at no extra cost to you. Learn more about our affiliate policy
The Zero’s headline is its operating system: the Common Criteria EAL7-certified ProvenCore TEE, the highest assurance level for a consumer device OS. Note the distinction — EAL7 applies to the operating system, while the discrete secure element is a customized STSAFE-A100 (EAL5+) on an STM32MP157C MPU with secure boot and non-extractable keys.
Being 100% air-gapped removes the remote attack surface entirely, and tamper-detection sensors wipe the device if it is opened. The significant caveat: the firmware is closed-source and does not provide reproducible builds, so its security must largely be taken on trust and certification rather than public verification.
The Zero generates a proprietary "Perfect Key" that combines device entropy with the biometric sensor, producing a standard 24-word BIP-39 seed under the hood. A BIP-39 passphrase and hidden wallets are supported; there is no Shamir Secret Sharing.
For physical backup, Ngrave sells GRAPHENE, a stainless-steel two-plate system (around $148, or bundled in a Combo Pack). The seed can also be written down as a normal 24-word phrase.
A large 4-inch color touchscreen and a fingerprint sensor make on-device verification and unlocking straightforward, and the IP55 metal body is durable. Initial setup takes around 20 minutes.
The trade-off is speed: every transaction is exchanged as QR codes between the device and the Ngrave Liquid app, which is slower and more deliberate than a USB or Bluetooth connection.
The Zero is multi-coin, with native support for roughly 15 base networks (Bitcoin, Ethereum and ERC-20 tokens, Litecoin, Bitcoin Cash, Dogecoin, Dash) and 3,500+ assets in total. EVM dApp and smart-contract access is provided through MetaMask and Rabby integration rather than a built-in WalletConnect.
It pairs with the Ngrave Liquid app on mobile and desktop. Multisig support is basic and coordinated manually, which suits storage more than active multisig setups.
The air-gapped design gives the Zero the strongest wireless posture of any wallet here: with no Bluetooth, NFC, WiFi or data USB, there is effectively no wireless attack or fingerprinting surface. No account registration is required and the device works fully offline.
The limit is verifiability: because the firmware is closed-source, its privacy and data-handling behavior cannot be independently audited the way an open-source wallet’s can.
At $398 (more with the GRAPHENE backup) the Zero is among the most expensive consumer wallets. You are paying for the security posture, not openness:
The Zero is justified only if an EAL7 OS, biometrics and a total air-gap are your priorities.
The Ngrave Zero is one of the most security-forward consumer wallets available: a fully air-gapped, biometric device with an EAL7-certified operating system and a steel backup. That posture comes at the cost of openness, price and convenience.
Buy this wallet if:
Look elsewhere if:
The Ngrave Zero is one of the most security-forward consumer wallets available: a fully air-gapped, biometric device with an EAL7-certified operating system and a steel backup. That posture comes at the cost of openness, price and convenience.
Buy this wallet if:
Look elsewhere if:
We may earn a commission if you purchase through our links. This doesn't affect our editorial independence.
Impermanent loss happens when asset prices in a liquidity pool diverge from external markets, reducing the value of liquidity providers' holdings compared to simply holding the assets.
Read full definitionEAL Certification (Evaluation Assurance Level) from Common Criteria rates the security of hardware components, like secure chips in crypto hardware wallets. Higher levels, such as EAL5+ or EAL6+, indicate stronger resistance to attacks.
Read full definitionA Trusted Execution Environment (TEE) is a secure area in a processor that protects sensitive crypto operations and private keys from external access.
Read full definitionSecure Boot is a security feature that ensures only trusted software runs on a device by verifying its integrity during startup, preventing unauthorized code execution in crypto systems.
Read full definitionNon-extractable keys are private keys generated and stored within a hardware wallet that users cannot export or remove, protecting them from malware or physical attacks.
Read full definitionRemote Key Extraction is a vulnerability where attackers steal private keys from hardware wallets remotely via exploits, without physical access.
Read full definitionReproducible Builds refer to the process where the same source code consistently produces identical binary outputs, ensuring verifiable and trustworthy software in blockchain and crypto projects.
Read full definitionEntropy is the randomness used to generate secure cryptographic keys or seeds in blockchain and cryptocurrency systems.
Read full definitionBIP39 is a standard for generating mnemonic seed phrases that are used to create deterministic wallets and securely back up cryptocurrency private keys.
Read full definitionA passphrase is an additional security layer for cryptocurrency wallets, acting as a 25th word in the BIP39 seed phrase, protecting access to hidden wallets.
Read full definitionShamir Secret Sharing (SSS) divides a secret, like a crypto wallet seed, into multiple shares. A threshold number of shares reconstructs it, enhancing security as in SLIP-39 backups.
Read full definitionA backup in cryptocurrency is a secure copy of a wallet's seed phrase or private keys. It enables recovery of funds if the original wallet is lost or damaged.
Read full definitionFirmware Attestation is the process of verifying the authenticity of a device's firmware to ensure it has not been tampered with, commonly used in hardware wallets for security.
Read full definitionUTXO (Unspent Transaction Output) is a unit of cryptocurrency from a previous transaction that remains unspent and serves as input for new transactions in blockchains like Bitcoin.
Read full definitionBase is an Ethereum Layer 2 network developed by Coinbase. It uses optimistic rollups for scalable, low-cost transactions.
Read full definitionBitcoin (BTC) is the first decentralized cryptocurrency, launched in 2009. It uses blockchain technology for secure, peer-to-peer digital transactions without intermediaries.
Read full definitionEthereum is a decentralized blockchain platform that enables smart contracts and decentralized applications (dApps). Its native cryptocurrency is Ether (ETH).
Read full definitionERC-20 Token is a fungible token standard on the Ethereum blockchain. It defines rules for creating, transferring, and managing tokens uniformly.
Read full definitionLitecoin (LTC) is a peer-to-peer cryptocurrency forked from Bitcoin in 2011, offering faster block times (2.5 minutes) and using the Scrypt hashing algorithm.
Read full definitionDogecoin (DOGE) is a cryptocurrency launched in 2013 as a joke based on the Doge meme. It uses proof-of-work on a Litecoin fork with unlimited supply.
Read full definitionWalletConnect is a protocol that enables secure communication between decentralized applications (dApps) and mobile wallets through QR code scanning or deep linking.
Read full definitionMultisig (multi-signature) is a security feature that requires multiple private keys to authorize a transaction, enhancing protection against unauthorized access in blockchain networks.
Read full definitionA metal backup is a durable metal plate or device engraved with a cryptocurrency wallet's seed phrase, providing fireproof and waterproof protection for offline key storage.
Read full definitionCold storage refers to keeping cryptocurrency private keys offline, away from the internet, to protect them from hacks or unauthorized access.
Read full definitionHODL is cryptocurrency slang for holding assets long-term despite price volatility, rather than selling. It originated from a 2013 forum post misspelling 'hold' as 'I AM HODLING.'
Read full definitionData in this review can be verified from these sources.
Risk Score: 95/100
Closed-source firmware
Closed-source firmware - cannot be independently verified Learn more →
Based on specifications, price, and ratings
| Feature | Ngrave Zero | Ledger Stax | Foundation Passport Prime | OneKey Classic 1S Pure |
|---|---|---|---|---|
| Price | $398 | $399 | $349 | $79 |
| Open Source | ||||
| Bluetooth | ||||
| Battery | ||||
| Air-Gapped | ||||
| Security Rating | 73/100 | 89/100 | 72/100 | 95/100 |
| Usability Rating | 71/100 | 74/100 | 74/100 | 46/100 |
No. The Zero’s firmware is closed-source and does not offer reproducible builds — it fails WalletScrutiny’s verification. Ngrave instead emphasizes the EAL7 certification of its ProvenCore operating system.
No — the EAL7 certification applies to the ProvenCore operating system (TEE), not the chip. The discrete secure element is a customized STSAFE-A100, which is Common Criteria EAL5+.
GRAPHENE is Ngrave’s stainless-steel, two-plate cryptographic backup for the recovery seed, sold separately (around $148) or bundled with the Zero in a Combo Pack.
Some links on this page are affiliate links. If you purchase through them, I may earn a commission at no additional cost to you. This helps support the site and allows me to continue creating detailed, independent reviews.
Our testing methodology is evolving. Ratings and assessments will be refined as we improve our scoring framework to reflect the most accurate results.
Official website • Secure Element • Security audited
View Best PriceAffiliate link — we may earn a commission at no extra cost to you. Learn more about our affiliate policy
