Coldcard vs SafePal S1
- Comparing
- two wallets
- Decided by
- Editorial rating
- Last reviewed
- 2026-08-25
Bitcoin-only air-gapped signer whose seed generation was weakened by a build error from March 2021 until fixed firmware landed on July 31, 2026.
Budget air-gapped signer with no USB data, WiFi, Bluetooth or NFC: every transaction crosses as a scanned QR code.
Verdict: SafePal S1
SafePal S1 rates higher on our rubric: 3.5 against 3.4 for Coldcard.
- Criterion
- Editorial rating
- Coldcard
- 3.4
- SafePal S1
- 3.5
Coldcard and SafePal S1, fact by fact
Every row is from the two reviews as of their review dates, with sources on each. A check marks the side a decidable criterion favours; rows without one are information, not a score.
| Fact | Coldcard | SafePal S1 |
|---|---|---|
| Editorial rating | 3.4 | 3.5 (favoured on this row) |
| Status | Caution: see the review | Available |
| Made by | Coinkite | SafePal |
| Price | $189 | Not published |
| Who holds the keys | self-custodial, keys held behind two secure elements from different vendors, signing air-gapped by choice | self-custodial, keys held offline on a device with no USB data, WiFi, Bluetooth or NFC connection |
| Bitcoin-only | Yes | No |
| Runs on | Windows, macOS, Linux | iOS, Android |
| Screen | Q: 3.2 inch LCD with a full keyboard. Mk5: bright OLED with a numeric keypad | Small color screen with a camera for reading QR codes |
| Connectivity | USB-C, microSD, NFC, QR scanner on the Q and a virtual disk mode, every path off by default | QR codes only: no USB data, WiFi, Bluetooth or NFC |
| Released | Coinkite has made Coldcard since 2017; the Q and the Mk5 are the current models | Not stated |
| Countries on the maker's list | No published list | No published list |
| Last reviewed | 2026-08-25 | 2026-08-25 |
Pros and cons, side by side
Coldcard
What works
- Bitcoin only, which keeps every other chain's parsing code off the device
- Two secure elements from independent vendors, so one chip flaw is not enough
- Air-gapped signing over QR, microSD, NFC or virtual disk, with all data paths disabled by default
- Reproducible open source firmware that advanced users can build and verify themselves
- Duress PIN, brick PIN and login countdown for coercion scenarios
- Coinkite's advisory published the technical cause, the entropy estimates and step by step migration instructions
What to watch
- A March 2021 build error weakened seed generation for over five years, and updating the firmware does not repair an affected seed
- Migrating means generating a new seed and moving every coin, which costs an on-chain transaction and real care
- Coinkite publishes no loss total, so the scale rests on outside estimates from TRM Labs and Galaxy Research
- Steeper learning curve than a Ledger or a Trezor, with no companion app of its own
- Coinkite publishes no shipping country policy at all
SafePal S1
What works
- No USB data, WiFi, Bluetooth or NFC: the only channel in or out is a QR code on a camera
- SafePal's budget cold storage line, positioned below the newer Bluetooth X1
- Broad asset support with swap, buy and DeFi features for people who hold more than bitcoin
- SafePal accepted an outside security report from Kraken Security Labs and shipped a fix
What to watch
- Not bitcoin-only, and the companion app is a broad crypto app rather than a focused signer
- The February 2021 Kraken disclosure showed the firmware update check could be downgraded without the user noticing
- Verification happens on a small screen, which makes careful address checking slower
- SafePal publishes no shipping country policy, pointing at a reseller network instead
Frequently asked questions
Is Coldcard or SafePal S1 better?
SafePal S1 rates higher on our rubric: 3.5 against 3.4 for Coldcard. The rating follows the product rubric published on our about page; the rows above set custody, price and platforms side by side so you can check it.
Is Coldcard or SafePal S1 bitcoin-only?
Coldcard is bitcoin-only; SafePal S1 supports other assets too. Multi-asset: bitcoin among a long list of chains and tokens, managed through the SafePal app
Does Coldcard or SafePal S1 carry a warning?
Coldcard: A build error introduced in a March 2021 firmware migration left seed generation drawing on a software pseudorandom number generator instead of the hardware one, and attackers found it before Coinkite did. Coinkite published fixed firmware for every affected model and updated its advisory on August 1, 2026, but updating does not repair a seed already generated on affected firmware: those owners have to create a new seed and move their coins.
The full reviews: Coldcard and SafePal S1, each with its sources, and every wallet we review.
More comparisons
Every other head-to-head Coldcard or SafePal S1 appears in.
- BitBox02 vs Coldcard
- Blockstream Jade vs Coldcard
- Coldcard vs Foundation Passport
- Coldcard vs KeepKey
- Coldcard vs Keystone 3 Pro
- Coldcard vs Ledger Flex
- Coldcard vs Ledger Nano S Plus
- Coldcard vs Ledger Stax
- Coldcard vs Ledger Nano X
- Coldcard vs OneKey
- Coldcard vs Tangem Wallet
- Coldcard vs Trezor Safe 3
- Coldcard vs Trezor Safe 5
- BitBox02 vs SafePal S1
- Blockstream Jade vs SafePal S1
- Foundation Passport vs SafePal S1
- KeepKey vs SafePal S1
- Keystone 3 Pro vs SafePal S1
- Ledger Flex vs SafePal S1
- Ledger Nano S Plus vs SafePal S1
- Ledger Stax vs SafePal S1
- Ledger Nano X vs SafePal S1
- OneKey vs SafePal S1
- SafePal S1 vs Tangem Wallet
- SafePal S1 vs Trezor Safe 3
- SafePal S1 vs Trezor Safe 5

